190506 matches found
CVE-2026-20332
CVE-2026-20332 covers improper access control vulnerabilities (CWE-284) identified during an internal security review of Cisco Secure Adaptive Security Appliance (ASA) Software , Secure Firewall Threat Defense (FTD) Software , and Secure Firewall Management Center (FMC) Software . Cisco addressed...
CVE-2026-20192 Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilities
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release...
CVE-2026-20192 Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilities
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release...
CVE-2026-20192
CVE-2026-20192 affects Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) , stemming from improper access control issues (CWE-284) identified during an internal security review. The CVSS 3.1 base score is 10.0 (Critical) , with a network attack vector, low com...
EUVD-2026-81104
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release...
EUVD-2026-81096
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...
CVE-2026-20322
Cisco Nexus Dashboard is affected by improper access control vulnerabilities (CWE-284) discovered during an internal security review by Cisco's engineering team. The issues are addressed in a software hardening release (specific fixed version not provided in the available documents). The assigned...
CVE-2026-20322 Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Improper Access Control
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...
CVE-2026-20322 Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Improper Access Control
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...
EUVD-2026-81076
Apache NiFi 2.11.0 supports migrating the contents of a version-controlled Process Group into a Connector using REST API methods that list eligible migration sources and submit migration requests. The framework authorized both methods against the target Connector alone, without evaluating access ...
WordPress Easy Invoice plugin <= 2.3.8 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Rahul Yadav in WordPress Plugin Easy Invoice versions = 2.3.8...
WordPress Simple Membership plugin <= 4.8.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Simple Membership versions = 4.8.2...
WordPress Booking Calendar plugin <= 11.7 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Booking Calendar versions = 11.7...
WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by asdqgggg in WordPress Plugin User Registration versions = 5.2.7...
WordPress BerqWP plugin <= 4.1.15 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by z3r0s in WordPress Plugin BerqWP versions = 4.1.15...
CVE-2026-92601
Guns through 8.3.5 contains an improper access control vulnerability in SysNoticeController where requiredPermission defaults to false and is not overridden by any action methods. Authenticated users without assigned roles can exploit this to create, edit, delete, publish and retract system-wide...
EUVD-2026-80859
Guns through 8.3.5 contains an improper access control vulnerability in SysNoticeController where requiredPermission defaults to false and is not overridden by any action methods. Authenticated users without assigned roles can exploit this to create, edit, delete, publish and retract system-wide...
CVE-2026-92601 Guns through 8.3.5 Improper Access Control via SysNoticeController
Guns through 8.3.5 contains an improper access control vulnerability in SysNoticeController where requiredPermission defaults to false and is not overridden by any action methods. Authenticated users without assigned roles can exploit this to create, edit, delete, publish and retract system-wide...
CVE-2026-92601 Guns through 8.3.5 Improper Access Control via SysNoticeController
Guns through 8.3.5 contains an improper access control vulnerability in SysNoticeController where requiredPermission defaults to false and is not overridden by any action methods. Authenticated users without assigned roles can exploit this to create, edit, delete, publish and retract system-wide...
CVE-2026-92601
Guns through version 8.3.5 , a Java-based enterprise admin framework, contains an improper access control flaw in SysNoticeController . The underlying cause is that the requiredPermission flag defaults to false and is never overridden by any action method, effectively bypassing permission checks....