149 matches found
CVE-2026-81294 WordPress Authorizer plugin <= 3.15.1 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Authorizer = 3.15.1 versions...
EUVD-2026-69926
Unauthenticated Privilege Escalation in Authorizer = 3.15.1 versions...
CVE-2026-81294 WordPress Authorizer plugin <= 3.15.1 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Authorizer = 3.15.1 versions...
CVE-2026-81294: Incorrect Privilege Assignment
Unauthenticated Privilege Escalation in Authorizer = 3.15.1 versions...
WordPress Authorizer plugin <= 3.15.1 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by Steve in WordPress Plugin Authorizer versions = 3.15.1...
EUVD-2026-68966
Incorrect Authorization vulnerability in ash-project ash returns records that a runtime read policy denies to any actor. When a resource has an accesstype :runtime read policy a check evaluated per record rather than compiled to a filter, Ash.Policy.Authorizer decides each record in checkresult/1...
EEF-CVE-2026-82747 Ash.Policy.Authorizer returns records denied by a runtime read policy to any actor
Summary Incorrect Authorization vulnerability in ash-project ash returns records that a runtime read policy denies to any actor. When a resource has an accesstype :runtime read policy a check evaluated per record rather than compiled to a filter, Ash.Policy.Authorizer decides each record in...
CVE-2026-82747 Ash.Policy.Authorizer returns records denied by a runtime read policy to any actor
Incorrect Authorization vulnerability in ash-project ash returns records that a runtime read policy denies to any actor. When a resource has an accesstype :runtime read policy a check evaluated per record rather than compiled to a filter, Ash.Policy.Authorizer decides each record in checkresult/1...
CVE-2026-82747 Ash.Policy.Authorizer returns records denied by a runtime read policy to any actor
Incorrect Authorization vulnerability in ash-project ash returns records that a runtime read policy denies to any actor. When a resource has an accesstype :runtime read policy a check evaluated per record rather than compiled to a filter, Ash.Policy.Authorizer decides each record in checkresult/1...
CVE-2026-82747: Incorrect Authorization
Incorrect Authorization vulnerability in ash-project ash returns records that a runtime read policy denies to any actor. When a resource has an accesstype :runtime read policy a check evaluated per record rather than compiled to a filter, Ash.Policy.Authorizer decides each record in checkresult/1...
PT-2026-84687
Name of the Vulnerable Software and Affected Versions Authorizer versions prior to 3.15.2 Description An unauthenticated privilege escalation issue exists, allowing an attacker to gain elevated privileges without providing valid credentials. Recommendations Update to a version newer than 3.15.1...
PT-2026-84096
Incorrect Authorization vulnerability in ash-project ash returns records that a runtime read policy denies to any actor. When a resource has an access type :runtime read policy a check evaluated per record rather than compiled to a filter, Ash.Policy.Authorizer decides each record in check result...
SUSE CVE-2026-68156
In the Linux kernel, the following vulnerability has been resolved: libceph: refresh auth-authorizerbuf,len after authorizer update cephxcreateauthorizer caches au-buf-vec.iovbase and au-buf-vec.iovlen in struct cephauthhandshake. These cached values are then used by the messenger connect code wh...
GHSA-29RF-F4VV-PVQ6 Authorizer: Zero-click account takeover via OAuth identity linking to unverified email accounts
The OAuth callback handler links incoming OAuth identities Google, GitHub, etc. to existing accounts matched by email address without verifying that the existing account's email was verified by its original owner. An attacker who pre-registers with a victim's email address without verifying it...
libceph: refresh auth->authorizer_buf{,_len} after authorizer update
...
CVE-2026-68156
In the Linux kernel, the following vulnerability has been resolved: libceph: refresh auth-authorizerbuf,len after authorizer update cephxcreateauthorizer caches au-buf-vec.iovbase and au-buf-vec.iovlen in struct cephauthhandshake. These cached values are then used by the messenger connect code wh...
CVE-2026-68156
In the Linux kernel, the following vulnerability has been resolved: libceph: refresh auth-authorizerbuf,len after authorizer update cephxcreateauthorizer caches au-buf-vec.iovbase and au-buf-vec.iovlen in struct cephauthhandshake. These cached values are then used by the messenger connect code wh...
CVE-2026-68156 libceph: refresh auth->authorizer_buf{,_len} after authorizer update
In the Linux kernel, the following vulnerability has been resolved: libceph: refresh auth-authorizerbuf,len after authorizer update cephxcreateauthorizer caches au-buf-vec.iovbase and au-buf-vec.iovlen in struct cephauthhandshake. These cached values are then used by the messenger connect code wh...
CVE-2026-68156
The CVE-2026-68156 issue affects the Linux kernel libceph path: during an authorizer update, ceph_x_update_authorizer() may rebuild the authorizer and, if the new authorizer won’t fit in the existing buffer, it frees the old buffer while auth->authorizer_buf still points to the freed memory. A...
EUVD-2026-55542
In the Linux kernel, the following vulnerability has been resolved: libceph: refresh auth-authorizerbuf,len after authorizer update cephxcreateauthorizer caches au-buf-vec.iovbase and au-buf-vec.iovlen in struct cephauthhandshake. These cached values are then used by the messenger connect code wh...