PT-2026-87316

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

ROS-20260908-73-0016

The vulnerability in Java-21-openjdk is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

PT-2026-87936

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Improper access control allows an authorized attacker to elevate privileges over a network, which enables them to affect the system. Recommendations At the moment, there is no information...

PT-2026-87947

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...

JWT Refresh Token Handler File Privilege Escalation

The vulnerability of the /api/connections file of the JWT Refresh Token Handler component of the software platform for automated file exchange in Cleo Harmony is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges and gain...

Security Updates for Microsoft SharePoint Server Subscription Edition (September 2026)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

PT-2026-86970

Name of the Vulnerable Software and Affected Versions Armoury Crate affected versions not specified Description Insufficient access control in the Armoury Crate driver exposes an IOCTL Input/Output Control mechanism. This allows a local user to bypass driver verification and perform arbitrary rea...

CVE-2026-81790: Missing Authorization

Missing Authorization vulnerability in Viszt Péter Csomagpontok és szállítási címkék WooCommerce-hez allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Csomagpontok és szállítási címkék WooCommerce-hez: from n/a before 4.2.8...

CVE-2026-69282: Improper Access Control

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

PT-2026-87940

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Insufficient granularity of access control allows an authorized attacker to elevate privileges over a network, which can lead to unauthorized system impact. Recommendations At the moment,...

CVE-2026-28602: Improper Access Control

In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-iuser isolation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-88502

Impact A log streaming event destination may reference a generic HTTP credential, and the destination resolved and decrypted whichever credential it named without checking that the caller had access to it. A user holding a custom global role scoped to Log Streaming operations could therefore name...

PT-2026-86976

Name of the Vulnerable Software and Affected Versions ASUS Armoury Crate affected versions not specified Description Insufficient access control in an exposed IOCTL Input/Output Control allows a local user to bypass driver authentication. This enables the user to read from and write to the PCIe...

PT-2026-87562

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network, which can lead to an elevation-of-privilege that affects the system...

PT-2026-87329

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-26084: Improper Access Control

A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests...

PT-2026-88307

ColdFusion is affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction...

CVE-2026-16003: Exposed IOCTL with Insufficient Access Control

Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add an arbitrary process identifier to the driver's whitelist via a crafted IOCTL request by bypassing the driver's verification.Refer to the ' Security Update for Armoury Crate App ' section on the ASUS...

CVE-2026-69273: Improper Access Control

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

PT-2026-87100

Incorrect access control in the SellerAuthorizeAspect component of springboot-project v1.0.0 allows unauthenticated attackers to access all seller management interfaces and list all products/orders, put products on/off sale, finish/cancel orders, and modify categories without authentication...