共收录 4228 条相关情报。
← 返回所有主题CVE-2026-54322
### Summary Daytona's organization role update and delete endpoints authorized the caller as an owner of the organizatio
CVE-2026-12105
CVE-2026-12105 是 Devolutions Server 2026.2.5 和 2026.1.21 版本中存在的一个不当访问控制漏洞。经过身份验证的用户可以通过利用继承权限的文件夹复制操作来访问本不应具有权限的附件。该漏洞允许
CVE-2026-53866
OpenClaw before 2026.5.12 contains an allowlist bypass vulnerability in shell inline-command parsing that allows authent
CVE-2026-53851
OpenClaw before 2026.5.12 contains a notification bypass vulnerability allowing Slack reaction events to enter the agent
CVE-2026-53850
OpenClaw before 2026.4.25 contains a control scope enforcement bypass vulnerability in the focus command that allows aut
CVE-2026-53844
OpenClaw before 2026.4.29 contains a session visibility check bypass vulnerability in shared memory search that allows a
CVE-2026-10831
A denial-of-service vulnerability exists in NPort devices because of improper access control on the command port. The co
CVE-2025-14272
A security issue was identified in Pavilion due to improper authorization enforcement in API endpoints. This vulnerabili
CVE-2026-54190
Unauthenticated Broken Access Control in Envira Photo Gallery <= 1.12.5 versions.
CVE-2026-52714
Unauthenticated Broken Access Control in SEO Plugin by Squirrly SEO <= 12.4.16 versions.
CVE-2026-52711
Unauthenticated Broken Access Control in WooCommerce POS <= 1.8.14 versions.
CVE-2026-40809
Missing Authorization vulnerability in Rara Themes Metro Magazine allows Exploiting Incorrectly Configured Access Contro
CVE-2026-39490
Unauthenticated Broken Access Control in JupiterX Core <= 4.14.1 versions.
CVE-2026-2381
The WooCommerce Stripe Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a
CVE-2025-68045
Unauthenticated Broken Access Control in WP Event SOlution <= 4.1.12 versions.
CVE-2026-9187
The Abandoned Contact Form 7 plugin for WordPress is vulnerable to unauthorized arbitrary post deletion in versions up t
CVE-2026-6964
The Video Conferencing with Zoom plugin for WordPress is vulnerable to authorization bypass in all versions up to, and i
CVE-2026-49775
Unauthenticated Broken Access Control in Welcart e-Commerce <= 2.11.28 versions.
CVE-2026-49065
Unauthenticated Broken Access Control in Hippoo Mobile App for WooCommerce <= 1.9.5 versions.
CVE-2026-49070
Unauthenticated Broken Access Control in Knit Pay <= 9.4.0.0 versions.