Skip to content
OpenAdvisories

Archive

15 September 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-69212 Public exploit

    Http4s: FollowRedirect middleware leaks credentials over https->http same-authority redirect

    Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The FollowRedirect client middleware strips Authorization and Cookie headers only when a redirect changes authority, but authority comparison excludes the URI scheme. A same-author…

  • Medium 6.1
    CVE-2026-51133 Public exploit

    Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance <= V6.0104 allows a remote attacker to …