In JetBrains YouTrack before 2026.2.18634 unchecked group membership changes allowed privilege escalation
CVE-2026-86482
In JetBrains YouTrack before 2026.2.18634 unchecked group membership changes allowed privilege escalation
#cwe-266
共收录 540 条相关情报。
← 返回所有主题A vulnerability was detected in BookStack up to 26.05.2. Affected by this issue is the function AttachmentController::getUpdateForm of the file app/Uploads/Controllers/Attachmen...
CVE-2026-86285
A vulnerability was detected in BookStack up to 26.05.2. Affected by this issue is the function AttachmentController::ge
A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This vulnerability affects the function register of the file auth.p...
CVE-2026-86275
A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This vulne
A vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer:...
CVE-2026-86153
A vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer::SetRedirectEnable of th
A vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer::SetRedirectEnable of the file Functions/Redirect.cpp. The manipulation leads to ...
CVE-2026-86153
根据 NVD 元数据，CVE-2026-86153 影响 Tenda CP3 固件版本 27.5.57.101。该漏洞位于 Functions/Redirect.cpp 文件中的 CRedirServer::SetRedirectEnabl
A security vulnerability has been detected in StackStorm st2 up to 3.9.0. Impacted is an unknown function of the file st2api/st2api/controllers/v1/auth.py of the component API K...
CVE-2026-85514
A security vulnerability has been detected in StackStorm st2 up to 3.9.0. Impacted is an unknown function of the file st
A weakness has been identified in StackStorm st2 up to 3.9.0. This issue affects the function assert_user_is_admin_if_user_query_param_is_provided of the file st2api/st2api/cont...
CVE-2026-85513
A weakness has been identified in StackStorm st2 up to 3.9.0. This issue affects the function assert_user_is_admin_if_us
StackStorm st2 API Key auth.py privileges management
CVE-2026-85514
A security vulnerability has been detected in StackStorm st2 up to 3.9.0. Impacted is an unknown function of the file st
StackStorm st2 NoOp RBAC backend actionexecutions.py privileges management
CVE-2026-85513
A weakness has been identified in StackStorm st2 up to 3.9.0. This issue affects the function assert_user_is_admin_if_us
A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is...
CVE-2026-85401
A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is some unknown functional
A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is some unknown functionality of the file htdocs/core/filemanagerdol/connectors/php...
CVE-2026-85401
A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is some unknown functional
A weakness has been identified in SpecterOps BloodHound up to 9.5.1. The affected element is the...
CVE-2026-85241
A weakness has been identified in SpecterOps BloodHound up to 9.5.1. The affected element is the function NewV2API of th
A weakness has been identified in SpecterOps BloodHound up to 9.5.1. The affected element is the function NewV2API of the file cmd/api/src/api/registration/v2.go of the componen...
CVE-2026-85241
A weakness has been identified in SpecterOps BloodHound up to 9.5.1. The affected element is the function NewV2API of th
Subscriber Privilege Escalation in Bricksforge <= 3.1.8.8 versions.
CVE-2026-84814
Subscriber Privilege Escalation in Bricksforge <= 3.1.8.8 versions.
Subscriber Privilege Escalation in WCFM Membership <= 2.11.11 versions.
CVE-2026-84756
Subscriber Privilege Escalation in WCFM Membership <= 2.11.11 versions.
Kimai (kimai/kimai) before 2.65.0 contains a business logic / improper authorization vulnerability in the default team creation endpoints. An authenticated user with project per...
CVE-2026-84807
Kimai (kimai/kimai) before 2.65.0 contains a business logic / improper authorization vulnerability in the default team c
Incorrect Privilege Assignment vulnerability in LiquidThemes Booking Hub allows Privilege Escalation. This issue affects Booking Hub: from n/a through 1.3.1.
CVE-2026-81769
Incorrect Privilege Assignment vulnerability in LiquidThemes Booking Hub allows Privilege Escalation. This issue affect
Unauthenticated Privilege Escalation in Authorizer <= 3.15.1 versions.
CVE-2026-81294
Unauthenticated Privilege Escalation in Authorizer <= 3.15.1 versions.
Kimai before 2.65.0 Authentication Bypass via Team Creation
CVE-2026-84807
Kimai (kimai/kimai) through 2.65.0 contains a business logic / improper authorization vulnerability in the default team
A vulnerability was found in Cleo Harmony up to 5.8.1.10. The affected element is an unknown function of the file /api/connections of the component JWT Refresh Token Handler. Pe...
CVE-2026-84115
A vulnerability was found in Cleo Harmony up to 5.8.1.10. The affected element is an unknown function of the file /api/c