Authenticated FortiMail flaw can delete directories as root
The CVSS 8.1 bug also exposes or deletes other tenants' calendar and mailbox data; no fix is listed.
Stories per day · 30 days
6 stories, newest first · one card per story
Stories tagged #cross-tenant
Azure API Connection flaws enable cross-tenant compromise
The researcher says five issues paid $200,000 and can reach Key Vault, Azure SQL and services such as Jira.
6
Cloudflare fixes Containers cross-tenant flaw exposing customer data
Cloudflare fixed a Containers flaw that let Workers Paid customers read residual data from other tenants on the same host.
5
Cloudflare Containers Flaw Could Expose Data From Other Customers’ Workloads
Cloudflare patched a Containers disk-reuse flaw that could expose residual data from other customers' workloads.
3
Microsoft Offers $60,000 Bounty for Critical Cross-Tenant Vulnerabilities
Microsoft expands Dynamics 365 and Power Platform bug bounty, paying up to $60,000 for critical cross-tenant vulnerabilities.
5
CVE-2026-82428: Apache Storm Client: Cross-Tenant Dependency Jar Substitution via Predictable Blob Keys
Apache Storm stores shared dependency jars under predictable Maven-derived blob keys, allowing one tenant to substitute jars other tenants execute.