共收录 2248 条相关情报。
← 返回所有主题CVE-2026-32906
OpenClaw before 2026.5.12 contains a privilege escalation vulnerability in Slack plugin approvals that allows exec-autho
CVE-2026-9808
An authorization bypass vulnerability exists in the Mautic 7 API v2 endpoints (utilizing API Platform). Under certain co
CVE-2026-49299
In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write opera
CVE-2026-44882
Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used t
CVE-2026-44850
Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used t
CVE-2026-46823
Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Suite (component: Auth
CVE-2026-42070
Mantis Bug Tracker (MantisBT) is an open source issue tracker. Prior to 2.28.2, the mc_issue_update() function in Mantis
CVE-2026-45042
RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, improper authorization in the Upload
CVE-2026-44394
An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone federated token rescoping mechanism does not p
CVE-2026-43000
An issue was discovered in OpenStack Keystone before 29.0.2. When combined with an application credential impersonation
CVE-2026-42999
An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone RBAC policy enforcer in enforce_call unconditi
CVE-2026-42998
An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone application credential authentication plugin d
CVE-2026-9791
Keycloak 中发现一个缺陷，允许经过身份验证且具有现有组织成员身份的用户通过访问面向用户的 API（如账户 API）或请求带有 'organization' 作用域的 OpenID Connect (OIDC) 令牌来利用此漏洞。当管
CVE-2026-45704
### Summary `CustomReports` uses inconsistent authorization between the report listing endpoint and the report detail e
CVE-2026-45703
### Summary The `WordExport` export flow only checks whether the current backend user has the feature permission `word_
CVE-2026-6713
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.10.7, 18.11 before 18.11.4, an
CVE-2026-45075
### Description Symfony's `#[IsGranted('...')]`, `#[IsSignatureValid]`, and `#[IsCsrfTokenValid(...)]` attributes allow
CVE-2026-48064
pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.1, when a PAM service is
CVE-2026-45108
Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From 2.0.0 to before 3.1.5 and 2.3.11,
CVE-2026-44681
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.12 and 1.7.1, an unauthenticated