CVE-2026-65891

CVE-2026-65891 — Joomla JCE Rename PoC Proof-of-concept scanner for CVE-2026-65891 in the Joomla Content Editor JCE extension. Improper input validation in the JCE file manager rename function allows an authenticated user with file-management permissions to: create hidden files dot-prefixed names...

EUVD-2026-103008

Arkon through 0.9.2 contains a broken access control vulnerability that allows authenticated employees to read and modify other departments' sources because by-id routes in app/routers/sources.py skip canaccessdocument. Attackers can call the plan, progress, PATCH, retry and approve-extraction...

EUVD-2026-103007

Arkon through 0.9.2 contains a missing authorization vulnerability in GET /api/wiki/graph that lets authenticated employees read other departments' wiki metadata by supplying a foreign slug. Attackers with only wiki:read:owndept permission can query getneighborhood without scope checks to obtain...

CVE-2026-111716

Arkon through 0.9.2 contains a broken access control vulnerability that allows authenticated employees to read and modify other departments' sources because by-id routes in app/routers/sources.py skip canaccessdocument. Attackers can call the plan, progress, PATCH, retry and approve-extraction...

EUVD-2026-102995

yshop-crm through 2.1.3 contains an insecure direct object reference vulnerability that allows authenticated sales users to access other users' customer records by supplying arbitrary ids. Attackers can enumerate ids against the get, update, delete and do-open endpoints to read contact details,...

CVE-2026-111703

yshop-crm through 2.1.3 contains an insecure direct object reference vulnerability that allows authenticated sales users to access other users' customer records by supplying arbitrary ids. Attackers can enumerate ids against the get, update, delete and do-open endpoints to read contact details,...

CVE-2026-111689

Exrick XBoot versions through 3.3.4 are vulnerable to an authorization bypass (CWE-639) in the getByDepartmentId endpoint. The flaw allows authenticated users to bypass role data scope restrictions by requesting the GET /xboot/user/getByDepartmentId/{departmentId} path with arbitrary IDs. This en...

EUVD-2026-102961

ClickVisual through 1.1.2 contains a missing authorization vulnerability in the /api/v2/reports handlers that allows authenticated low-privileged users to access ClickHouse instances they were not granted. Attackers can iterate the instance-id parameter in ReportSourceDatabases, ReportSourceTable...

CVE-2026-111670

ClickVisual versions through 1.1.2 are vulnerable to a missing authorization (CWE-862) flaw within the /api/v2/reports handlers. This security weakness allows authenticated users with low privileges to access ClickHouse instances they are not authorized to view. By iterating the instance-id param...

EUVD-2026-102959

AIHelms through 0.1.25 contains a missing authorization vulnerability in apps/api/v1/efficiency.py that allows authenticated low-privileged users to bypass efficiency:read and efficiency:write permission checks. Attackers can query routes like /cost/detail, /top-users and /budget to read...

CVE-2026-111667

REBUILD through 4.5.0 contains a missing authorization vulnerability in TaskCommentController.commentList that allows authenticated low-privileged users to read task comments without project membership checks. Attackers can supply the id of a task in a private project to the /project/comments/lis...

CVE-2026-111665

Piranha CMS through version 12.2 contains a missing authorization vulnerability in the Piranha.Manager LanguageApiController component. This flaw allows any authenticated manager user to perform list, create, edit, and delete actions on site languages without possessing the specific Language , La...

CVE-2026-111654

Versions of FastBee through 2.1.0 are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability within the /iot/group By-ID endpoints. The root cause is that GroupController queries fail to perform necessary owner checks , allowing authenticated low-privilege users—including self-reg...

EUVD-2026-103076

FastBee through 2.1.0 contains an insecure direct object reference vulnerability that allows authenticated low-privilege users to access other users' device groups because GroupController queries lack owner checks. Attackers, including self-registered users, can supply sequential group IDs to rea...

EUVD-2026-103073

Risesoft Digital-Infrastructure through 9.6.11 contains a missing authorization vulnerability in the log module DownloadController that allows authenticated users to export any tenant's personnel directory. Attackers can supply another tenant's tenantId to exportLoginXLS or exportNotLoginXLS to...

EUVD-2026-103070

BuildAdmin through 2.3.9 contains an insecure direct object reference vulnerability that allows authenticated backend administrators to modify other administrators' profiles via the id parameter. Attackers holding the routine/adminInfo/edit permission can overwrite avatar, nickname, email, mobile...

CVE-2026-111648

BuildAdmin through 2.3.9 contains an insecure direct object reference vulnerability that allows authenticated backend administrators to modify other administrators' profiles via the id parameter. Attackers holding the routine/adminInfo/edit permission can overwrite avatar, nickname, email, mobile...

CVE-2026-111647

PickMall lilishop versions through 5.0.0 are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability. The root cause is located in the ReceiptServiceImpl.getDetail method, which fails to perform an ownership check when accessing records. An authenticated buyer can manipulate the {i...

CVE-2026-111645

The MrDoc software (versions through 1.1.1 ) is vulnerable to a missing object-level authorization flaw in the api/import_local_doc/ endpoint. This vulnerability allows authenticated users to perform unauthorized actions on other users' documents and projects. Specifically, an attacker can use PU...

CVE-2026-111635

Helical Insight through 7.0.0 is vulnerable to a path traversal vulnerability (CWE-22) within the /getExternalResource endpoint. This flaw allows authenticated viewers to bypass per-resource access controls by supplying parent-directory segments in the path parameter . Successful exploitation ena...