CVE ID :CVE-2026-49410 Published : Oct. 16, 2026, 10:17 p.m. | 1 hour, 17 minutes ago Description :OpenHuman is an open-source agent harness available as a desktop application and Rust library. Versions before 0.56.0 allow cross-site request forgery against the unauthenticated GET...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-49410 - OpenHuman /auth/telegram CSRF allows attacker-controlled session implantation

VERWANDTEARTIKEL

CVE-2026-111823 - Mage OSS OAuth Authentication Bypass Vulnerability

CVE-2026-96626 - Arcane: Container-registry credential exfiltration via URL repoint + test to attacker host

CVE-2026-96627 - Arcane: Delegated users:update permission allows admin account takeover via password reset (no privilege-hierarchy check)

CVE-2026-96620 - Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution

CVE-2026-30971 - ZoneMinder: Authenticated RCE via command injection in monitor Device Path

CVE-2026-61726 - Tandoor Recipes: Private recipe authorization bypass via /api/step/ - read and modify another Space member's private recipe content