The application's role-authorization lookup defaults to granting access when a request handler's...
CVE-2026-90450
The application's role-authorization lookup defaults to granting access when a request handler's name is not present in
#cwe-863
共收录 2104 条相关情报。
← 返回所有主题An issue was discovered in OpenStack Keystone before 29.0.3. Tokens obtained via delegated authentication methods (EC2 credentials, application credentials, OAuth1 access tokens...
CVE-2026-90460
本漏洞影响 OpenStack Keystone 29.0.3 之前的版本，核心问题在于 Keystone 的授权模型没有对“委托认证（delegated authentication）”派生出来的令牌施加与普通用户令牌同等的权限约束。通过
The application's role-authorization lookup defaults to granting access when a request handler's name is not present in its table of role requirements, rather than defaulting to...
CVE-2026-90450
该漏洞是应用程序角色授权判定逻辑中的默认放行 (fail-open) 缺陷,属于典型的失效访问控制 (Broken Access Control) 问题。应用程序内部维护了一张「请求处理器名称 → 所需角色」的授权映射表,在收到请求时依据该
Dolibarr 23.0.4 before 24.0.1 ontains an authorization bypass vulnerability that allows unauthenticated attackers to read arbitrary files through the document storage endpoints ...
CVE-2026-89013
Dolibarr 23.0.4 before 24.0.1 ontains an authorization bypass vulnerability that allows unauthenticated attackers to rea
Forgejo before 16.0.4 allows use of restricted API tokens for unintended access to the "allow...
CVE-2026-89151
Forgejo before 16.0.4 allows use of restricted API tokens for unintended access to the "allow maintainer edit" feature.
strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins...
CVE-2026-78134
strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a
Forgejo before 16.0.4 allows use of restricted API tokens for unintended access to the "allow maintainer edit" feature.
CVE-2026-89151
Forgejo before 16.0.4 allows use of restricted API tokens for unintended access to the "allow maintainer edit" feature.
strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity.
CVE-2026-78134
strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.27 could allow...
CVE-2026-75624
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.27 could allow a remote authenticated
Concrete CMS below 9.5.3 stores user validation hashes for multiple purposes (email/registration validation, password reset, and persistent login) in a single table with a type ...
CVE-2026-81905
Concrete CMS below 9.5.3 stores user validation hashes for multiple purposes (email/registration validation, password re
Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange
CVE-2026-88006
## Summary Open WebUI's OAuth token exchange endpoint issues a session for a provider access token without running the O
Traefik: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') and Incorrect Authorization
CVE-2026-88008
## Summary There is a high-severity request-smuggling vulnerability in Traefik's handling of the HTTP/1.1 `Upgrade` mec
Traefik HTTP/3 Backend NTLM Connection Reuse
CVE-2026-88007
## Summary Traefik's HTTP/3 request path did not initialize the connection-scoped backend transport holder that isolate
rclone: RC per-server auth-proxy bypass
CVE-2026-88044
## Summary `serve/start` accepts protocol options in a per-server `proxyOpt` object. The FTP and S3 RC adapters parse t
Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notes
CVE-2026-87014
## Summary A user who is demoted from admin by an identity provider keeps admin-level read and write access to every us
@jhb.software/payload-alt-text-plugin: Alt Text Endpoint Authorization Bypass via Payload Local API `overrideAccess` Omission
CVE-2026-59965
## Alt Text Endpoint Authorization Bypass via Payload Local API `overrideAccess` Omission ### Summary `@jhb.software/p
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.27 could allow a remote authenticated attacker to bypass security restrictions due to incorrec...
CVE-2026-75624
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.27 could allow a remote authenticated
n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution
CVE-2026-86073
## Impact The OAuth token endpoint bound an authorization code's first access token to the consented resource, but not
IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an unauthenticated attacker to execute arbitrary code and access or modify chat sessions through publicly shared MCP p...
CVE-2026-85025
IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an unauthenticated attacker to execute arbitrary code and acc
Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog deregistration path that may allow a local ACL token to delete peer-imported catalog object...
CVE-2026-87107
Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog deregistration path that may allow