CVE ID :CVE-2026-55883 Published : July 10, 2026, 10:16 p.m. | 16 minutes ago Description :Tilt defines dev environments as code for microservice apps on Kubernetes. From 0.24.0 through 0.37.3, the Tilt HUD WebSocket at /ws/view is gated by a CSRF token, but the token is served by the...

#Sicherheitslücke #Cloud

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-55883 - Tilt: Cross-site WebSocket hijacking of the Tilt HUD stream

VERWANDTEARTIKEL

CVE-2026-55882 - Tilt: Unauthenticated pprof debug endpoints on the Tilt HUD server

CVE-2026-55884 - Tilt: Missing authentication on the network-exposed Tilt HUD server

CVE-2026-57584 - Phalcon: Catastrophic backtracking (ReDoS) in the default Phalcon Router route lead to remote unauthenticated DoS

CVE-2026-55852 - Frappe: TarSlip RCE in Package Import

CVE-2026-49213 - TypeBot: SSRF protection bypass via IPv6 unspecified address in Typebot HTTP request execution

CVE-2026-52747 - ModSecurity: Multipart form-data parser silently strips embedded line breaks from form-field values, enabling request-body inspection bypass