Unleash: Missing await on permission check + cross-project IDOR in admin API
osv · CVE-2026-77426
npm: unleash-server
No access to your tenant or devices. Every item links to its source. What this means
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
osv · CVE-2026-77426
npm: unleash-server
osv · CVE-2026-77425
npm: unleash-server
osv · CVE-2026-75510
npm: @novu/js
osv · CVE-2026-76910
npm: unleash-server
osv ·
crates.io: stack-graphs
osv ·
crates.io: stack_collections
cve-program ·
Vendor product: Leave Management System
cve-program ·
Vendor product: Cisco Identity Services Engine Software
cve-program ·
Vendor product: Cisco Identity Services Engine Software
cve-program ·
Vendor product: soupsieve
cve-program ·
cve-program ·
Vendor product: TCP/IP Stack MQTT
osv · CVE-2026-63116
npm: @deepstream/server
cve-program ·
Vendor product: SAP Extended Passport (EPP) Processing
cve-program ·
Vendor product: ALE
cve-program ·
Vendor product: ALE
cve-program ·
Vendor product: ALE
cve-program ·
Vendor product: ALE
osv · CVE-2026-61670
crates.io: microsandbox
osv · CVE-2026-62985
npm: request-filtering-agent
osv · BIT-golang-2023-54365 · CVE-2023-54365
Go: github.com/traefik/traefik · Go: github.com/traefik/traefik
osv ·
Go: github.com/traefik/traefik
cve-program ·
Vendor product: core
cve-program ·
Vendor product: psd-tools
cve-program ·
Vendor product: ALE
cve-program ·
Vendor product: mcp-atlassian
cve-program ·
Vendor product: Observability Self-Hosted
cve-program ·
Vendor product: Dream Machines · Vendor product: Enterprise Firewalls · Vendor product: Dream Routers
cve-program ·
Vendor product: Dream Machines · Vendor product: Enterprise Firewalls · Vendor product: Dream Routers
cve-program ·
Vendor product: Dream Machines · Vendor product: Enterprise Firewalls · Vendor product: Dream Routers
cve-program ·
Vendor product: Dream Machines · Vendor product: Enterprise Firewalls · Vendor product: Dream Routers
cve-program ·
Vendor product: Dream Machines · Vendor product: Enterprise Firewalls · Vendor product: Dream Routers
cve-program ·
Vendor product: Dream Machines · Vendor product: Enterprise Firewalls · Vendor product: Dream Routers
cve-program ·
https://crates.io/crates/tauri-plugin-updater: tauri-plugin-updater
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.