CVE ID :CVE-2026-103957 Published : Oct. 2, 2026, 7:06 p.m. | 14 minutes ago Description :Server-side request forgery in the OAuth2 discovery handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the access token of another user of the deployment and to...

#Sicherheitslücke #Cloud

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-103957 - Server-side request forgery in the OAuth2 discovery handling in Loom for AWS

VERWANDTEARTIKEL

CVE-2026-97644 - Groundhogg <= 4.9 - Authenticated (Sales Person+) Privilege Escalation via Contact Identity Rebinding leading to Administrator Account Takeover to 'user_id' Parameter (v3 /contacts) chained with v4 /emails/test

CVE-2026-92536 - Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.17.4 - Authenticated (Subscriber+) Sensitive Information Exposure via Shortcode Injection via Nickname and Biographical Info Profile Fields

Critical GitLab AI Gateway Vulnerability Enables Remote Code Execution Attacks

Critical Dell Container Storage Flaws Let Unauthenticated Attackers Gain Full Administrative Control

Citrix NetScaler Keeps Rebooting Following the 0-Day Patch

Debian has Patched 1,313 Flaws in Massive Update Leading to DoS and Privilege Escalation Attacks