Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug
More on Cross-Tenant
Other advisories
- Not ratedosv:CVE-2026-63398Coop has SAML cross-tenant authentication bypass
- Not ratedosv:CVE-2026-119708abp-next-admin 10.4.0 through 10.7.0 Cross-Tenant File Disclosure via Blob Download-By-Name
- Not ratedosv:CVE-2026-61708SOCFortress CoPilot: Cross-Tenant Arbitrary Object-Store Write via the Data-Store Upload Endpoint (customer_user)
- Not ratedosv:CVE-2026-118760Kubeflow Pipelines: Missing namespace authorization permits cross-tenant artifact reads
- Not ratedosv:CVE-2026-118759Kubeflow Pipelines: Run log streaming endpoint bypasses namespace authorization, exposing pod execution logs cross-tenant
- MediumCVE-2026-116575Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)
- MediumCVE-2026-116575Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)
- Not ratedosv:CVE-2026-59185identrail: Cross-tenant GitHub installation binding without ownership verification
Other news entries
- ConnectWise Cloud Backup application abused in cross-tenant token sweepNewsSophos X-Ops
- Cloudflare fixes Containers cross-tenant flaw exposing customer dataNewsBleepingComputer
- Critical Azure Cosmos DB flaw threatened cross-tenant database takeoverNewsCSO Online
- Default Azure Automation Setting Enables Cross-Tenant Identity TakeoverNewsDark Reading
- RabbitMQ Flaws Could Leak OAuth Secrets and Expose Cross-Tenant Queue MetadataNewsThe Hacker News
- Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across TenantsNewsThe Hacker News
Source: https://thehackernews.com/2026/08/veeam-terraform-mcp-django-patch.html
ID