Missing Authorization (CWE-862) in Kibana can lead to unauthorized deletion of data via...
CVE-2026-78582
Missing Authorization (CWE-862) in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly Configure
#cwe-862
共收录 4087 条相关情报。
← 返回所有主题Missing Authorization (CWE-862) in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180). An authenti...
CVE-2026-78582
Missing Authorization (CWE-862) in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly Configure
SiYuan before v3.8.4 does not validate the sender or restrict recipients in the 'siyuan-send-windows' IPC handler of the Electron main process (app/electron/main.js). The handle...
CVE-2026-100634
SiYuan before v3.8.4 does not validate the sender or restrict recipients in the 'siyuan-send-windows' IPC handler of the
Cap-go capgo.app fails to validate that principals in channel_permission_overrides belong to the organization, allowing authenticated app/org admins to grant channel permissions...
CVE-2026-100617
Cap-go capgo.app fails to validate that principals in channel_permission_overrides belong to the organization, allowing
Flowise through 3.1.4 does not enforce authorization on the BullMQ admin dashboard. When the server runs in queue mode with the dashboard enabled and not in cloud mode (MODE=que...
CVE-2026-100608
Flowise through 3.1.4 does not enforce authorization on the BullMQ admin dashboard. When the server runs in queue mode w
Flowise through 3.1.4 contains missing route-level RBAC checks on chat message endpoints that allow low-privileged API keys to read and delete chat history. Attackers with valid...
CVE-2026-100605
Flowise through 3.1.4 contains missing route-level RBAC checks on chat message endpoints that allow low-privileged API k
ClawHub (openclaw/clawhub application/backend) contains a missing authorization check in the changelog preview feature. A signed-in caller can invoke the public skills:generateC...
CVE-2026-100602
ClawHub (openclaw/clawhub application/backend) contains a missing authorization check in the changelog preview feature.
SiYuan before v3.8.4 Missing Authorization via siyuan-send-windows
CVE-2026-100634
SiYuan before v3.8.4 does not validate the sender or restrict recipients in the 'siyuan-send-windows' IPC handler of the
Flowise through 3.1.4 Authorization Bypass via BullMQ Dashboard
CVE-2026-100608
Flowise through 3.1.4 does not enforce authorization on the BullMQ admin dashboard. When the server runs in queue mode w
Flowise through 3.1.4 Missing Authorization via Chat Message Routes
CVE-2026-100605
Flowise through 3.1.4 contains missing route-level RBAC checks on chat message endpoints that allow low-privileged API k
The Testimonials Widget WordPress plugin through 4.0.4 does not perform a capability or ownership check when handling its front-end testimonial submission form, allowing unauthe...
CVE-2026-96532
The Testimonials Widget WordPress plugin through 4.0.4 does not perform a capability or ownership check when handling it
The MCP Server for WordPress WordPress plugin before 1.8.2 does not perform an ownership or sufficient capability check on its workflow create, update and delete REST routes, a...
CVE-2026-96525
The MCP Server for WordPress WordPress plugin before 1.8.2 does not perform an ownership or sufficient capability check
Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - Translate Extension allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects ...
CVE-2026-100378
Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - Translate Extension allows Accessing Functionali
ServiceNow has remediated a missing authorization vulnerability that was identified in the...
CVE-2026-86860
ServiceNow has remediated a missing authorization vulnerability that was identified in the ServiceNow AI Platform. This
GROWI applies its page-viewer permission check to attachment requests only when the request...
CVE-2026-80191
GROWI applies its page-viewer permission check to attachment requests only when the request carries an authenticated use
Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces
CVE-2026-56742
### Impact In Cilium clusters using [Gateway API](https://docs.cilium.io/en/stable/network/servicemesh/gateway-api/gate
ixo Blockchain x/bonds DID-resolved payer drain + x/entity ICA authorization bypass
CVE-2026-61604
Impact Type: Improper authorization leading to unauthorized movement of user funds. The x/bonds module moved funds
GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 19.2.7, 19.3...
CVE-2026-92470
GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 19.2.7, 19.3 before 19.3.3, and 19.4
A vulnerability was detected in ByteDance Coze Scraper Extension up to 2.0.2. Affected by this...
CVE-2026-96680
A vulnerability was detected in ByteDance Coze Scraper Extension up to 2.0.2. Affected by this vulnerability is the func
A vulnerability has been found in Abdurrab5 online-makeup-store. Affected is the function...
CVE-2026-96603
A vulnerability has been found in Abdurrab5 online-makeup-store. Affected is the function confirm_logged_in/confirm_user