168569 matches found
CVE-2026-43617
Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's hostname-based access control list enforcement when configured with chroot. Attackers can bypass hostname-based deny rules by controlling the PTR record for their source IP address, allowing...
CVE-2026-43617 Rsync < 3.4.3 Authorization Bypass via Hostname Resolution
Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's hostname-based access control list enforcement when configured with chroot. Attackers can bypass hostname-based deny rules by controlling the PTR record for their source IP address, allowing...
CVE-2026-43617 Rsync < 3.4.3 Authorization Bypass via Hostname Resolution
Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's hostname-based access control list enforcement when configured with chroot. Attackers can bypass hostname-based deny rules by controlling the PTR record for their source IP address, allowing...
CVE-2026-43617
Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's hostname-based access control list enforcement when configured with chroot. Attackers can bypass hostname-based deny rules by controlling the PTR record for their source IP address, allowing...
WordPress plugin WpBookingly 安全漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...
Mesalvo Meona Client Launcher Component和Mesalvo Meona Server Component 访问控制错误漏洞
The Mesalvo Meona Client Launcher Component and the Mesalvo Meona Server Component are both products of the Mesalvo company. The Mesalvo Meona Client Launcher Component is a component designed for launching clients of medical information systems and facilitating application access. The Mesalvo...
PT-2026-42152
Name of the Vulnerable Software and Affected Versions WP Chill Image Photo Gallery Final Tiles Grid versions prior to 3.6.12 Description A missing authorization issue exists due to incorrectly configured access control security levels, which allows for the exploitation of unauthorized access...
PT-2026-42211
Name of the Vulnerable Software and Affected Versions Splunk AI Toolkit versions prior to 5.7.3 Description A low-privileged user without admin or power roles can access confidential data restricted by srchFilter configurations in custom roles. This occurs because the application includes an...
PT-2026-42160
Name of the Vulnerable Software and Affected Versions ADD-ONS.ORG PDF for Elementor Forms + Drag And Drop Template Builder versions prior to 5.5.2 Description A missing authorization issue allows the exploitation of incorrectly configured access control security levels. Recommendations Update to ...
Linux Distros Unpatched Vulnerability : CVE-2026-43617
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's hostname-based access control list enforcement when configured...
CVE-2026-44926
InfoScale CmdServer before 7.4.2 mishandles access control...
HCL DominoIQ 安全漏洞
HCL DominoIQ is an intelligent business platform developed by HCL Company in India, which integrates artificial intelligence capabilities with enterprise collaboration functions. HCL DominoIQ has a security vulnerability, caused by ineffective access control, which may allow authentication...
Veritas InfoScale CmdServer 访问控制错误漏洞
Veritas InfoScale CmdServer is a command execution and remote management service component provided by Veritas Corporation in the US, designed for InfoScale cluster environments. Versions of Veritas InfoScale CmdServer prior to 7.4.2 contained an access control vulnerability, which was caused by...
PT-2026-42106
Name of the Vulnerable Software and Affected Versions Talend Administration Center affected versions not specified Description A broken access control issue exists that allows a user with "View" permission to modify the Talend Studio update URL. Recommendations Apply the available patch to resolv...
CVE-2026-44926
InfoScale CmdServer before 7.4.2 mishandles access control...
Rsync 安全漏洞
Rsync is a fast and versatile file copying tool developed by RsyncProject. It is used for both remote and local files. Rsync versions 3.4.2 and earlier have security vulnerabilities. These vulnerabilities stem from an authorization bypass in the access control list based on hostnames during chroo...
PT-2026-42197
Name of the Vulnerable Software and Affected Versions InfoScale CmdServer versions prior to 7.4.2 Description InfoScale CmdServer mishandles access control, which may allow unauthorized users to perform restricted actions. Recommendations Update InfoScale CmdServer to version 7.4.2 or later...
CVE-2026-44926
InfoScale CmdServer is affected by CVE-2026-44926 where versions prior to 7.4.2 mishandle access control, potentially enabling unauthenticated network attackers with low privileges and no user interaction to compromise confidentiality, integrity, and availability (CVSS v3.1: 8.8). The condition i...
Cisco Secure Workload 访问控制错误漏洞
Cisco Secure Workload is a software product developed by Cisco Corporation in the United States. It allows users to install software agents on their application workloads. There is an access control vulnerability in Cisco Secure Workload, which stems from insufficient access validation in the...