190390 matches found
CVE-2026-102397: Missing Authorization
Unauthenticated Broken Access Control in Ultimate Maps by Supsystic = 1.5.5 versions...
CVE-2026-51867
agentgpt v.1.0.0 is vulnerable to Incorrect Access Control in next/src/server/api/routers/agentRouter.ts. An externally reachable path accepts a caller-selected object or tenant identifier and reaches a data-access operation without a visible owner, tenant, workspace, or membership binding on tha...
CVE-2026-102132: Improper Access Control
An administrative import function in Kiteworks Core did not verify that the requesting administrator was entitled to create the privileged integration credential being imported. A delegated administrator holding a single narrowly scoped administrative permission could therefore obtain full system...
PT-2026-103258
Contributor Broken Access Control in The Events Calendar = 6.17.5 versions...
The vulnerability of the Azure SQL Database, a cloud relational database, is related to deficiencies in access control. This allows attackers to escalate their privileges.
The vulnerability of the Azure SQL Database cloud relational database model is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...
CVE-2026-97197: Missing Authorization
Unauthenticated Broken Access Control in WordPress Backup & Migration = 1.6.0 versions...
CVE-2026-51867
The software agentgpt v.1.0.0 is vulnerable to Incorrect Access Control within the next/src/server/api/routers/agentRouter.ts component. The issue stems from an externally reachable path that accepts a caller-selected object or tenant identifier, allowing it to perform data-access operations with...
CVE-2026-97247: Missing Authorization
Unauthenticated Broken Access Control in Blocksy Companion = 2.1.55 versions...
CVE-2026-95587: Missing Authorization
Unauthenticated Broken Access Control in Hostinger Migrator = 1.0 versions...
PT-2026-103186
Unauthenticated Broken Access Control in Hostinger Migrator = 1.0 versions...
PT-2026-103235
Subscriber Broken Access Control in MCP Content Manager Lite = 1.1.0 versions...
CVE-2026-97267: Missing Authorization
Subscriber Broken Access Control in Prevent files / folders access = 2.6.7 versions...
PT-2026-103299
Authorization Bypass Through User-Controlled Key vulnerability in WP Hosting AS Pay with Vipps for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pay with Vipps for WooCommerce: from n/a through 6.2.4...
CVE-2026-51867: Undefined Security Weakness
agentgpt v.1.0.0 is vulnerable to Incorrect Access Control in next/src/server/api/routers/agentRouter.ts. An externally reachable path accepts a caller-selected object or tenant identifier and reaches a data-access operation without a visible owner, tenant, workspace, or membership binding on tha...
PT-2026-103352
Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver for Windows and Linux affected versions not specified Description A flaw exists in the kernel mode layer that allows an attacker to cause improper access control. This issue could result in a denial of service, which ...
CVE-2026-102375: Missing Authorization
Subscriber Broken Access Control in Optimole = 4.2.14 versions...
CVE-2026-97259: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key vulnerability in WP Hosting AS Pay with Vipps for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pay with Vipps for WooCommerce: from n/a through 6.2.4...
CVE-2026-97285: Missing Authorization
Contributor Broken Access Control in The Events Calendar = 6.17.5 versions...