Team IT Security (TSEC) Nachrichtenportal Logo

🔧 CVE-2026-26185: Clockwatching: Enumerating Directus Users via Timing Side-Channels


Nachrichtenbereich: 🔧 Programmierung
🔗 Quelle: dev.to

Clockwatching: Enumerating Directus Users via Timing Side-Channels



Vulnerability ID: CVE-2026-26185
CVSS Score: 5.3
Published: 2026-02-12


A logic error in the Directus password reset flow allows... [Weiterlesen]

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🔧 What is Directus? The Headless CMS That Sits On Your Own Database


📈 450.08 Punkte
🔧 Programmierung

🔧 CVE-2026-26185: Clockwatching: Enumerating Directus Users via Timing Side-Channels


📈 423.07 Punkte
🔧 Programmierung

🔧 6 Open-Source No-Code & Low-Code Tools for Software Agencies


📈 333.39 Punkte
🔧 Programmierung

🔧 Directus Auth out of the Box — Registration, Login, Email Verification and Password Reset


📈 250.05 Punkte
🔧 Programmierung

🔧 Headless CMS: Directus and Payload Walk Into a Bar 🍵


📈 250.05 Punkte
🔧 Programmierung

🔧 Project-as-code for a Directus v9 backend


📈 216.71 Punkte
🔧 Programmierung

🔧 7 Headless CMSs in 2026: Stop Picking the Wrong Headless CMS — A No-BS Guide


📈 216.71 Punkte
🔧 Programmierung

🔧 Connecting TanStack Start to Directus with the SDK — Type-Safe Data Fetching in One File


📈 216.71 Punkte
🔧 Programmierung

🔧 Why I Use Directus as My Backend — Flexible, Self-Hosted and Production Ready


📈 200.04 Punkte
🔧 Programmierung

🔧 10 Open Source Tools Developers Use to Reduce Repetitive CRUD


📈 183.37 Punkte
🔧 Programmierung

🔧 Zero Tech: 2-Month AI Case to Full-Stack SaaS


📈 166.7 Punkte
🔧 Programmierung

🔧 HTB - Cascade walkthrough


📈 133.8 Punkte
🔧 Programmierung

🔧 What is Redis? The In-Memory Data Store That Makes Your App Faster


📈 133.36 Punkte
🔧 Programmierung

🔧 Top 7 Headless CMS Ranked for 2026 (Dev-Friendly Guide)


📈 133.36 Punkte
🔧 Programmierung

🔧 I Got Tired of Messy Text in Directus, So I Built a Typograf Button


📈 133.36 Punkte
🔧 Programmierung

🔧 CMS & Content Management MCP Servers — WordPress, Contentful, Sanity, Strapi, Directus, Ghost, and More


📈 116.69 Punkte
🔧 Programmierung

🔧 Which No-Code Database in 2026: Tested & Compared


📈 100.02 Punkte
🔧 Programmierung

🔧 I built my project 4 times, that's what I learned


📈 83.35 Punkte
🔧 Programmierung

🔧 V8's Official DevTools Fingerprint Patch Has Two Live Bypasses — Here's Why the Spec Is to Blame


📈 66.9 Punkte
🔧 Programmierung

🔧 10 free security scanners for the most popular BaaS platforms (2026 edition)


📈 66.68 Punkte
🔧 Programmierung

🔧 The Ultimate Which No-Code Database Review


📈 66.68 Punkte
🔧 Programmierung

🕵️ CVE-2022-26969 | Directus up to 9.6.x cross-domain policy (SNYK-JS-DIRECTUS-2441822 / EUVD-2022-1731)


📈 66.68 Punkte
🕵️ Sicherheitslücken

🔧 Wagtail Vs Wordpress


📈 66.68 Punkte
🔧 Programmierung

📰 Schwachstellen in FortiGate; Directus und mehr


📈 66.68 Punkte
📰 IT Nachrichten

🕵️ Binary Heaven — Reverse Engineering Go Binaries, ret2libc Buffer Overflow, and PATH Hijack to Root…


📈 53.52 Punkte
🕵️ Hacking

🕵️ CVE-2025-53886 | Directus up to 11.8.x WebHook Trigger information disclosure (GHSA-f24x-rm6g-3w5v)


📈 50.01 Punkte
🕵️ Sicherheitslücken

🔧 Why I Switched to a VPS with Coolify for Hosting My Full Stack Apps


📈 50.01 Punkte
🔧 Programmierung

🕵️ CVE-2025-53885 | Directus up to 11.8.x CRUD Event log file (GHSA-x3vm-88hf-gpxp / EUVD-2025-21396)


📈 50.01 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2026-26185 | directus up to 11.14.0 reset_url timing discrepancy (GHSA-jr94-gj3h-c8rf)


📈 50.01 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2026-22032 | Directus up to 11.13.x SAML Authentication RelayState redirect


📈 50.01 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-38503 | Directus 10.3.x/10.4.x information disclosure (GHSA-gggm-66rh-pp98 / EUVD-2023-2063)


📈 50.01 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-54151 | Directus up to 11.2.x information disclosure (GHSA-849r-qrwj-8rv4)


📈 50.01 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2025-24353 | Directus up to 11.1.x privileges management (GHSA-pmf4-v838-29hg)


📈 50.01 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2025-30350 | Directus up to 11.4.x HEAD Request allocation of resources


📈 50.01 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2025-30225 | Directus up to 11.4.x allocation of resources


📈 50.01 Punkte
🕵️ Sicherheitslücken