Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions
CVE-2026-87997
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, POST /ap
#cwe-862
共收录 4122 条相关情报。
← 返回所有主题Open WebUI: Channel members can overwrite another member's message via the chat completions endpoint
CVE-2026-87994
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 until 0.11.1, the chann
Missing authorization in the Address Delete controller in Mageplaza GDPR for Magento 2 (mageplaza/module-gdpr) through 4.2.9 allows remote unauthenticated attackers to delete an...
CVE-2026-79324
Missing authorization in the Address Delete controller in Mageplaza GDPR for Magento 2 (mageplaza/module-gdpr) through 4
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87048
Tanium addressed an improper access controls vulnerability in Comply.
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87073
Tanium addressed an improper access controls vulnerability in Comply.
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87072
Tanium addressed an improper access controls vulnerability in Comply.
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87037
Tanium addressed an improper access controls vulnerability in Comply.
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87036
Tanium addressed an improper access controls vulnerability in Comply.
The WP Event Solution (Eventin) plugin for WordPress is vulnerable to Missing Authorization in...
CVE-2026-12956
The WP Event Solution (Eventin) plugin for WordPress is vulnerable to Missing Authorization in versions up to, and inclu
Missing authorization in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...
CVE-2026-87622
Missing authorization in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin po
Missing authorization in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...
CVE-2026-87631
Missing authorization in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensi
Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote...
CVE-2026-87603
Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system a
Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote...
CVE-2026-87611
Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromise
Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote...
CVE-2026-87605
Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised
Missing authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote...
CVE-2026-87606
Missing authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had comprom
n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy
CVE-2026-86996
## Impact A workflow's "_This workflow can be called by_" setting was enforced by the Execute Workflow node but was not
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-69465
CVE-2026-69465 是 Microsoft Office SharePoint 中的一个缺失授权漏洞。根据 NVD 元数据，该漏洞允许已获得合法凭据的攻击者通过网络在目标系统上执行代码。漏洞的 CVSS 评分为 8.8（高），攻击
Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.
CVE-2026-69453
Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.
Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally.
CVE-2026-69403
Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally.
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-69380
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.