113719 matches found
SUSE CVE-2026-90462
A flaw was found in SSSD. When configured with the LDAP access provider and ldapaccessorder including ppolicy or lockout, a fail-open condition in the LDAP ppolicy access check can occur if a user lookup returns zero results. This can incorrectly return success and cache an allow decision,...
SUSE CVE-2026-96512
A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...
CVE-2026-63203
Logto is the modern, open-source auth infrastructure for SaaS and AI apps. From 1.31.0 until 1.42.0, the Account API handlers in packages/core/src/routes/account/third-party-tokens.ts allow a caller holding a same-user access token with only the openid scope to retrieve stored social or enterpris...
EUVD-2026-86157
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.8.0 until 2.5.1, authenticated Termix users can access the server-stats API without per-host authorization. GET /status returns statuses for hosts the requester cannot access, GET...
CVE-2026-79758
The Termix web-based server management platform (versions 1.8.0 through 2.5.1 ) contains a vulnerability where authenticated users can access the server-stats API without per-host authorization. Specifically, the src/backend/ssh/server-stats.ts routes allow users to view host online/offline statu...
CVE-2026-65422
A flaw in the authorization mechanism for Media Gateway API in Genetec Security Center may allow a user with no playback privileges to generate video thumbnails...
CVE-2026-51995
An issue in geelen mcp-remote 0.1.32 through 0.1.38 allows a remote attacker to obtain sensitive information via the src/lib/authorization-server-metadata.ts, src/lib/utils.ts components...
CVE-2026-65422
A flaw in the authorization mechanism for Media Gateway API in Genetec Security Center may allow a user with no playback privileges to generate video thumbnails...
EUVD-2026-85917
A flaw in the authorization mechanism for Media Gateway API in Genetec Security Center may allow a user with no playback privileges to generate video thumbnails...
CVE-2026-65422
A flaw in the authorization mechanism for the Media Gateway API in Genetec Security Center may allow a user lacking playback privileges to generate video thumbnails . The vulnerability impacts confidentiality as indicated by the CVSS score. Remediation is available in Security Center version 5.14...
CVE-2026-65422
A flaw in the authorization mechanism for Media Gateway API in Genetec Security Center may allow a user with no playback privileges to generate video thumbnails...
CVE-2026-61821
A flaw was found in pgpartman. A user with partmanuser access can bypass authorization checks in the droppartitionid and droppartitiontime functions. This allows them to move retained child tables to schemas where they typically lack CREATE privileges. The relocation is performed with elevated...
CVE-2026-66075
A flaw was found in RabbitMQ, a messaging and streaming broker. A remote attacker with monitoring user credentials can exploit an authorization flaw to restart federation links. This unauthorized action disrupts message flow, leading to a denial of service DoS for affected services. This...
CVE-2026-94416
An authorization bypass was found in the Ansible Automation Platform AAP gateway. The gateway API allows an authenticated administrator to create a new service key for the Controller service cluster. Because service-key creation is not restricted to the installer-provisioned provisioning path, an...
CVE-2026-88916
Incorrect Authorization vulnerability in TÜBİTAK ULAKBİM UlakPDF allows Privilege Escalation. This issue affects UlakPDF: through 09092026...
CVE-2026-88907
Incorrect Authorization vulnerability in TÜBİTAK ULAKBİM UlakPDF allows Authentication Bypass. This issue affects UlakPDF: through 09092026...
CVE-2026-88916
TÜBİTAK ULAKBİM UlakPDF is susceptible to an Incorrect Authorization vulnerability, which allows for Privilege Escalation . Specifically, an Admin Access Bypass can occur due to a Header Fallback mechanism in the software. This issue affects versions up to 09092026 . The vulnerability has a CVSS ...
CVE-2026-88916 Admin Access Bypass via Header Fallback in TÜBİTAK ULAKBİM's UlakPDF
Incorrect Authorization vulnerability in TÜBİTAK ULAKBİM UlakPDF allows Privilege Escalation. This issue affects UlakPDF: through 09092026...
CVE-2026-88916 Admin Access Bypass via Header Fallback in TÜBİTAK ULAKBİM's UlakPDF
Incorrect Authorization vulnerability in TÜBİTAK ULAKBİM UlakPDF allows Privilege Escalation. This issue affects UlakPDF: through 09092026...