← All credits

Santosh Kumar Puppala

4 vulnerability records and advisories credit this contributor.

CVE-2026-107336

Authentication Bypass by Spoofing in Malcolm

Unauthenticated /enterprise/create-user mints lifetime top-tier organizations and discloses their API key

Unauthenticated recovery of the Math.random() state behind OAuth tokens, authorization codes, client secrets and organization API keys

OpenNMS v2 Alarm REST API inverted authorization check lets ROLE_REST users acknowledge alarms as any user and bypass read-only