共收录 2104 条相关情报。
← 返回所有主题CVE-2026-78583
Incorrect Authorization (CWE-863) in Kibana can lead to privilege escalation via Input Data Manipulation (CAPEC-153). El
CVE-2026-82023
LearnPress WordPress Plugin before 4.4.6 contains a broken object-level authorization vulnerability that allows authenti
CVE-2026-80515
In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 the management-authorization gate that protects every /…/mgmt/… REST e
CVE-2026-85166
n8n before 2.35.4 and 2.36.x before 2.36.2 does not validate credential references in the inline workflow JSON of nodes
CVE-2026-85093
Cheshire Cat AI's GET /memory/collections/{collection_id}/points endpoint fails to apply per-user filtering when retriev
CVE-2026-74769
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain an Incorrect Authorization vulnerability in the RES
CVE-2026-85166
n8n before 2.35.4 and 2.36.x before 2.36.2 does not validate credential references in the inline workflow JSON of nodes
CVE-2026-85093
Cheshire Cat AI's GET /memory/collections/{collection_id}/points endpoint fails to apply per-user filtering when retriev
CVE-2026-73841
### Summary The OpenChoreo API server (`openchoreo-api`) authorized requests to its exec and wirelogs endpoints against
CVE-2026-72921
### Impact When a filer JWT restricts a token to a set of path prefixes via `allowed_prefixes`, the authorization check
CVE-2026-77125
A vulnerability was identified in Sonatype Nexus Repository 3 in which two blobstore group management REST API endpoints
CVE-2026-77122
An authorization flaw in the REST API repository details endpoint (GET /service/rest/v1/repositories/{repositoryName}) i
CVE-2026-77125
A vulnerability was identified in Sonatype Nexus Repository 3 in which two blobstore group management REST API endpoints
CVE-2026-77122
An authorization flaw in the REST API repository details endpoint (GET /service/rest/v1/repositories/{repositoryName}) i
CVE-2026-14199
Only self-managed Grafana instances with Auth Proxy authentication and identity caching enabled (sync_ttl greater than z
CVE-2026-82293
Incorrect Authorization (CWE-863) in the Kibana machine learning feature can lead to unauthorized resource consumption v
CVE-2026-78609
Incorrect Authorization (CWE-863) in Elastic Cloud on Kubernetes (ECK) can lead to unauthorized modification of data via
CVE-2026-78598
Incorrect Authorization (CWE-863) in the Kibana machine learning feature can lead to information disclosure via Exploiti
CVE-2026-78587
Incorrect Authorization (CWE-863) in Fleet Server can lead to a denial of service of agent upload operations via Privile
CVE-2026-78153
The Restrict User Access WordPress plugin before 2.8.1 does not normalise the REST API route before checking it against