Known Vulnerabilities for Login-server by Pivotal Software
Listed below are 2 of the newest known vulnerabilities associated with "Login-server" by "Pivotal Software".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-63770 json | Glance through 0.8.5 contains an IP address spoofing vulnerability in the authentication handler that allows unauthenticated ... | Not Provided | 2026-07-20 | 2026-07-23 |
| CVE-2026-62236 json | grav-plugin-login before 3.8.11 contains a cross-site request forgery (CSRF) vulnerability in the login.regenerate2FASecret f... | Not Provided | 2026-07-17 | 2026-07-17 |
| CVE-2026-61501 json | Rejetto HFS 3.0.0 through 3.2.0 renders log entries in the administration panel as HTML without sanitization. A remote unauth... | Not Provided | 2026-07-13 | 2026-07-14 |
| CVE-2026-59099 json | Apereo CAS 7.3.0 before 8.0.0-RC6 contains a cryptographic vulnerability that allows remote unauthenticated attackers to reco... | Not Provided | 2026-07-02 | 2026-07-14 |
| CVE-2026-57850 json | RustDesk before 1.4.9 does not enforce a session's authorized connection scope on the server side, so a peer granted a limite... | Not Provided | 2026-07-10 | 2026-07-20 |
| CVE-2026-55652 json | Wekan is open source kanban built with Meteor. Prior to 9.46, header-login with HEADER_LOGIN_TRUSTED_IPS uses getRequestIp() ... | Not Provided | 2026-07-15 | 2026-07-17 |
| CVE-2026-55207 json | Pimcore is an Open Source Data & Experience Management Platform. Prior to 2025.4.6 and 2026.1.6, an unauthenticated attacker ... | Not Provided | 2026-07-09 | 2026-07-10 |
| CVE-2026-54685 json | FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to version 1.3.2-beta, the `/api/auth/login` authen... | Not Provided | 2026-07-20 | 2026-07-21 |
| CVE-2026-54088 json | File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified... | Not Provided | 2026-06-25 | 2026-06-25 |
| CVE-2026-53725 json | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. From version 9.8.0 to... | Not Provided | 2026-06-12 | 2026-06-13 |