共收录 231 条相关情报。
← 返回所有主题CVE-2026-71169
Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for Critical Resource vu
CVE-2026-92228
The Apache Airflow Keycloak provider's multi-team provisioning (`_attach_team_permissions`) granted every team role glob
CVE-2026-101020
An incorrect permission assignment for critical resource issue exists in AssetView, AssetView CLOUD, and AssetView Cloud
CVE-2026-49483
Code for IBMi is a Visual Studio Code extension for maintaining and compiling ILE languages on the IBMi platform. Prior
CVE-2026-85971
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 assign overly permissive operating
CVE-2026-109358
Edgeless Systems Contrast 1.8.0 before 1.24.1 contains an incorrect permissions vulnerability where the node installer w
CVE-2026-109244
FreeRDP from 2.0.0 before 3.32.0 contains an insecure permission vulnerability in winpr-makecert that creates unencrypte
CVE-2026-109243
FreeRDP from 3.0.0 before 3.32.0 contains an incorrect permission assignment vulnerability that allows local users to re
CVE-2026-109358
Edgeless Systems Contrast 1.8.0 before 1.24.1 contains an incorrect permissions vulnerability where the node installer w
CVE-2026-108582
GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows
CVE-2026-108582
GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows
CVE-2026-107814
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3
CVE-2026-107814
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3
CVE-2026-78339
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignm
CVE-2026-87660
An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of
CVE-2026-76280
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure Gateway versions below 3.10.1
CVE-2026-105267
The Gitea web route for deleting tags (`POST /{owner}/{repo}/tags/delete`) requires only write access to the Code unit,
CVE-2026-86361
Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnera
CVE-2026-106105
Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/ssl-certificate 2
CVE-2026-104854
## Summary Nx creates the Unix domain sockets for its daemon and its plugin workers in a shared temporary directory wit