CVE-2026-75517: Authorization Bypass Through User-Controlled Key

Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu integration mutation use cases including remove-integration, update-integration, auto-configure-integration, and set-integration-as-primary look up an integration by integrationId and organizationId...

CVE-2026-83805: Improper Authorization

Nautobot is a Network Source of Truth and Network Automation Platform. From 3.0.0 until 3.1.8, the generic ApprovalWorkflowStageResponse create endpoint does not enforce approver-group membership, change permission on the object under review, or the one-response-per-user restriction applied by th...

CVE-2026-76910: Authorization Bypass Through User-Controlled Key

Unleash is an open-source feature management platform. Prior to 8.0.3, cloneFeatureToggle and POST /api/admin/projects/:projectId/features/:featureName/clone authorize creation in the destination project but do not verify access to the source project. Because feature names are globally unique, a...

CVE-2026-77425: Authorization Bypass Through User-Controlled Key

Unleash is an open-source feature management platform. Prior to 8.0.3, POST /api/admin/projects/:projectId/features/:featureName/environments/:environment/strategies/set-sort-order passes attacker-controlled strategy IDs to unprotectedUpdateStrategiesSortOrder and updateSortOrder without verifyin...

CVE-2026-77426: Authorization Bypass Through User-Controlled Key

Unleash is an open-source feature management platform. Prior to 8.0.3, the Unleash admin API contains five authorization vulnerabilities. POST /api/admin/segments/strategies assigns the Promise returned by hasPermission without awaiting it, allowing authenticated users to modify segment assignmen...

PT-2026-97023

Name of the Vulnerable Software and Affected Versions Nautobot versions 3.0.0 through 3.1.7 Description An authorization bypass exists in the generic ApprovalWorkflowStageResponse create endpoint. This endpoint fails to enforce approver-group membership, the change permission on the object under...

PT-2026-97049

Name of the Vulnerable Software and Affected Versions Unleash versions prior to 8.0.3 Description An authorization bypass exists in the feature management platform where the system fails to verify if strategy IDs provided in a request body belong to the project, feature, and environment specified...

PT-2026-97050

Name of the Vulnerable Software and Affected Versions Unleash versions prior to 8.0.3 Description The admin API contains five authorization issues. A missing await keyword in the POST /api/admin/segments/strategies endpoint allows authenticated users to modify segment assignments without the...

PT-2026-97047

Name of the Vulnerable Software and Affected Versions GitHub Enterprise Server versions prior to 3.22 Description An authorization bypass allows authenticated users to read the raw diff or patch of pull requests in private repositories. This occurs because access tokens for these resources are...

CVE-2026-95814: Incorrect Authorization

Vaultwarden through 1.37.3 omits organization membership status validation from three cipher access-restriction queries, allowing revoked and not-yet-confirmed members to retain read, write, delete, and attachment access to organization ciphers. Attackers with revoked or pending membership can...

PT-2026-96785

Name of the Vulnerable Software and Affected Versions MISP affected versions not specified Description A typo in the ACLComponent access control configuration causes the ACL rule for the previewEventAttributes action to reference the permission string theming enabled instead of theming enabled...

PT-2026-96734

Name of the Vulnerable Software and Affected Versions MarketKing plugin for WordPress versions prior to 2.1.72 Description An authorization flaw exists in the marketking admin vendors ajax AJAX action. Authenticated users with subscriber-level access or higher can send a crafted AJAX request to...

PT-2026-96899

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC affected versions not specified Description An Incorrect Authorization issue allows an attacker to execute arbitrary code in the context of the current user. This flaw can be exploited without requiring any user...

PT-2026-97097

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description Improper authorization in the software allows a remote authenticated attacker to bypass security controls by forging user identities...

PT-2026-97041

Name of the Vulnerable Software and Affected Versions Gardener versions prior to 1.142.6 Gardener versions prior to 1.143.3 Gardener versions prior to 1.144.2 Gardener versions prior to 1.145.0 Description The customverbauthorizer admission plugin in the Gardener API server contains a flaw in its...

CVE-2026-79767: Incorrect Authorization

Gardener implements the automated management and operation of Kubernetes clusters as a service. Prior to 1.142.6, 1.143.3, 1.144.2, and 1.145.0, the customverbauthorizer admission plugin's mustCheckProjectMembers manage-members check compares changes to User subjects but does not account for Grou...

CVE-2026-90462: Improper Handling of Insufficient Permissions or Privileges

A flaw was found in SSSD. When configured with the LDAP access provider and ldapaccessorder including ppolicy or lockout, a fail-open condition in the LDAP ppolicy access check can occur if a user lookup returns zero results. This can incorrectly return success and cache an allow decision,...

PT-2026-96675

Name of the Vulnerable Software and Affected Versions wpForo Forum versions prior to 3.1.6 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Authenticated attackers with subscriber-level access or higher can...

CVE-2026-91092: Missing Authorization

The wpForo Forum plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level acces...

CVE-2025-14486: Missing Authorization

The PixelPlay plugin for WordPress is vulnerable to unauthorized API key deletion due to missing authorization checks in all versions up to, and including, 1.0.2. This makes it possible for unauthenticated attackers to delete arbitrary API keys Pixabay, Unsplash, Pixels, OpenAI configured by site...