CVE ID :CVE-2026-106488 Published : Oct. 6, 2026, 8:38 p.m. | 50 minutes ago Description :Backstage is an open framework for building developer portals. Prior to 0.4.20, the @backstage/plugin-auth-backend-module-oidc-provider package is affected by improper authentication in the oidc...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-106488 - Backstage: Improper authentication in the OIDC provider

VERWANDTEARTIKEL

Ninja Forms plugin flaw exploited to hack WordPress sites

CVE-2026-106486 - Backstage: Improper filesystem validation in Bitbucket pull-request scaffolder actions

CVE-2026-105812 - Code injection via unencoded configuration values during Python code generation in Bedrock AgentCore Starter Toolkit agent import

CVE-2026-106459 - Backstage: Improper input validation in Sentry scaffolder actions

CVE-2026-94114 - Apache Commons BCEL: Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser

CVE-2026-79805 - Authenticated Path Traversal Vulnerability Leads to Unauthorized File Access and Modification in ClearPass Policy Manager