Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-91039 | not reported | — | No | Authentication Bypass by Spoofing vulnerability in team-alembic ash_authentication allows an attacker who operates one identity-provider con... | 2026-09-18 |
| CVE-2026-88952 | not reported | — | No | Improper Authentication vulnerability in team-alembic AshAuthentication allows an attacker to be signed in as another user by linking an OAu... | 2026-09-18 |
| CVE-2026-86533 | not reported | — | No | Insufficient Session Expiration vulnerability in team-alembic AshAuthentication and AshAuthentication Phoenix allows a revoked session to re... | 2026-09-18 |
| CVE-2026-86522 | not reported | — | No | Improper Output Neutralization for Logs vulnerability in team-alembic AshAuthentication allows an unauthenticated attacker to forge applicat... | 2026-09-18 |
| CVE-2026-85500 | not reported | — | No | Authentication Bypass by Primary Weakness vulnerability in team-alembic AshAuthentication allows an unconfirmed user to obtain a session, de... | 2026-09-18 |
| CVE-2026-82761 | not reported | — | No | Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in team-alembic AshAuthentication allows an attacker holding a leaked magic... | 2026-09-18 |
| CVE-2026-82760 | not reported | — | No | Inefficient Algorithmic Complexity vulnerability in team-alembic AshAuthentication allows an unauthenticated attacker to exhaust CPU and mem... | 2026-09-18 |
| CVE-2026-82759 | not reported | — | No | Use of a One-Way Hash with a Predictable Salt vulnerability in team-alembic AshAuthentication allows readers of the audit store to recover t... | 2026-09-18 |
| CVE-2026-82723 | not reported | — | No | Insertion of Sensitive Information into Log File vulnerability in team-alembic AshAuthentication allows disclosure of user password digests... | 2026-09-18 |
| CVE-2026-82685 | not reported | — | No | Authorization Bypass Through User-Controlled Key vulnerability in team-alembic AshAuthentication allows an authenticated attacker to overwri... | 2026-09-18 |
| CVE-2026-81637 | not reported | — | No | Insufficient Session Expiration vulnerability in team-alembic AshAuthentication allows an attacker who obtains a victim's OAuth2 state value... | 2026-09-18 |
| CVE-2026-81632 | not reported | — | No | Use of HTTP Request With Sensitive Query String vulnerability in team-alembic AshAuthenticationPhoenix allows someone able to read access lo... | 2026-09-18 |
| CVE-2026-80218 | not reported | — | No | Improper Authentication vulnerability in team-alembic AshAuthentication allows an attacker holding a sign-in token for one authenticated res... | 2026-09-18 |
| CVE-2026-78223 | not reported | — | No | Improper Verification of Cryptographic Signature vulnerability in team-alembic AshAuthentication allows a caller of the token revocation act... | 2026-09-18 |
| CVE-2026-12646 | high | 8.8 | No | A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary c... | 2026-09-18 |
| CVE-2026-12647 | high | 8.8 | No | A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary c... | 2026-09-18 |
| CVE-2026-12650 | high | 8.8 | No | A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute... | 2026-09-18 |
| CVE-2026-12648 | high | 8.8 | No | A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute... | 2026-09-18 |
| CVE-2026-12651 | high | 8.8 | No | A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute... | 2026-09-18 |
| CVE-2026-12744 | critical | 9.8 | No | A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execu... | 2026-09-18 |