共收录 540 条相关情报。
← 返回所有主题CVE-2026-120185
A security flaw has been discovered in ken678 YznCMS up to 2.2.0. The affected element is the function Backend of the fi
CVE-2026-54854
Contributor Privilege Escalation in Profile Builder <= 4.0.5 versions.
CVE-2026-118086
Subscriber Privilege Escalation in WP BASE Booking <= 6.5.2 versions.
CVE-2026-116386
Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.2 versions.
CVE-2026-119599
AxonHub through 1.0.0-beta11 contains a privilege escalation vulnerability that allows project users to assign system-le
CVE-2026-118082
Subscriber Privilege Escalation in Buddyboss Platform <= 3.5.0 versions.
CVE-2026-118644
n8n before 2.41.5 and 2.42.x before 2.42.2 passes a failed workflow's full execution context, including the identity of
CVE-2026-116471
A security flaw has been discovered in BKWLD Decoy up to 5.11.1. The impacted element is an unknown function of the file
CVE-2026-116106
A security vulnerability has been detected in HeyCyan App 1.0.103 on Android. Affected by this vulnerability is an unkno
CVE-2026-116108
A flaw has been found in openbq-org OpenBB up to 4.7.2/5.0.0. This affects an unknown part of the file openbb_platform/c
CVE-2026-116106
A security vulnerability has been detected in HeyCyan App 1.0.103 on Android. Affected by this vulnerability is an unkno
CVE-2026-57144
PraisonAI is a multi-agent teams system. From version 4.5.110 to before version 4.6.61, praisonai.sandbox.SandlockSandbo
CVE-2026-114361
A vulnerability was detected in HarnessRouter up to 0.31.10. This affects an unknown function of the file gateway/app.py
CVE-2026-114361
A vulnerability was detected in HarnessRouter up to 0.31.10. This affects an unknown function of the file gateway/app.py
CVE-2026-112407
Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 through 1.0.10
CVE-2026-113507
A vulnerability was found in aaPanel up to 8.25.0. The impacted element is the function GetClientIp of the file class/pu
CVE-2026-86935
This issue was addressed by removing additional entitlements. This issue is fixed in macOS Golden Gate 27. An app may be
CVE-2026-112025
A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61
CVE-2026-96627
## Summary A user holding the delegated `users:update` permission can reset the global administrator's password and take
CVE-2026-102851
Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally.