Target Management Oracle Enterprise Manager Compromise

The vulnerability of the Target Management component of the Oracle Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the system using the HTTPS protocol...

WebLogic Server Proxy Plug-In Unauthorized Access

The vulnerability of the WebLogic Server Proxy Plug-In for third-party web servers within the Oracle Fusion Middleware software platform is related to access control errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to create, delete, or modify data using t...

JavaFX Component Compromise

The vulnerability of the JavaFX component of Oracle Java SE software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to compromise the system using network protocols...

Oracle Access Manager Authentication Engine Full Control

The vulnerability of the Authentication Engine component in the Oracle Access Manager access control system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application through the HTTP...

Oracle Unified Directory OUD Core Full Control

The vulnerability of the OUD Core component of the Oracle Unified Directory application, which is used for simplified deployment of the Oracle Fusion Middleware software, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control...

Oracle WebCenter Portal Runtime Tools Full Control

The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTP network protocol...

PeopleSoft Enterprise Common Application Objects Unauthorized Access

The vulnerability of Common Application Objects in the PeopleSoft Enterprise Business Process Management tool relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38591)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. There is an access control vulnerability in TOTOLINK T6. This vulnerability stems from improper access control in the meshSlaveUpgfw function. Attackers can exploit this vulnerability by sending a specially crafted MQTT message...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38426)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from improper access control in the setDdnsCfg function. Attackers can exploit this vulnerability by sending a specially crafted POST reque...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38415)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability in access control. This vulnerability stems from an improper access control in the getCloudDownloadStatus function. Attackers can exploit this vulnerability by sending a specially crafted POS...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38578)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. There is an access control vulnerability in TOTOLINK T6. This vulnerability stems from incorrect access control in the showSyslog function. Attackers can exploit this vulnerability by sending a specially crafted POST request to...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38413)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The T6 has a vulnerability related to access control. This vulnerability stems from incorrect access control in the delWiFiScheduleCfg function. Attackers can exploit this vulnerability by sending specially crafted POST request...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38555)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from incorrect access control in the setSmartQosCfg function. Attackers can exploit this vulnerability by sending a specially crafted POST...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38410)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from incorrect access control in the delUrlFilterRules function. Attackers can exploit this vulnerability by sending a specially crafted PO...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38576)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from incorrect access control in the setWiFiWpsStart function. Attackers can exploit this vulnerability by sending a specially crafted POST...

CVE-2026-86341: Access Control Check Implemented After Asset is Accessed

GitLab has remediated an issue in GitLab EE affecting all versions from 17.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an authenticated user with Owner or Maintainer permissions could have silently disabled protected environment deployment approval...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38439)

The TOTOLINK T6 is a dual-band wireless Mesh router released by ZhiOn Electronics TOTOLINK. The TOTOLINK T6 contains an access control vulnerability stemming from improper access control in the setScheduleCfg function. An attacker could exploit this vulnerability by sending a specially crafted PO...

PT-2026-93860

Guns through 8.3.5 contains an improper access control vulnerability in SysNoticeController where requiredPermission defaults to false and is not overridden by any action methods. Authenticated users without assigned roles can exploit this to create, edit, delete, publish and retract system-wide...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38433)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from an improper access control in the setOpModeCfg function. Attackers can exploit this vulnerability by sending a specially crafted POST...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38424)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from improper access control in the setAccessDeviceCfg function. Attackers can exploit this vulnerability by sending a specially crafted PO...