共收录 4167 条相关情报。
← 返回所有主题CVE-2026-28163
Missing Authorization vulnerability in myCred New User Approve allows Exploiting Incorrectly Configured Access Control S
CVE-2026-74021
Unauthenticated Broken Access Control in Chaplin <= 2.6.8 versions.
CVE-2026-74020
Unauthenticated Broken Access Control in Koji <= 2.2.1 versions.
CVE-2026-74019
Unauthenticated Broken Access Control in EPROLO Dropshipping <= 2.4.2 versions.
CVE-2026-66647
Subscriber Broken Access Control in Homlisti <= 3.1.2 versions.
CVE-2026-66595
Unauthenticated Broken Access Control in WP Data Access <= 5.5.80 versions.
CVE-2025-53999
Unauthenticated Broken Access Control in Altair <= 5.2.2 versions.
CVE-2026-17153
The AI Agent by SiteGround plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includi
CVE-2026-76398
In Splunk AI Toolkit versions below 6.0.1, a user who does not hold the "admin" or "power" Splunk roles could delete the
CVE-2026-76394
In Splunk AI Toolkit versions below 6.0.0, a low-privileged user who does not hold the "admin" or "power" Splunk roles c
CVE-2026-76368
In Splunk SOAR versions below 8.6.0, a user who holds a role that contains the playbooks:view permission could view meta
CVE-2026-76360
In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could use the /rest/health endpoint to
CVE-2026-76348
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds a Splunk role that contains the
CVE-2026-76398
In Splunk AI Toolkit versions below 6.0.1, a user who does not hold the "admin" or "power" Splunk roles could delete the
CVE-2026-76394
In Splunk AI Toolkit versions below 6.0.0, a low-privileged user who does not hold the "admin" or "power" Splunk roles c
CVE-2026-76368
In Splunk SOAR versions below 8.6.0, a user who holds a role that contains the playbooks:view permission could view meta
CVE-2026-76360
In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could use the /rest/health endpoint to
CVE-2026-76348
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds a Splunk role that contains the
CVE-2026-76340
In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could cause Splunk Enterprise to reload token-s
CVE-2026-76336
In Splunk Enterprise versions below 10.4.2 and 10.2.6, a user who does not hold the "admin" or "power" Splunk roles coul