共收录 2118 条相关情报。
← 返回所有主题CVE-2026-63512
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network
CVE-2026-62872
Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network.
CVE-2026-62775
Incorrect authorization in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to d
CVE-2026-61925
Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-48375
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in an application denial-of-service
CVE-2026-25652
is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privileged atta
CVE-2026-72921
SeaweedFS is a distributed storage system. Prior to 4.24, the weed/server/filer_server_handlers.go allowed_prefixes auth
CVE-2026-18635
Velociraptor's VQL has a query() plugin which allows running a VQL query in a different org or user context. To be able
CVE-2026-72785
Craft CMS 5.0.0-RC1 through 5.10.5 contains an incorrect authorization vulnerability. A control-panel user holding only
CVE-2026-72771
n8n versions before 2.32.1 fail to enforce the Allowed HTTP Request Domains allowlist in multiple AI and LLM nodes when
CVE-2026-13738
CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations. Soft
CVE-2026-13737
CommServe contained an allowlist bypass vulnerability affecting command execution authorization. Software customers upg
CVE-2026-18348
Missing authorization check in the upload_azure, upload_sftp, and upload_smb VQL plugins allows an authenticated analyst
CVE-2025-30238
In affected TP-Link Aginet devices, insufficient authorization validation allows authenticated low-privileged users to e
CVE-2025-30238
In affected TP-Link Aginet devices, insufficient authorization validation allows authenticated low-privileged users to e
CVE-2026-69118
Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows
CVE-2026-72886
Dokploy is a free, self-hostable Platform as a Service (PaaS). From 0.29.2 until 0.29.13, schedule.create and schedule.u
CVE-2026-69118
Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows
CVE-2026-12624
Vault’s ACL policy engine did not consistently enforce a wildcard (glob) deny rule against LIST requests made with a tra
CVE-2026-21077
Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.