185208 matches found
kernel: selinux: check connect-related permissions on TCP Fast Open
A flaw was found in the Linux kernel's Security-Enhanced Linux SELinux module. When using TCP Fast Open, SELinux failed to properly check connect-related permissions. This oversight could allow a local attacker to bypass SELinux network access controls, potentially enabling unauthorized network...
CVE-2026-78528
Unauthenticated Broken Access Control in BerqWP = 4.1.15 versions...
CVE-2026-74002
Unauthenticated Broken Access Control in Booking Calendar = 11.7 versions...
CVE-2026-74017
Unauthenticated Broken Access Control in User Registration = 5.2.7 versions...
CVE-2026-74000
Contributor Broken Access Control in Simple Membership = 4.8.2 versions...
CVE-2026-66676
Unauthenticated Broken Access Control in Easy Invoice = 2.3.8 versions...
Azure Logic Apps Elevation of Privilege Vulnerability
Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-78528 WordPress BerqWP plugin <= 4.1.15 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in BerqWP = 4.1.15 versions...
CVE-2026-78528 WordPress BerqWP plugin <= 4.1.15 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in BerqWP = 4.1.15 versions...
EUVD-2026-81520
Unauthenticated Broken Access Control in BerqWP = 4.1.15 versions...
CVE-2026-78528
CVE-2026-78528 affects the WordPress plugin BerqWP in versions 4.1.15 and earlier . The vulnerability is an unauthenticated Broken Access Control flaw, discovered by z3r0s , meaning any remote user can exploit it without prior authentication. The CVSS 3.1 score is 5.3 (MEDIUM) , with a vector of ...
CVE-2026-74017
WordPress User Registration plugin versions ≤ 5.2.7 contain an unauthenticated Broken Access Control vulnerability. The flaw allows a remote attacker with no prior privileges to access data they should not, resulting in a low confidentiality impact with no impact on integrity or availability. The...
CVE-2026-74017 WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in User Registration = 5.2.7 versions...
EUVD-2026-81517
Unauthenticated Broken Access Control in User Registration = 5.2.7 versions...
CVE-2026-74017 WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in User Registration = 5.2.7 versions...
CVE-2026-74002 WordPress Booking Calendar plugin <= 11.7 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Booking Calendar = 11.7 versions...
CVE-2026-74002
CVE-2026-74002 is an unauthenticated Broken Access Control vulnerability in the WordPress Booking Calendar plugin , affecting versions 11.7 and earlier . The flaw was discovered by Ananda Dhakal via Patchstack and carries a CVSS 3.1 score of 5.3 (MEDIUM) , with low integrity impact and no impact ...
CVE-2026-74002 WordPress Booking Calendar plugin <= 11.7 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Booking Calendar = 11.7 versions...