CVE-2015-2026
published 2015-10-04CVE-2015-2026: Cross-site request forgery (CSRF) vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 allows remote authenticated users…
PriorityP422medium6CVSS 2.0
AVNACMAuSCPIPAP
EPSS
0.54%
44.5th percentile
Cross-site request forgery (CSRF) vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | websphere_extreme_scale | — | — |
| ibm | websphere_extreme_scale | — | — |
| ibm | websphere_extreme_scale | — | — |
CVSS provenance
nvdv2.06.0MEDIUMAV:N/AC:M/Au:S/C:P/I:P/A:P
ghsa3.5LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
OpenStack Neutron: Neutron port RBAC policy bypass allows project managers to set trusted device owners on shared networks
ghsa·2026-06-04·CVSS 3.5
CVE-2026-50266 [LOW] CWE-863 OpenStack Neutron: Neutron port RBAC policy bypass allows project managers to set trusted device owners on shared networks
OpenStack Neutron: Neutron port RBAC policy bypass allows project managers to set trusted device owners on shared networks
In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another project and set device_owner to a value that has "network:" at the beginning ("network:dhcp" for example). The default port RBAC policies incorrectly included PROJECT_MANAGER without requiring network ownership, allowing any project manager to obtain trusted network-service port behavior on shared networks. Depending on backend and deployment, this can bypass anti-spoofing and security group protections, enabling DHCP, MAC, or IP spoofing against other tenants on the shared network. This is a regression of CVE-2015-5240 (OSSA-2015-018).
GHSA
GHSA-7753-jvjf-pfjp: Cross-site request forgery (CSRF) vulnerability in IBM WebSphere eXtreme Scale 7
ghsa_unreviewed·2022-05-17
CVE-2015-2026 [MEDIUM] CWE-352 GHSA-7753-jvjf-pfjp: Cross-site request forgery (CSRF) vulnerability in IBM WebSphere eXtreme Scale 7
Cross-site request forgery (CSRF) vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.
Citrix
Citrix Security Bulletin CTX220112
vendor_citrix·CVSS 7.5
CVE-2015-7704 [HIGH] Citrix Security Bulletin CTX220112
Citrix Security Bulletin CTX220112
CVE References: CVE-2015-7704, CVE-2015-7705, CVE-2017-5572, CVE-2017-5573, CVE-2025-12101, CVE-2025-62626, CVE-2026-23554, CVE-2026-3055, CVE-2026-4368, CVE-2026-4397
Affected Products: Citrix ADM, Citrix Hypervisor, Citrix Virtual Apps and Desktops, Endpoint Management, NetScaler ADC, NetScaler Gateway, XenServer
Citrix
Citrix Security Bulletin CTX200378
vendor_citrix·CVSS 5.9
CVE-2015-3642 [MEDIUM] Citrix Security Bulletin CTX200378
Citrix Security Bulletin CTX200378
CVE References: CVE-2015-3642, CVE-2025-12101, CVE-2025-62626, CVE-2026-23554, CVE-2026-3055, CVE-2026-4368, CVE-2026-4397
Affected Products: Citrix ADM, Citrix Hypervisor, Citrix Virtual Apps and Desktops, Endpoint Management, NetScaler ADC, NetScaler Gateway, XenServer
Citrix
Citrix Security Bulletin CTX200584
vendor_citrix·CVSS 5.0
CVE-2015-2682 [MEDIUM] Citrix Security Bulletin CTX200584
Citrix Security Bulletin CTX200584
CVE References: CVE-2015-2682, CVE-2015-2683, CVE-2025-12101, CVE-2025-62626, CVE-2026-23554, CVE-2026-3055, CVE-2026-4368, CVE-2026-4397
Affected Products: Citrix ADM, Citrix Hypervisor, Citrix Virtual Apps and Desktops, Endpoint Management, NetScaler ADC, NetScaler Gateway, XenServer
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-18393 ffmpeg: ffmpeg: Heap buffer overflow in tdsc_load_cursor() via CUR_FMT_MONO cursor
bugzilla·2026-08-20·CVSS 5.4
CVE-2026-18393 [MEDIUM] CVE-2026-18393 ffmpeg: ffmpeg: Heap buffer overflow in tdsc_load_cursor() via CUR_FMT_MONO cursor
CVE-2026-18393 ffmpeg: ffmpeg: Heap buffer overflow in tdsc_load_cursor() via CUR_FMT_MONO cursor
FFmpeg contains a heap buffer overflow in libavcodec/tdsc.c, function
tdsc_load_cursor(), when processing CUR_FMT_MONO cursors. The mono path
advances dst by 4 * FFALIGN(cursor_w, 32) in the inner loops, then
incorrectly applies an additional row-end adjustment
(dst += ctx->cursor_stride - ctx->cursor_w * 4) copied from the BGRA/RGBA
branches. For cursor widths not divisible by 32, this drifts past the
allocation backing ctx->cursor. Present since the decoder's initial commit
(2015-03); fixed upstream in commit 242ff799c75f (2026-05-01), cherry-picked
to all active release branches. CWE-787.
Bugzilla
CVE-2026-72284 kernel: KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs
bugzilla·2026-08-15·CVSS 7.1
CVE-2026-72284 [HIGH] CVE-2026-72284 kernel: KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs
CVE-2026-72284 kernel: KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs
In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs
Ignore KVM's internal "service pending PV EOI" request if the vCPU has
disabled PV EOIs since the request was made. Asserting that PV EOIs are
enabled can fail if reading guest memory in pv_eoi_get_user() fails, i.e.
if pv_eoi_test_and_clr_pending() bails early, *and* the vCPU also disables
PV EOIs.
kernel BUG at arch/x86/kvm/lapic.c:3338!
Oops: invalid opcode: 0000 [#1] SMP
CPU: 4 UID: 1000 PID: 890 Comm: pv_eoi_test Not tainted 7.0.0-d585aa5894d8-vm #337 PREEMPT
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015
RIP: 0010:kvm_lapic_
Bugzilla
CVE-2026-50266 openstack-neutron: OpenStack Neutron: Network spoofing via incorrect port RBAC policies
bugzilla·2026-06-04·CVSS 3.5
CVE-2026-50266 [LOW] CVE-2026-50266 openstack-neutron: OpenStack Neutron: Network spoofing via incorrect port RBAC policies
CVE-2026-50266 openstack-neutron: OpenStack Neutron: Network spoofing via incorrect port RBAC policies
In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another project and set device_owner to a value that has "network:" at the beginning ("network:dhcp" for example). The default port RBAC policies incorrectly included PROJECT_MANAGER without requiring network ownership, allowing any project manager to obtain trusted network-service port behavior on shared networks. Depending on backend and deployment, this can bypass anti-spoofing and security group protections, enabling DHCP, MAC, or IP spoofing against other tenants on the shared network. This is a regression of CVE-2015-5240 (OSSA-2015-018).
http://www-01.ibm.com/support/docview.wss?uid=swg1PI44098http://www-01.ibm.com/support/docview.wss?uid=swg1PI44105http://www-01.ibm.com/support/docview.wss?uid=swg21966044http://www-01.ibm.com/support/docview.wss?uid=swg1PI44098http://www-01.ibm.com/support/docview.wss?uid=swg1PI44105http://www-01.ibm.com/support/docview.wss?uid=swg21966044
2015-10-04
Published