🚨 CVE-2026-20354
Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to recover plain text from encrypted email messages.

These vulnerabilities are due to insufficient validation of message integrity. An attacker could exploit these vulnerabilities by using a machine-in-the-middle technique to intercept and modify traffic between email gateways. A successful exploit could allow the attacker to obtain plaintext content from the encrypted communication.

🎖@cveNotify

🚨 CVE-2026-20355
Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to recover plain text from encrypted email messages.

These vulnerabilities are due to insufficient validation of message integrity. An attacker could exploit these vulnerabilities by using a machine-in-the-middle technique to intercept and modify traffic between email gateways. A successful exploit could allow the attacker to obtain plaintext content from the encrypted communication.

🎖@cveNotify

🚨 CVE-2023-20579
Improper
Access Control in the AMD SPI protection feature may allow a user with Ring0
(kernel mode) privileged access to bypass protections potentially resulting in
loss of integrity and availability.

🎖@cveNotify

🚨 CVE-2026-7680
A weakness has been identified in jsbroks COCO Annotator up to 0.11.1. Affected is an unknown function of the file backend/webserver/api/datasets.py of the component Data Endpoint. Executing a manipulation of the argument folder can lead to path traversal. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

🎖@cveNotify

🚨 CVE-2026-49869
Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, AuthenticationFilter in Kestra OSS uses request.getPath().endsWith("/configs") to whitelist the public configuration endpoint from Basic Auth. Because the check is a suffix match rather than an exact path match, any API path whose last segment is configs bypasses authentication entirely. An unauthenticated remote attacker can exploit this to create and execute arbitrary workflows without credentials. Because Kestra ships with script execution plugins (plugin-script-shell, plugin-script-python, etc.) enabled by default, this directly results in unauthenticated Remote Code Execution as root inside the Kestra worker container. This vulnerability is fixed in 1.0.45 and 1.3.21.

🎖@cveNotify

🚨 CVE-2026-59822
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, LiteLLM's MCP Streamable HTTP endpoint allowed an unauthenticated attacker to use a fabricated Authorization header to trigger an OAuth2 passthrough fallback path that replaced failed LiteLLM key validation with an empty UserAPIKeyAuth() object, allowing requests to reach MCP tooling without a valid LiteLLM key. This issue is fixed in version 1.84.0.

🎖@cveNotify

🚨 CVE-2026-15809
A flaw was found in CRI-O. The fix for a previous vulnerability (CVE-2022-4318) was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable.

🎖@cveNotify

🚨 CVE-2026-66375
A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions.

🎖@cveNotify

🚨 CVE-2026-66376
Credentials for a deleted user may remain valid for a short period under specific conditions.

🎖@cveNotify

🚨 CVE-2026-66377
An unauthenticated user may access restricted repository information under specific conditions.

🎖@cveNotify

🚨 CVE-2026-66378
An authenticated user without repository read permission may access private NuGet metadata under specific conditions.

🎖@cveNotify

🚨 CVE-2026-66379
An authenticated user may view private Puppet module metadata without repository read access.

🎖@cveNotify

🚨 CVE-2026-66380
An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions.

🎖@cveNotify

🚨 CVE-2026-66381
A repository reader with cache-deploy permission may access content outside a configured upstream path under specific conditions.

🎖@cveNotify

🚨 CVE-2026-66382
An authenticated user may write files outside the intended Artifactory work directory under specific conditions.

🎖@cveNotify

🚨 CVE-2026-68752
A Project Resource Manager may gain broader administrative privileges under specific conditions.

🎖@cveNotify

🚨 CVE-2026-68753
An unauthenticated user may access restricted Artifactory content when a credentialed remote repository is configured in a specific way.

🎖@cveNotify

🚨 CVE-2026-68754
A repository publisher without delete permission may modify protected package content under specific conditions.

🎖@cveNotify

🚨 CVE-2026-68755
A bundle writer may create misleading release promotion information under specific conditions.

🎖@cveNotify

🚨 CVE-2026-68756
A party with write access to stored session data may affect JFrog Artifactory under specific conditions.

🎖@cveNotify

🚨 CVE-2026-68757
A user with access to a valid SAML response may impersonate another user under specific conditions.

🎖@cveNotify