103 matches found
Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
Mikrotik RouterOS contains an improper enforcement of behavioral workflow vulnerability that could allow an unauthenticated client to open a session channel and send an exec request. This vulnerability can be chained to achieve unauthenticated exploitation of CVE-2026-86060...
CVE-2026-82406: Improper Enforcement of Behavioral Workflow
Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the native marketplace function core/kapp/market/market.go Buy does not check IsClaimed before accepting a bid. A seller can use the Claim seller-accept branch to settle a resting-bid auction while leaving the...
CVE-2026-65126
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper enforcement of a behavioral workflow. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure...
CVE-2026-65126
The NVIDIA Infrastructure Controller for Linux is affected by CVE-2026-65126 , which involves the improper enforcement of a behavioral workflow (CWE-841). A successful exploit could result in data tampering , denial of service , and information disclosure . This vulnerability affects versions 0 t...
CVE-2026-65126
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper enforcement of a behavioral workflow. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure...
CVE-2026-65126
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper enforcement of a behavioral workflow. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure...
CVE-2026-65126: Improper Enforcement of Behavioral Workflow
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper enforcement of a behavioral workflow. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure...
PT-2026-96749
Name of the Vulnerable Software and Affected Versions NVIDIA Infrastructure Controller for Linux affected versions not specified Description An issue exists where an attacker could cause improper enforcement of a behavioral workflow. This could lead to data tampering, denial of service, and...
CVE-2026-78135: Improper Enforcement of Behavioral Workflow
libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATECHILDSA requests are mishandled, there can be an authentication bypass...
EUVD-2026-68138
A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be...
CVE-2026-82423
A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be...
CVE-2026-82423 macrozheng mall Payment Status Endpoint paySuccess behavioral workflow
A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be...
CVE-2026-82423 macrozheng mall Payment Status Endpoint paySuccess behavioral workflow
A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be...
CVE-2026-82423
A behavioral workflow enforcement vulnerability exists in the macrozheng mall project (up to version 1.0.3 ). The issue affects the Payment Status Endpoint at the file /order/paySuccess, where manipulation of the orderId argument allows a remote, low-privilege attacker to enforce a behavioral wor...
PT-2026-83500
Name of the Vulnerable Software and Affected Versions macrozheng mall versions prior to 1.0.4 Description A remote issue exists in the Payment Status Endpoint component within the /order/paySuccess file. Manipulation of the orderId argument allows an attacker to enforce a behavioral workflow...
CVE-2026-82423: Improper Enforcement of Behavioral Workflow
A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be...
Chromium: CVE-2026-79083 Improper enforcement of behavioral workflow in Media
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2026-79083
A flaw was found in Google Chrome's Media component. A remote attacker, who has already compromised the browser's renderer process, could exploit an improper enforcement of behavioral workflow. By presenting a specially crafted HTML page, the attacker could potentially execute unauthorized code...
Linux Distros Unpatched Vulnerability : CVE-2026-79083
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper enforcement of behavioral workflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process ...
Improper Enforcement of Behavioral Workflow
Overview Affected versions of this package are vulnerable to Improper Enforcement of Behavioral Workflow via the PATCH /api/teams/id process. An attacker can disrupt team-based access control by submitting a malformed members payload, which results in the removal of all existing team members befo...