168902 matches found
EUVD-2026-70667
Checkmate through 3.11.0 omits the isAllowed role guard middleware on maintenance-window, notification, and check-deletion routes, allowing read-only users to perform administrative actions. Attackers with user-role sessions can create arbitrary maintenance windows to silence alerts, modify...
CVE-2026-82302
CVE-2026-82302 is an Incorrect Authorization (CWE-863) vulnerability in Kibana that allows an attacker with low privileges to modify configurations without proper authorization, via exploiting incorrectly configured access control security levels (CAPEC-180). The CVSS 3.1 score is 8.1 (HIGH) , wi...
CVE-2026-82302 Incorrect Authorization in Kibana Leading to Unauthorized Configuration Modification
Incorrect Authorization CWE-863 in Kibana can lead to unauthorized configuration modification via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180...
EUVD-2026-70663
Incorrect Authorization CWE-863 in Kibana can lead to unauthorized configuration modification via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180...
CVE-2026-82299
CVE-2026-82299 is an Incorrect Authorization (CWE-863) vulnerability in Kibana that can lead to information disclosure via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180). The CVSS 3.1 score is 6.5 (MEDIUM) , with a network attack vector, low complexity, low privilege...
CVE-2026-82299 Incorrect Authorization in Kibana Leading to Information Disclosure
Incorrect Authorization CWE-863 in Kibana can lead to information disclosure via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180...
EUVD-2026-70662
Incorrect Authorization CWE-863 in Kibana can lead to information disclosure via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180...
CVE-2026-82298
Kibana (Elastic) is affected by an Incorrect Authorization flaw (CWE-863) that can lead to denial of service when access control security levels are incorrectly configured (CAPEC-180). The CVSS 3.1 score is 4.3 (MEDIUM) with a network vector, low complexity, low privileges required, and low avail...
CVE-2026-82298 Incorrect Authorization in Kibana Leading to Denial of Service
Incorrect Authorization CWE-863 in Kibana can lead to denial of service via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180...
EUVD-2026-70661
Incorrect Authorization CWE-863 in Kibana can lead to denial of service via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180...
EUVD-2026-66251
Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execute unsigned applications, and upload unsigned EEPROM data and firmware via exposed service...
EUVD-2026-70656
A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.53.2.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls...
Kibana 8.19.21, 9.4.6, 9.5.3 Security Update (ESA-2026-178)
Incorrect Authorization in Kibana Leading to Unauthorized Configuration Modification Incorrect Authorization CWE-863 in Kibana can lead to unauthorized configuration modification via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. Affected Versions: Fixes should be...
CVE-2026-85309
Missing Authorization vulnerability in Supsystic Ultimate Maps by Supsystic allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Ultimate Maps by Supsystic: from n/a through 1.5.3...
CVE-2026-85308
Authorization Bypass Through User-Controlled Key vulnerability in Brainstorm Force SureForms allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects SureForms: from n/a through 2.12.5...
CVE-2026-85306
Missing Authorization vulnerability in Cascadia Web Services MountDev AI MCP Connector for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MountDev AI MCP Connector for WordPress: from n/a through 1.6.5...
CVE-2026-85304
Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Unlimited Elements For Elementor Free Widgets, Addons, Templates: from n/a through...
CVE-2026-84849
Unauthenticated Bypass Vulnerability in Pre-Orders for WooCommerce = 2.3 versions...