OpenRemote before 1.26.2 contains an authentication bypass vulnerability in the console registration API that allows unauthenticated attackers to update existing console assets ...

CVE-2026-66013

OpenRemote 1.26.2之前的版本存在一个认证绕过漏洞。漏洞位于控制台注册API中，未经过身份验证的攻击者可以通过提供已知的资产标识符来更新现有的控制台资产。攻击者能够覆盖推送通知令牌和控制台元数据，从而将通知重定向到其他设备或完

历史摘要 · 未重新核验 · NVD

OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API

### Summary An authorization bypass vulnerability exists in the file sharing mechanism of `Openlist`. Due to a flawed, n

历史摘要 · 未重新核验 · GitHub Advisory

OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search

### Summary An authorization bypass and information disclosure vulnerability exists in the search API of `Openlist`. Due

历史摘要 · 未重新核验 · GitHub Advisory

Poweradmin: Broken access control (IDOR): any zone owner can modify DNS records in zones they do not own

## Affected software - Product: Poweradmin (web front-end for PowerDNS) - Version tested: master, commit 7f28c3a97 (als

历史摘要 · 未重新核验 · GitHub Advisory

OpenDJ SASL PLAIN authzid bypassing the proxy ACI scope check

### Summary When a SASL PLAIN bind supplies an authorization identity (authzid) that resolves to a **different** user, P

历史摘要 · 未重新核验 · GitHub Advisory

Budibase: Email Change IDOR via POST /api/v2/email allows full Account Takeover (accountId not validated against session)

## Summary `POST /api/v2/email` on the account portal (`account.budibase.app`) starts an email-change workflow using a

历史摘要 · 未重新核验 · GitHub Advisory

AgentGPT through 1.0.0 contains an authorization bypass through user-controlled key vulnerability...

CVE-2026-65699

AgentGPT through 1.0.0 contains an authorization bypass through user-controlled key vulnerability that allows authentica

历史摘要 · 未重新核验 · GitHub Advisory

Overseerr through 1.35.0 contains an authorization bypass through user-controlled key...

CVE-2026-65696

Overseerr through 1.35.0 contains an authorization bypass through user-controlled key vulnerability in the push subscrip

历史摘要 · 未重新核验 · GitHub Advisory

CyberPanel through 1.9.1, fixed in commit b198460, contains an insecure direct object reference ...

CVE-2026-65917

CyberPanel through 1.9.1, fixed in commit b198460, contains an insecure direct object reference (IDOR) vulnerability in

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Improper Authorization Allows Authenticated Users to Assign Workflows to Folders in Other Projects

CVE-2026-59253

## Impact An authenticated user with permission to create workflows in one project could bypass project/folder authoriza

历史摘要 · 未重新核验 · GitHub Advisory

n8n: External Secrets Accessible via Workflow Expressions Outside Credentials

CVE-2026-59254

## Impact External secrets were incorrectly resolved in workflow node expressions, where they are not intended to be ava

历史摘要 · 未重新核验 · GitHub Advisory

n8n: External Secrets Permission Bypass via Expression Parser Mismatch

CVE-2026-59259

## Impact Due to a mismatch between the static validation check and the runtime expression engine, an authenticated user

历史摘要 · 未重新核验 · GitHub Advisory

n8n: SSO Instance-Role Provisioning Allows Privilege Escalation to Instance Owner

CVE-2026-65016

## Impact n8n's Enterprise SSO instance-role provisioning maps a role claim asserted by the configured Identity Provider

历史摘要 · 未重新核验 · GitHub Advisory

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2,  6.2.1.0 through 6.2.1.1_2, and  6.2.2.0 through 6.2.2.0_1 could allow an unauthenticated us...

CVE-2026-3482

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2,  6.2.1.0 through 6.2.1.1_2, and  6.

历史摘要 · 未重新核验 · NVD

Onlook through 0.2.32, fixed in commit 423e2e9, contains a broken object level authorization vulnerability that allows authenticated attackers to access and manipulate other use...

CVE-2026-65013

Onlook through 0.2.32, fixed in commit 423e2e9, contains a broken object level authorization vulnerability that allows a

历史摘要 · 未重新核验 · NVD

Onlook tRPC Insecure Direct Object Reference via multiple procedures

CVE-2026-65013

Onlook through 0.2.32, fixed in commit 423e2e9, contains a broken object level authorization vulnerability that allows a

历史摘要 · 未重新核验 · OSV.dev

n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a privilege escalation vulnerability in Enterprise SSO instance-role provisioning. The provisioning path maps an IdP-ass...

CVE-2026-65016

n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a privilege escalation vulnerability in Enterprise SSO instance

来源摘录 · NVD

n8n before 1.123.64 Privilege Escalation via SSO Instance-Role

CVE-2026-65016

n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a privilege escalation vulnerability in Enterprise SSO instance

历史摘要 · 未重新核验 · OSV.dev

Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System...

CVE-2026-2406

Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industr

历史摘要 · 未重新核验 · NVD

Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information...

CVE-2026-63259

Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via user-supplie

历史摘要 · 未重新核验 · GitHub Advisory