https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T05:53:44.724099+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2019-20933 CVE-2019-20933 2026-10-04T05:53:44.729626+00:00

InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret (aka shared secret).

 https://vulnerability.circl.lu/vuln/usn-5451-1 USN-5451-1 — influxdb vulnerability 2026-10-04T05:53:44.730201+00:00

Affected: Ubuntu:18.04:LTS: influxdb, Ubuntu:20.04:LTS: influxdb

Ilya Averyanov discovered that an InfluxDB vulnerability allowed attackers to bypass authentication and gain access to any known database user.