Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally.
CVE-2026-58631
Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally.
#cwe-285
共收录 628 条相关情报。
← 返回所有主题Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
CVE-2026-49170
Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privi
A flaw has been found in poco-ai poco-claw up to 0.5.4. Affected is the function...
CVE-2026-15622
A flaw has been found in poco-ai poco-claw up to 0.5.4. Affected is the function get_workspace_file of the file executor
A flaw has been found in poco-ai poco-claw up to 0.5.4. Affected is the function get_workspace_file of the file executor_manager/app/api/v1/workspace.py of the component Workspa...
CVE-2026-15622
该漏洞存在于 poco-ai poco-claw 0.5.4 及之前版本的 Workspace API 组件中，具体位于 executor_manager/app/api/v1/workspace.py 文件的 get_workspace_
Kimai: Improper Authorization in Project, Customer, and Activity Rate Edit Endpoints Allows Cross-Scope Rate Manipulation
CVE-2026-52826
### Summary Kimai 2.56.0 contains an authenticated improper authorization vulnerability in the Web rate editing flows f
Kimai has Improper Authorization in Team Member and Team Activity Assignment APIs Which Allows Expansion of Team Scope Beyond Authorized Visibility
CVE-2026-52825
### Summary Kimai contains an authenticated improper authorization vulnerability in Team-related assignment APIs. A Tea
Improper Authorization in Kimai Timesheet Restart and Duplicate Allows New Timesheets After Project Access Revocation
CVE-2026-52822
### Summary Kimai 2.56.0 contains an authenticated authorization bypass in the timesheet `restart` and `duplicate` work
A vulnerability was found in waooAI waoowaoo up to 0.4.1. Impacted is the function stablePublicIdFromStorageKey in the library src/lib/media/hash.ts of the component Media Handl...
CVE-2026-15594
A vulnerability was found in waooAI waoowaoo up to 0.4.1. Impacted is the function stablePublicIdFromStorageKey in the l
waooAI waoowaoo Media hash.ts stablePublicIdFromStorageKey improper authorization
CVE-2026-15594
A vulnerability was found in waooAI waoowaoo up to 0.4.1. Impacted is the function stablePublicIdFromStorageKey in the l
Decidim: CSV census record endpoints improper authorization
CVE-2026-45415
## Description A participant manager can access and modify the CSV census record admin forms. ## Technical description
A vulnerability was detected in MacCMS Pro up to 2022.1000.3005. Impacted is the function step5...
CVE-2026-15516
A vulnerability was detected in MacCMS Pro up to 2022.1000.3005. Impacted is the function step5 of the file application/
A vulnerability was detected in MacCMS Pro up to 2022.1000.3005. Impacted is the function step5 of the file application/install/controller/Index.php of the component Installatio...
CVE-2026-15516
A vulnerability was detected in MacCMS Pro up to 2022.1000.3005. Impacted is the function step5 of the file application/
A vulnerability was found in Leantime up to 3.8.0. Affected is the function Setting::saveSetting of the component API. The manipulation results in improper authorization. The at...
CVE-2026-15510
A vulnerability was found in Leantime up to 3.8.0. Affected is the function Setting::saveSetting of the component API. T
A vulnerability has been found in Leantime up to 3.8.0. This impacts the function editUser/addUser of the component JSON-RPC Endpoint. The manipulation of the argument role lead...
CVE-2026-15509
A vulnerability has been found in Leantime up to 3.8.0. This impacts the function editUser/addUser of the component JSON
Capgo before 12.128.2 contains a cross-organization account disruption vulnerability in the SSO...
CVE-2026-56313
Capgo before 12.128.2 contains a cross-organization account disruption vulnerability in the SSO prelink endpoint that al
Capgo before 12.128.2 contains a privilege escalation vulnerability where demoted super_admin...
CVE-2026-56241
Capgo before 12.128.2 contains a privilege escalation vulnerability where demoted super_admin users retain access to del
Capgo before 12.128.2 contains a cross-organization account disruption vulnerability in the SSO prelink endpoint that allows enterprise administrators to delete password identit...
CVE-2026-56313
Capgo before 12.128.2 contains a cross-organization account disruption vulnerability in the SSO prelink endpoint that al
Capgo before 12.128.2 contains a privilege escalation vulnerability where demoted super_admin users retain access to delete_non_compliant_bundles and count_non_compliant_bundles...
CVE-2026-56241
Capgo before 12.128.2 contains a privilege escalation vulnerability where demoted super_admin users retain access to del
A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.2. Affected is the function FutureTaskTool.call of the file astrbot/core/tools/cron_tools.py of the compone...
CVE-2026-15499
A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.2. Affected is the function FutureTaskTool.call of
Capgo - Cross-Organization Account Disruption via SSO Prelink Endpoint
CVE-2026-56313
Capgo before 12.128.2 contains a cross-organization account disruption vulnerability in the SSO prelink endpoint that al