CVE-2026-87803
CVE-2026-87803
An authorization bypass vulnerability exists in the Countly Server DBViewer due to flawed sub-pipeline detection in the
#cwe-863
共收录 2104 条相关情报。
← 返回所有主题The Notiqoo WordPress plugin before 1.4.14 does not have capability checks on several of its AJAX actions and builds the name of the option to write from user input, allowing u...
CVE-2026-19840
The Notiqoo WordPress plugin before 1.4.14 does not have capability checks on several of its AJAX actions and builds th
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, DELETE /api/v1/knowledge/{id}/delete in backend/open_webui/router...
CVE-2026-87998
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, DELETE /
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.7.0 until 0.11.1, the built-in knowledge search tool passed the caller's readable kn...
CVE-2026-87017
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.7.0 until 0.11.1, the built
Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion
CVE-2026-87998
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, DELETE /
Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends
CVE-2026-87017
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.7.0 until 0.11.1, the built
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.1, role synchronization in backend/open_webui/routers/auths.py and ba...
CVE-2026-87014
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.1, role sync
Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notes
CVE-2026-87014
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.1, role sync
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87046
Tanium addressed an improper access controls vulnerability in Comply.
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87075
Tanium addressed an improper access controls vulnerability in Comply.
Incorrect authorization in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote...
CVE-2026-87651
Incorrect authorization in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origi
Tanium addressed an improper access controls vulnerability in Tanium Server.
CVE-2026-14892
Tanium addressed an improper access controls vulnerability in Tanium Server.
Incorrect authorization in PushAPI in Google Chrome prior to 153.0.8010.36 allowed a remote...
CVE-2026-87652
Incorrect authorization in PushAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised
Incorrect authorization in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36...
CVE-2026-87626
Incorrect authorization in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attack
Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote...
CVE-2026-87629
Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social e
Incorrect authorization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a...
CVE-2026-87644
Incorrect authorization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had
Incorrect authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote...
CVE-2026-87610
Incorrect authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system ac
Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote...
CVE-2026-87614
Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compr
Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote...
CVE-2026-87598
Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web
Incorrect authorization in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote...
CVE-2026-87594
Incorrect authorization in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compro