共收录 4122 条相关情报。
← 返回所有主题CVE-2026-78597
Missing Authorization (CWE-862) in the Kibana Entity Store feature can lead to unauthorized credential creation via Acce
CVE-2026-84204
GROWI contains an access control vulnerability in the GET /_api/v3/attachment/:id endpoint that fails to validate page a
CVE-2026-84204
GROWI contains an access control vulnerability in the GET /_api/v3/attachment/:id endpoint that fails to validate page a
CVE-2026-13611
The KiviCare WordPress plugin before 4.5.5 does not perform authorization checks on some of its REST endpoints, allowing
CVE-2026-19948
The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates plugin for WordPress
CVE-2026-82746
Missing Authorization vulnerability in ash-project ash allows an actor to update records forbidden by resource policies
CVE-2026-82746
Missing Authorization vulnerability in ash-project ash allows an actor to update records forbidden by resource policies
CVE-2026-82882
Devtron through 2.2.0 fails to enforce authorization checks on the GET /orchestrator/api-token/webhook endpoint, allowin
CVE-2026-82882
Devtron through 2.2.0 fails to enforce authorization checks on the GET /orchestrator/api-token/webhook endpoint, allowin
CVE-2026-82394
Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8,
CVE-2026-71415
### TL;DR This vulnerability affects all Kirby sites where users of a particular role have access to the REST API (`acc
CVE-2026-81296
Unauthenticated Broken Access Control in Fluent Forms Pro Add On Pack <= 6.2.12 versions.
CVE-2026-81762
Subscriber Broken Access Control in Booking and Rental Manager <= 2.7.6 versions.
CVE-2026-81758
Subscriber Broken Access Control in OwnerRez API <= 1.2.6 versions.
CVE-2026-81278
Missing Authorization vulnerability in WPExperts Post SMTP allows Exploiting Incorrectly Configured Access Control Secur
CVE-2026-19197
A user with organization administrator permissions can delete dashboard snapshots belonging to other organizations on th
CVE-2026-81892
EasyAdmin is a fast and modern admin generator for Symfony applications. From 4.0.0 until 4.29.16 and 5.5.1, EasyAdmin s
CVE-2026-81762
Subscriber Broken Access Control in Booking and Rental Manager <= 2.7.6 versions.
CVE-2026-81758
Subscriber Broken Access Control in OwnerRez API <= 1.2.6 versions.
CVE-2026-81296
Unauthenticated Broken Access Control in Fluent Forms Pro Add On Pack <= 6.2.12 versions.