191528 matches found
CVE-2026-87025 Tanium addressed an improper access controls vulnerability in Comply.
Tanium addressed an improper access controls vulnerability in Comply...
EUVD-2026-74550
Tanium addressed an improper access controls vulnerability in Comply...
CVE-2026-87075 Tanium addressed an improper access controls vulnerability in Comply.
Tanium addressed an improper access controls vulnerability in Comply...
CVE-2026-87075 Tanium addressed an improper access controls vulnerability in Comply.
Tanium addressed an improper access controls vulnerability in Comply...
CVE-2026-87075
Tanium Comply contains an improper access controls vulnerability that the vendor has addressed. The flaw carries a CVSS 3.1 score of 8.1 (HIGH) , with a network attack vector, low complexity, and low privileges required. Successful exploitation results in high integrity and high availability impa...
CVE-2026-87047 Tanium addressed an improper access controls vulnerability in Comply.
Tanium addressed an improper access controls vulnerability in Comply...
CVE-2026-87047
Tanium Comply is affected by an improper access controls vulnerability, assigned CVSS 3.1 score of 6.3 (Medium) with a network attack vector, low complexity, and low required privileges, resulting in low impacts to confidentiality, integrity, and availability. The vulnerability has been addressed...
CVE-2026-87019
Tanium Comply is affected by an improper access controls vulnerability, as reported by Tanium in advisory TAN-2026-035 . The issue was addressed by the vendor. The CVSS 3.1 score is 4.3 (MEDIUM) , with a network attack vector, low complexity, and low privileges required; the impact is limited to ...
CVE-2026-87475
A missing authorization flaw was found in the Omnibox component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=507225626...
CVE-2026-87595
Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...
DEBIAN-CVE-2026-87556
Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
SUSE CVE-2026-20909
Gitea versions before 1.25.5 have insufficient permission checks when listing tracked time entries...
SUSE CVE-2026-25712
Gitea versions before 1.25.5 have insufficient visibility checks in organization permission APIs for hidden members and private organizations...
SUSE CVE-2026-55065
Vikunja is an open-source self-hosted task management platform. From 0.24.6 until 2.4.0, DELETE /api/v1/projects/:project/views/:view permits an authenticated user to supply a view identifier from another project while authorizing only against an attacker-controlled project identifier...
Towards Tackling Application Logic Flaws through Autonomous Formal-Logic Modeling and Automated Reasoning
Logic flaws pose significant challenges in the design and implementation of modern, semantically rich systems and applications, impacting security, privacy, and trust. These flaws are inherently tied to business-specific semantics and threat models, making their discovery and reasoning difficult...
CVE-2026-71807
The RuoYi-Cloud-Plus software (version
PT-2026-89168
Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.7.0 through 0.11.0 Description The built-in knowledge search tool fails to properly restrict access to knowledge bases when using specific vector backends. While the tool identifies which knowledge bases a user is permitt...
PT-2026-88832
Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction...