EUVD-2026-63832

Improper authorization for CRUD operations on Project Roles and Project Role permissions for domain admins in CloudStack. A Domain Admin can create, update, delete, and list project roles and project role permissions for projects in any domain, not just their own. The check only confirms the call...

WordPress User Verification plugin <= 2.0.47 - Unauthenticated Arbitrary Account Lockout via IDOR vulnerability

Unauthenticated Arbitrary Account Lockout via IDOR vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin User Verification versions = 2.0.47...

CVE-2026-16962

The Tamara Checkout WordPress plugin through 1.9.9.20 does not verify the order key, a nonce, or any capability on its public payment cancel/fail return URLs, changing a WooCommerce order's status based solely on an attacker-supplied numeric order id, so an unauthenticated attacker can cancel or...

EUVD-2026-63824

The AI Engine WordPress plugin before 3.6.1 does not verify that the requesting user is authorized to act on the targeted account before performing privileged user management operations, allowing users with the Administrator role on a Multisite sub-site to take over any account on the network,...

CVE-2026-75796 AI Engine 2.8.0 - 3.6.0 - Admin+ Multisite Network Administrator Account Takeover via MCP User Tools

The AI Engine WordPress plugin before 3.6.1 does not verify that the requesting user is authorized to act on the targeted account before performing privileged user management operations, allowing users with the Administrator role on a Multisite sub-site to take over any account on the network,...

CVE-2026-75796

CVE-2026-75796 affects the AI Engine WordPress plugin (versions 2.8.0 through 3.6.0 ). The vulnerability is a missing authorization check in the plugin's MCP User Tools , which perform privileged user management operations without verifying that the requesting user is authorized to act on the tar...

EUVD-2026-63628

Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized attacker to disclose information over a network...

EUVD-2026-63627

Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-63621

Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

PT-2026-79331

Name of the Vulnerable Software and Affected Versions Apache CloudStack versions 4.15.0.0 through 4.20.3.0 Apache CloudStack versions 4.21.0.0 through 4.22.1.0 Description Improper authorization exists for CRUD Create, Read, Update, Delete operations on Project Roles and Project Role permissions...

PT-2026-79411

Name of the Vulnerable Software and Affected Versions Omnigent versions prior to 0.3.0 Description An authenticated user with edit access to a session can replace a shared agent bundle because the system fails to reject bound shared or template agents where the agent.session id is None. By...

PT-2026-79330

Name of the Vulnerable Software and Affected Versions Apache CloudStack versions 4.12.0.0 through 4.20.3.0 Apache CloudStack versions 4.21.0.0 through 4.22.1.0 Description An authorization flaw exists in the host tags listing functionality. Domain Admins are permitted to call the 'listHostTags'...

Kibana 8.9.x < 8.19.19 / 9.x < 9.4.5 Missing Authorization (ESA-2026-86)

The version of Kibana installed on the remote host is 8.9.x prior to 8.19.19, or 9.x prior to 9.4.5. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-86 advisory. - The state that Kibana stores for an Observability Onboarding flow is not bound to the user who created th...

Kibana 9.2.x < 9.4.5 Incorrect Authorization (ESA-2026-82)

The version of Kibana installed on the remote host is 9.2.x prior to 9.4.5. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-82 advisory. - Kibana Agent Builder A2A JSON-RPC API endpoint derives the identifier of a stored conversation from a user-supplied input, and the...

Linux Distros Unpatched Vulnerability : CVE-2026-63379

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent processes chunked HTTP trailers in http.c through evhttpreadtrailer and...

Kibana 8.x < 8.19.20 / 9.x < 9.4.5 Multiple Vulnerabilities (ESA-2026-92 / ESA-2026-98 / ESA-2026-100 / ESA-2026-104 / ESA-2026-105 / ESA-2026-106 / ESA-2026-110)

The version of Kibana installed on the remote host is 8.x prior to 8.19.20, or 9.x prior to 9.4.5. It is, therefore, affected by multiple vulnerabilities as referenced in the ESA-2026-92, ESA-2026-98, ESA-2026-100, ESA-2026-104, ESA-2026-105, ESA-2026-106 and ESA-2026-110 advisories. - Missing...

Kibana 9.1.x < 9.4.5 Multiple Vulnerabilities (ESA-2026-97 / ESA-2026-89)

The version of Kibana installed on the remote host is 9.1.x prior to 9.4.5. It is, therefore, affected by multiple vulnerabilities as referenced in the ESA-2026-89 and ESA-2026-97 advisories. - The Elastic Security capability that suggests existing field values while a user authors endpoint polic...

PT-2026-79292

Rocket.Chat in versions before 8.8.0, 8.7.1, 8.6.2, 8.5.3, 8.4.6. 8.3.8, 8.2.8, 8.1.8, and 7.10.15, the Meteor DDP methods getThreadsList and getThreadMessages accept rid / tmid as raw, untyped parameters with no schema validation. A MongoDB operator object e.g. "$gt": "4" can be substituted for ...

PT-2026-82326

Name of the Vulnerable Software and Affected Versions SeaweedFS versions prior to 4.40 Description An authenticated S3 principal with permissions limited to a nested object key can overwrite an object outside their assigned scope. This occurs when calling the PutObjectAcl function on a permitted...

PT-2026-79431

A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.6.2. This issue affects the function FlwInstanceController/FlwDefinitionController/FlwCategoryController/FlwSpelController/TestLeaveController of the component Workflow Endpoint. Such manipulation leads to improper authorization. Th...