40036 matches found
UniFi OS - Authentication Bypass via Path Traversal (..%2f)
UniFi OS devices contain an improper access control vulnerability caused by insufficient authorization checks, letting network attackers make unauthorized system changes, exploit requires network access. id: CVE-2026-34908 info: name: UniFi OS - Authentication Bypass via Path Traversal ..%2f...
CVE-2026-20315
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...
CVE-2026-20315 Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Access Control Vulnerabilities
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...
CVE-2026-20315
CVE-2026-20315 is a set of improper access control vulnerabilities (CWE-284) in Cisco Secure Workload , affecting both SaaS and on-premises deployments. The flaws span authorization, authentication, privilege escalation, and access control bypasses, carrying a CVSS 10.0 rating. They were discover...
EUVD-2026-62570
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...
PT-2026-78496
Name of the Vulnerable Software and Affected Versions Cisco Secure Workload affected versions not specified Description Improper access control issues exist within the software, categorized under CWE-284, which refers to the improper restriction of operations on a resource. These issues were...
EUVD-2026-61652
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Engineering Communication Interface. The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where...
FileRise <= 3.3.0 - Unauthenticated File Read
FileRise = 3.3.0 contains an unauthenticated file read vulnerability caused by a lack of access control on the /uploads directory, letting unauthenticated attackers access uploaded files directly, exploit requires knowledge or guessing of file paths. id: CVE-2026-25231 info: name: FileRise = 3.3....
GO-2024-3218 vulnerabilities
Vulnerabilities for packages: rke2-runtime, k3s, rke2-runtime-fips...
CVE-2026-59505
CWE-284: Improper Access Control...
CVE-2026-59501
CWE-284: Improper Access Control...
EUVD-2026-57774
CWE-798: Use of Hard-coded Credentials CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-284: Improper Access Control...
CVE-2026-59507
Technical details about CVE-2026-59507 are not publicly available in the provided documents. Monitor for updates.
CVE-2026-59505 Priority - CWE-284: Improper Access Control
CWE-284: Improper Access Control...
CVE-2026-59505
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2026-59505
CWE-284: Improper Access Control...
EUVD-2026-57772
CWE-284: Improper Access Control...
CVE-2026-59501
CWE-284: Improper Access Control...