Tanium addressed an improper access controls vulnerability in Enforce.
CVE-2026-116660
Tanium addressed an improper access controls vulnerability in Enforce.
#cwe-862
共收录 3925 条相关情报。
← 返回所有主题Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-108301
Tanium addressed an improper access controls vulnerability in Comply.
OpenWISP Controller CA CRL REST API does not scope requests to managed organizations
CVE-2026-116677
OpenWISP Controller is a network and WiFi controller for provisioning, configuration management, updates, and PKI manage
A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote, unauthenticated attacker to invoke privileged system-level administ...
CVE-2026-93865
A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote, unauthenti
A missing authentication vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster interconnect, such as a compromised cluster peer or an on-...
CVE-2026-90465
A missing authentication vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster i
The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 0.9.2.6. This is due to the plugin not prop...
CVE-2026-10752
The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to authorization bypass in all versions up to, a
REDAXO core before 5.21.4 contains a missing authorization vulnerability in the structure/version and structure/history frontend preview modes, which do not check category or cl...
CVE-2026-116897
REDAXO core before 5.21.4 contains a missing authorization vulnerability in the structure/version and structure/history
REDAXO before 5.21.5 contains a missing authorization vulnerability in the backup addon export that accepts any database table, allowing non-admin users with the backup[export] ...
CVE-2026-116896
REDAXO before 5.21.5 contains a missing authorization vulnerability in the backup addon export that accepts any database
REDAXO core before 5.21.5 contains a missing authorization vulnerability in the rex_api_package API function that lets non-admin backend users manage packages with only a valid ...
CVE-2026-116893
REDAXO core before 5.21.5 contains a missing authorization vulnerability in the rex_api_package API function that lets n
Semantic MediaWiki from 3.0.0 before 7.3.0 contains a missing authorization vulnerability in the api.php smwtask module that allows unauthenticated attackers to run admin-only m...
CVE-2026-116890
Semantic MediaWiki from 3.0.0 before 7.3.0 contains a missing authorization vulnerability in the api.php smwtask module
Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask update task that allows users with edit rights to force semantic updates...
CVE-2026-116879
Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask update task tha
Semantic MediaWiki from 2.5.0 before 7.3.1 contains an improper authorization vulnerability that allows ordinary editors to permanently protect pages by adding an Is edit protec...
CVE-2026-116876
Semantic MediaWiki from 2.5.0 before 7.3.1 contains an improper authorization vulnerability that allows ordinary editors
Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask API module that allows unauthenticated attackers to run queued jobs and ...
CVE-2026-116873
Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask API module that
A Missing Authorization vulnerability in the disks.createSnapshot and regionDisks.createSnapshot APIs in Google Compute Engine versions prior to 2026-08-31 on Google Cloud Platf...
CVE-2026-85299
A Missing Authorization vulnerability in the disks.createSnapshot and regionDisks.createSnapshot APIs in Google Compute
Psono Server (CE & EE) versions 1.0.0 through 7.2.3 did not enforce the direction of file-transfer credentials on file-repository operations. An authenticated remote attacker wi...
CVE-2026-117469
Psono Server (CE & EE) versions 1.0.0 through 7.2.3 did not enforce the direction of file-transfer credentials on file-r
A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is...
CVE-2026-116623
A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of t
A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Int...
CVE-2026-116623
A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of t
An authorization issue was addressed with improved entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. A remote attacker may be able to access sensitive user data.
CVE-2026-86987
An authorization issue was addressed with improved entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2.
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An app may be able t...
CVE-2026-86925
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, ma
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequo...
CVE-2026-86920
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2