CVE ID :CVE-2026-122267 Published : Nov. 5, 2026, 10:17 p.m. | 51 minutes ago Description :MinIO Signature V4 verification before RELEASE.2026-09-22T19-25-18Z accepts unsigned x-amz-* headers, letting a presigned PUT URL be escalated into a cross-bucket read. Severity: 8.8 | HIGH ...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-122267 - MinIO Signature V4 Authentication Bypass Vulnerability

VERWANDTEARTIKEL

CVE-2026-58273 - Rucio: Authorisation Bypass on REST API endpoint for signing URLs

CVE-2026-33944 - Dolibarr: SQL Injection in societe/class/societe.class.php via localtax1_value parameter

CVE-2026-119757 - BTCPay Server < 2.4.2 LND Macaroon Credential File Disclosure

CVE-2026-111493 - Lack of authentication and authorization in the Images.ashx endpoint in MatchPoint

CVE-2026-111494 - Incorrect validation of TLS certificates in the MatchPoint Android app

CVE-2026-111489 - A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform