191744 matches found
CVE-2026-76962
SAP S/4HANA (Manage Bank Chains app) has insufficient authorization checks that allow an attacker with low privileges to send specially crafted requests to delete entries they should not be able to access. The impact is limited to availability (low severity), with no stated impact on confidential...
CVE-2026-66768
SAP GUI for Java (part of SAP NetWeaver) contains an Improper Access Control flaw where the trust level policy is not correctly enforced for certain functions invoked from a connected backend system. A low-privileged attacker can manipulate a connected backend to trigger affected functionality, e...
CVE-2026-66768 Improper Access Control in SAP NetWeaver (SAP GUI for Java)
SAP GUI for Java does not correctly enforce the trust level policy for certain functions invoked from a connected backend system. A low-privileged attacker could exploit this weakness by manipulating a connected backend system to trigger affected functionality. This could allow arbitrary command...
EUVD-2026-72577
SAP GUI for Java does not correctly enforce the trust level policy for certain functions invoked from a connected backend system. A low-privileged attacker could exploit this weakness by manipulating a connected backend system to trigger affected functionality. This could allow arbitrary command...
CVE-2026-66768 Improper Access Control in SAP NetWeaver (SAP GUI for Java)
SAP GUI for Java does not correctly enforce the trust level policy for certain functions invoked from a connected backend system. A low-privileged attacker could exploit this weakness by manipulating a connected backend system to trigger affected functionality. This could allow arbitrary command...
PT-2026-87071
An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges. A remote authenticated user with limited privileges can view a limited subset of the available entries in the Credentials Manager. The actual credential value...
EUVD-2026-72849
Incorrect access control in the SellerAuthorizeAspect component of springboot-project v1.0.0 allows unauthenticated attackers to access all seller management interfaces and list all products/orders, put products on/off sale, finish/cancel orders, and modify categories without authentication...
PT-2026-87218
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Insufficient granularity of access control allows an authorized attacker to elevate privileges over a network, which can lead to unauthorized system impact. Recommendations At the moment,...
CVE-2026-33391: Incorrect Authorization
An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privileges. An authenticated user with limited privileges can remotely bypass the intended access control of the web management interface and modify the Smart...
PT-2026-86988
Missing Authorization vulnerability in Viszt Péter Csomagpontok és szállítási címkék WooCommerce-hez allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Csomagpontok és szállítási címkék WooCommerce-hez: from n/a before 4.2.8...
PT-2026-87170
An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10, FortiManager 7.2 all versions, FortiManager Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.4.1 through 7.4.10, FortiManager Cloud 7.2 all versions may allow an administrator ...
PT-2026-87078
An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privileges. An authenticated user with limited privileges can remotely bypass the intended access control of the web management interface and modify the Smart...
Security Updates for Microsoft SharePoint Server Subscription Edition (September 2026)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-79571: Improper Access Control
Incorrect access control in the SellerAuthorizeAspect component of springboot-project v1.0.0 allows unauthenticated attackers to access all seller management interfaces and list all products/orders, put products on/off sale, finish/cancel orders, and modify categories without authentication...
ROS-20260908-73-0003
The vulnerability in Java-17-openJDK is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
ROS-20260908-73-0006
The vulnerability in Java 1.8.0-openjdk is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...
ROS-20260908-73-0013
The vulnerability in Java 1.8.0-openjdk is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...
ROS-20260908-73-0001
The vulnerability in Java 1.8.0-openjdk is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...