共收录 3925 条相关情报。
← 返回所有主题CVE-2026-9589
Missing authorization in the configuration cascade operations of the Collaboration Server in Unblu inc. Unblu Spark 7.0
CVE-2026-112787
OpenCATS before 0.10.0 contains a missing authorization vulnerability in ReportsUI::handleRequest() that allows authenti
CVE-2026-112786
OpenCATS before 0.10.0 contains a missing authorization vulnerability in ImportUI::handleRequest() that allows low-privi
CVE-2026-112785
OpenCATS before 0.10.0 contains a missing authorization vulnerability that allows READ-level users to create, rename, de
CVE-2026-112784
OpenCATS before 0.10.0 contains a missing authorization vulnerability in ajax/testEmailSettings.php that allows any auth
CVE-2026-112783
OpenCATS before 0.10.0 contains a missing authorization vulnerability in ajax/deleteActivity.php and ajax/editActivity.p
CVE-2026-113468
The payment notification endpoint for PayPal accepts incoming data without verifying that it comes from the payment prov
CVE-2026-112239
The extension provides a backend endpoint that writes a submitted value into a submitted field of a submitted page recor
CVE-2026-112071
The order cancellation function accepts an order identifier from the request and acts on that order without checking tha
CVE-2026-112070
The AJAX routes of the extension do not check whether a backend user has access to the related module or dashboard widge
CVE-2026-112069
The extension no longer applied its access protection to files in file storages that use a non-default relative base pat
CVE-2026-112066
The JSON import of the cookie consent configuration did not respect the backend user's permissions. Non-admin backend us
CVE-2026-112065
The routes that provide consent history and statistics data did not check whether the backend user had access to the mod
CVE-2026-77930
EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell comman
CVE-2026-109444
OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run
CVE-2026-86955
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27. An app
CVE-2026-86932
An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app
CVE-2026-86907
An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Sequoia 15.8, macOS
CVE-2026-77930
EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell comman
CVE-2026-28850
An authorization issue was addressed with improved state management. This issue is fixed in visionOS 27. An app may be a