@stackflag.bsky.socialCVE-2026-92984 - hubzero-cms
The HUBzero CMS platform can accept session IDs from the web address instead of only from secure cookies. This lets an attacker create a link with a known session ID, send it…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-92970 - hubzero-cms
When users upload project files in HUBzero CMS version 2.2.32 or earlier, they can trick the system into saving those files outside the intended folder. This lets a signed‑in…
Too many irrelevant or confusing CVEs? Use stackflag.com