Known Vulnerabilities for Ash Authentication by Team-alembic
Listed below are 10 of the newest known vulnerabilities associated with "Ash Authentication" by "Team-alembic".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-109575 json | In HAProxy Data Plane API 2.2.0 through 3.4.3 (and corresponding Enterprise Edition releases), Server.ConfigureAPI() has proc... | Not Provided | 2026-10-12 | 2026-10-12 |
| CVE-2026-109394 json | Thirty bees through 1.7.0 contains an authentication bypass vulnerability in PasswordController::resolveCustomer() that allow... | Not Provided | 2026-10-12 | 2026-10-12 |
| CVE-2026-109373 json | ZITADEL 3.0.0 before 4.19.2 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticated at... | Not Provided | 2026-10-12 | 2026-10-12 |
| CVE-2026-109372 json | ZITADEL 4.x before 4.19.2 and 3.x through 3.4.15 contains an authentication bypass in the SAML identity-provider intent callb... | Not Provided | 2026-10-12 | 2026-10-12 |
| CVE-2026-109371 json | ZITADEL 3.0.0 before 4.18.0 contains a missing authentication vulnerability in the hosted Login V1 UI, where the change-usern... | Not Provided | 2026-10-12 | 2026-10-12 |
| CVE-2026-109357 json | LibreNMS before 26.9.0 contains an LDAP filter injection in ldap-authorization and ad-authorization modes because usernames a... | Not Provided | 2026-10-12 | 2026-10-12 |
| CVE-2026-109342 json | SurrealDB from 3.0.0 before 3.3.0 contains a missing authentication vulnerability in the revoke RPC method that allows low-pr... | Not Provided | 2026-10-12 | 2026-10-12 |
| CVE-2026-109325 json | Grav from 2.0.22 before 2.1.7 contains an authentication bypass vulnerability in the Clockwork profiler that trusts loopback ... | Not Provided | 2026-10-12 | 2026-10-12 |
| CVE-2026-109313 json | Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass vulnerability that allows attackers with a valid passw... | Not Provided | 2026-10-12 | 2026-10-12 |
| CVE-2026-109312 json | Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass in processUserProfile(), which checks that the session... | Not Provided | 2026-10-12 | 2026-10-12 |