276760 matches found
CVE-2026-100259
In JetBrains YouTrack versions before 2026.2.18991 , an improper access control vulnerability exists within the Gantt chart functionality. This flaw allows users with view-only access to perform unauthorized edits . No specific exploit details or in-the-wild exploitation reports are provided in t...
EUVD-2026-90003
In JetBrains YouTrack before 2026.2.18991 improper access control on Gantt chart allowed edits by users with view-only access...
CVE-2026-100259
In JetBrains YouTrack before 2026.2.18991 improper access control on Gantt chart allowed edits by users with view-only access...
CVE-2026-103270 LightLLM through 1.2.0 Missing Authentication on RL Control Routes
LightLLM through 1.2.0 mounts reinforcement learning control routes on the public HTTP API without authentication checks. Unauthenticated attackers can call endpoints like /pausegeneration, /abortrequest, /flushcache, and /initweightsupdategroup to disrupt inference operations and wedge workers o...
CVE-2026-103270 LightLLM through 1.2.0 Missing Authentication on RL Control Routes
LightLLM through 1.2.0 mounts reinforcement learning control routes on the public HTTP API without authentication checks. Unauthenticated attackers can call endpoints like /pausegeneration, /abortrequest, /flushcache, and /initweightsupdategroup to disrupt inference operations and wedge workers o...
CVE-2026-103270
LightLLM versions up to and including 1.2.0 are vulnerable to a missing authentication flaw on reinforcement learning (RL) control routes. When deployments are started with the --enable_rl flag, the software mounts specific control routes on the public HTTP API without requiring authentication ch...
OESA-2026-4159 multipath-tools security update
This package provides the multipath tool and the multipathd daemon to manage dm-multipath devices. multipath can detect and set up multipath maps. multipathd sets up multipath maps automatically, monitors path devices for failure, removal, or addition, and applies the necessary changes to the...
OESA-2026-4158 multipath-tools security update
This package provides the multipath tool and the multipathd daemon to manage dm-multipath devices. multipath can detect and set up multipath maps. multipathd sets up multipath maps automatically, monitors path devices for failure, removal, or addition, and applies the necessary changes to the...
OESA-2026-4157 multipath-tools security update
This package provides the multipath tool and the multipathd daemon to manage dm-multipath devices. multipath can detect and set up multipath maps. multipathd sets up multipath maps automatically, monitors path devices for failure, removal, or addition, and applies the necessary changes to the...
OESA-2026-4156 multipath-tools security update
This package provides the multipath tool and the multipathd daemon to manage dm-multipath devices. multipath can detect and set up multipath maps. multipathd sets up multipath maps automatically, monitors path devices for failure, removal, or addition, and applies the necessary changes to the...
OESA-2026-4140 cups security update
CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol IPP to support printing to local and network printers.. Security Fixes: The cupsUTF32ToUTF8 function in CUPS's cups/transcode.c lacks a...
OESA-2026-4139 cups security update
CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol IPP to support printing to local and network printers.. Security Fixes: The cupsUTF32ToUTF8 function in CUPS's cups/transcode.c lacks a...
OESA-2026-4138 cups security update
CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol IPP to support printing to local and network printers.. Security Fixes: The cupsUTF32ToUTF8 function in CUPS's cups/transcode.c lacks a...
WordPress Ultimate Maps by Supsystic plugin <= 1.5.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin Ultimate Maps by Supsystic versions = 1.5.5...
CVE-2026-97285
Contributor Broken Access Control in The Events Calendar = 6.17.5 versions...
CVE-2026-97267
Subscriber Broken Access Control in Prevent files / folders access = 2.6.7 versions...
CVE-2026-97243
Subscriber Broken Access Control in AllAble Connector = 0.13.4 versions...
CVE-2026-97247
Unauthenticated Broken Access Control in Blocksy Companion = 2.1.55 versions...