Embysupport Security vulnerabilities

• embysupport security Soft Machine: Cross-tenant workspace API auth bypass via shared `CONTAINER_SHARED_SECRET` bearer token CVE-2026-55176 9.0 CriticalSeptember 30, 2026
• embysupport security Soft Machine: Unauthenticated workspace API exposes arbitrary file read & directory exfiltration to any peer on the Fly private network CVE-2026-46711 8.3 HighSeptember 30, 2026
• emby, embysupport security +1 more Emby Server allows attackers to gain administrative server access without preconditions CVE-2025-64113 9.3 CriticalDecember 8, 2025
• emby, embysupport emby.security +1 more Emby Server is Vulnerable to Remote Code Execution Through XSS in Admin Dashboard CVE-2025-64325 8.4 HighNovember 18, 2025
• amazon opensearch, embysupport security +1 more OpenSearch Issue with tenant read-only permissions CVE-2023-45807 Fix available 5.4 MediumOctober 16, 2023
• emby emby.releases, embysupport security +1 more Emby Server Proxy Header Spoofing Vulnerability CVE-2023-33193 9.1 CriticalMay 30, 2023
• amazon opensearch, embysupport security, amazon opensearch security +2 more OpenSearch issue with fine-grained access control during extremely rare race conditions CVE-2023-31141 Fix available 4.8 MediumMay 8, 2023
• amazon opensearch, opensearch security, embysupport security +2 more Time discrepancy in authentication responses in OpenSearch CVE-2023-25806 Fix available 5.3 MediumMarch 2, 2023
• amazon opensearch, embysupport security +1 more Issue with whitespace in JWT roles in OpenSearch CVE-2023-23612 Fix available 4.7 MediumJanuary 24, 2023
• amazon opensearch, embysupport security +1 more Field-level security issue with .keyword fields in OpenSearch CVE-2023-23613 Fix available 5.7 MediumJanuary 24, 2023
• amazon opensearch, embysupport security +1 more Issue with fine-grained access control of indices backing data streams CVE-2022-41918 Fix available 6.3 MediumNovember 15, 2022
• amazon opensearch, embysupport security +1 more OpenSearch vulnerable to Improper Authorization of Index Containing Sensitive Information CVE-2022-35980 Fix available 7.5 HighAugust 12, 2022
• embysupport security, ibm resilient security orchestration automation and response +1 more IBM Security SOAR performs an operation at a privilege level that is higher than the minimum... CVE-2021-29802 5.6 MediumAugust 23, 2021
• embysupport security, ibm resilient security orchestration automation and response +1 more IBM Security SOAR uses weaker than expected cryptographic algorithms that could allow an attacker... CVE-2021-29704 5.9 MediumAugust 23, 2021
• nim-lang nim, embysupport security +1 more Nim stdlib httpClient does not validate peer certificates by default CVE-2021-29495 Fix available 5.9 MediumMay 7, 2021
• nim-lang nim, embysupport security +1 more Nimble falls back to insecure http url when fetching packages CVE-2021-21373 Fix available 7.5 HighMarch 26, 2021
• nim-lang nim, embysupport security +1 more Nimble fails to validate certificates due to insecure httpClient defaults CVE-2021-21374 Fix available 8.1 HighMarch 26, 2021
• nim-lang nim, embysupport security +1 more Nimble arbitrary code execution for specially crafted package metadata CVE-2021-21372 Fix available 8.3 HighMarch 26, 2021
• linux kernel, embysupport security +1 more It was discovered in the Linux kernel before 4.11-rc8 that root can gain direct access to an... CVE-2016-9604 Fix available 4.4 MediumDecember 31, 2016