PT-2026-89460

🚨 CVE-2026-4129 There is an improper access control vulnerability in NI SystemLink that may allow an authenticated user with limited privileges to access host operating system files and directories that should be restricted. This vulnerability affects NI SystemLink and NI SystemLink Server 2026 Q...

JetBrains TeamCity 2021.2 - 2022.10 Improper Access Control (CVE-2022-44622)

The version of JetBrains TeamCity installed on the remote host is version 2021.2 up to but not including 2022.10. It is, therefore, affected by a vulnerability: - In JetBrains TeamCity version between 2021.2 and 2022.10 access permissions for secure token health items were excessive CVE-2022-4462...

CVE-2026-50165

alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. An Improper Access Control issue in versions prior to 2.0-M5-2605 allows an organization owner to read system-level configuration secrets through organization/event scoped "single configuratio...

CVE-2026-50165 alf.io has Improper Access Control for Organization Owners that Exposes System Secrets

alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. An Improper Access Control issue in versions prior to 2.0-M5-2605 allows an organization owner to read system-level configuration secrets through organization/event scoped "single configuratio...

CVE-2026-50165

alf.io , an open-source ticket reservation system, contains an Improper Access Control flaw in its organization and event "single configuration" endpoints. These endpoints require only organization or event ownership but accept an arbitrary configuration key, performing a lookup that includes sys...

EUVD-2026-75140

alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. An Improper Access Control issue in versions prior to 2.0-M5-2605 allows an organization owner to read system-level configuration secrets through organization/event scoped "single configuratio...

CVE-2026-50165 alf.io has Improper Access Control for Organization Owners that Exposes System Secrets

alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. An Improper Access Control issue in versions prior to 2.0-M5-2605 allows an organization owner to read system-level configuration secrets through organization/event scoped "single configuratio...

CVE-2026-79617

CVE-2026-79617 is an improper access control vulnerability (Incorrect Permission Assignment for Critical Resource) in TÜBİTAK BİLGEM's Pardus LightDM Greeter , affecting versions before 0.4.15 . The flaw allows an attacker with local access and low privileges to exploit incorrectly configured acc...

Vulnerabilities in Adobe ColdFusion

Adobe has identified several vulnerabilities in Adobe ColdFusion. These vulnerabilities include a stored Cross-Site Scripting XSS vulnerability, where an attacker with low privileges can inject malicious scripts into form fields, which are then executed in the user’s browser. There is also a...

CVE-2026-21109

Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information...

CVE-2026-21098

Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction...

CVE-2026-21100

Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity...

CVE-2026-21105

Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 allows local attackers to access sensitive information...

CVE-2026-21099

Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information...

CVE-2026-21109

Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information...

CVE-2026-21109

Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information...

CVE-2026-21109

CVE-2026-21109 is an improper access control vulnerability in Samsung's Watch Plugin , affecting versions prior to Android Watch 17 . A local attacker with no required privileges can access sensitive information , resulting in low confidentiality impact. The CVSS 4.0 score is 2.1 (LOW) , with an ...

EUVD-2026-74650

Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information...

CVE-2026-21105

Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 allows local attackers to access sensitive information...

CVE-2026-21105

Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 allows local attackers to access sensitive information...