It was discovered that Sympa did not properly validate input on the generic SSO login. A remote attacker could possibly use this issue to perform a path traversal attack and gain unintended access.

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

USN-8552-1: Sympa vulnerability

VERWANDTEARTIKEL

CVE-2026-62948 - OpenWrt odhcpd/LuCI: unauthenticated DHCPv6 client can inject lease-file lines via FQDN hostname → stored XSS in the LuCI admin UI

CVE-2026-59258 - immich < 3.0.3 Shared Album Editor Ownership Takeover via updateUser

CVE-2026-62389 - ws < 8.21.1 Default maxFragments Allows Memory Exhaustion DoS

CVE-2026-53517 - Better Auth OAuth Provider: Refresh Token Rotation Race Condition Allows Concurrent Replay and Token Family Forking

CVE-2026-58658 - GPUStack Unauthenticated Information Disclosure via Worker Endpoints

CVE-2026-58659 - PyTorch Lightning Arbitrary Code Execution via _instantiator Hyperparameter