共收录 4122 条相关情报。
← 返回所有主题CVE-2026-82544
A flaw has been found in wger-project wger up to 2.6.0-alpha2. This issue affects the function reset_user_password of th
CVE-2026-82633
Dolibarr versions 10.0.0 before 24.0.0 fail to perform per-object authorization checks in the Users::getGroups REST API
CVE-2026-82633
Dolibarr versions 10.0.0 before 24.0.0 fail to perform per-object authorization checks in the Users::getGroups REST API
CVE-2026-82475
iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow endpoint that fails to
CVE-2026-82475
CVE-2026-82475 是科大讯飞 astron-agent 产品（版本至 1.1.1）中存在的一个授权绕过漏洞。该漏洞位于 copyFlow 端点，该端点在复制工作流时未能验证工作流的所有权归属。已认证的攻击者可以利用此缺陷，通过枚
CVE-2026-82475
iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow endpoint that fails to
CVE-2026-81346
The Frontend Admin by DynamiApps WordPress plugin before 3.29.11 does not perform a capability check on one of its AJAX
CVE-2026-18234
The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by its wallet payment handling be
CVE-2026-19430
The Catfolders Document Gallery Pro WordPress plugin before 2.0.7 does not authorise some of its REST API routes, and th
CVE-2026-18233
The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by one of its delivery endpoints
CVE-2026-81346
The Frontend Admin by DynamiApps WordPress plugin before 3.29.11 does not perform a capability check on one of its AJAX
CVE-2026-19430
The Catfolders Document Gallery Pro WordPress plugin before 2.0.7 does not authorise some of its REST API routes, and th
CVE-2026-18234
The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by its wallet payment handling be
CVE-2026-18233
The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by one of its delivery endpoints
CVE-2026-80193
Kimai before 2.62.0 fails to validate create_other_timesheet permission in the QuickEntry controller when creating new t
CVE-2026-80346
StarRocks performs no privilege check when a legacy synchronous materialized view is dropped. Every other statement type
CVE-2026-82279
HyperDX through 1.10.1 fails to enforce role-based access controls in team management endpoints, allowing any team membe
CVE-2026-82273
Mastra through 1.63.0 contains an authentication bypass vulnerability in the memory API thread ownership validation when
CVE-2026-82267
Komodo through 2.3.2 discloses internal resource identifiers and writes audit entries before performing permission check
CVE-2026-56100
SpringBlade versions from 2.7.3 up to but not including 5.0.0 contain a privilege escalation vulnerability that allows a