共收录 2104 条相关情报。
← 返回所有主题CVE-2026-86073
n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.1, the OAuth token endpoint bound an author
CVE-2026-82074
MongoDB Server contains an incorrect authorization vulnerability in the aggregation framework. An authenticated user wit
CVE-2026-82073
A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges t
CVE-2026-82062
A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled f
CVE-2026-82053
A security issue exists in MongoDB's LDAP authorization integration where pooled LDAP connections can retain stale authe
CVE-2026-86073
n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.1, the OAuth token endpoint bound an author
CVE-2026-86665
A vulnerability was identified in aircheng-org iWebShop-5 up to 5.15. This issue affects the function Update::index of t
CVE-2026-86665
A vulnerability was identified in aircheng-org iWebShop-5 up to 5.15. This issue affects the function Update::index of t
CVE-2026-73318
XenForo before 2.3.13 contains a missing authorization vulnerability in the force-agreement controller that allows any A
CVE-2026-73317
XenForo before 2.3.13 contains a missing authorization vulnerability in the ACP cache-rebuild dispatcher that allows lim
CVE-2026-73313
XenForo before 2.3.13 contains a multi-factor authentication bypass vulnerability in the passkey TFA provider that allow
CVE-2026-73310
XenForo before 2.3.13 contains an authorization flaw in the OAuth2 token endpoint that allows attackers controlling any
CVE-2026-33391
An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient vali
CVE-2026-33388
An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation o
CVE-2026-86544
knowns versions before 0.30.0 contain an authorization bypass vulnerability where mutating code actions are incorrectly
CVE-2026-86437
Lara Dashboard before 1.3.2 authorizes the POST /admin/settings/core-upgrades/upload endpoint with only the settings.edi
CVE-2026-86544
knowns versions before 0.30.0 contain an authorization bypass vulnerability where mutating code actions are incorrectly
CVE-2026-86437
Lara Dashboard before 1.3.2 authorizes the POST /admin/settings/core-upgrades/upload endpoint with only the settings.edi
CVE-2026-86493
In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed read-only users to create and modify whiteb
CVE-2026-86498
In JetBrains YouTrack before 2025.3.160480, 2026.1.14047 pUT requests on link sub-resources allowed modification linked