CVE-2026-27449 Umbraco.Engage.Forms Allows Unauthorized Access to Multiple API Endpoints

Umbraco Engage is a business intelligence platform. A vulnerability has been identified in Umbraco Engage prior to versions 16.2.1 and 17.1.1 where certain API endpoints are exposed without enforcing authentication or authorization checks. The affected endpoints can be accessed directly over the...

CVE-2026-27449

Umbraco Engage is a business intelligence platform. A vulnerability has been identified in Umbraco Engage prior to versions 16.2.1 and 17.1.1 where certain API endpoints are exposed without enforcing authentication or authorization checks. The affected endpoints can be accessed directly over the...

CVE-2026-27449

Umbraco Engage (before versions 16.2.1 and 17.1.1) exposes certain API endpoints that do not enforce authentication or authorization. An unauthenticated user can query these endpoints directly (for example via an id parameter like ?id=) to enumerate and retrieve sensitive Engage data associated w...

Umbraco Engage 安全漏洞

Umbraco Engage is an extension to the digital experience platform developed by the Danish company Umbraco. Versions of Umbraco Engage prior to 16.2.1 and 17.1.1 contained security vulnerabilities. These vulnerabilities stemmed from the lack of authentication or authorization checks for certain AP...

PT-2026-22200

Name of the Vulnerable Software and Affected Versions Umbraco Engage versions prior to 16.2.1 Umbraco Engage versions prior to 17.1.1 Description Umbraco Engage is a business intelligence platform. A security issue exists in Umbraco Engage where certain API endpoints lack proper authentication or...

CVE-2026-27449: Improper Access Control

Umbraco Engage is a business intelligence platform. A vulnerability has been identified in Umbraco Engage prior to versions 16.2.1 and 17.1.1 where certain API endpoints are exposed without enforcing authentication or authorization checks. The affected endpoints can be accessed directly over the...

CVE-2025-15324

Tanium addressed a documentation issue in Engage...

CVE-2025-15324

Tanium addressed a documentation issue in Engage...

CVE-2025-15324

Technical details about CVE-2025-15324 are not provided in the supplied documents. The records indicate a documentation issue with Tanium Engage and do not specify affected versions, root cause, exploitability, or remediation.

CVE-2025-15324

Tanium addressed a documentation issue in Engage...

CVE-2025-15324 Tanium addressed a local privilege escalation vulnerability in Engage.

Tanium addressed a documentation issue in Engage...

CVE-2025-15324 Tanium addressed a local privilege escalation vulnerability in Engage.

Tanium addressed a documentation issue in Engage...

EUVD-2025-206831

Tanium addressed a documentation issue in Engage...

PT-2026-6609

Name of the Vulnerable Software and Affected Versions Tanium Engage affected versions not specified Description A documentation issue was addressed in Tanium Engage. The issue is related to documentation and does not involve a technical flaw in the software itself. Recommendations At the moment,...

Tanium Engage 安全漏洞

Tanium Engage is a user interaction and self-service module developed by the American company Tanium. There is a security vulnerability in Tanium Engage, which stems from documentation issues...

CVE-2025-15324: Improper Link Resolution Before File Access

Tanium addressed a documentation issue in Engage...

WordPress Icegram Engage plugin < 3.1.32 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Icegram versions 3.1.32...

Malicious code in eslint-config-pexip-engage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f2ae2981daf16023f28b58d952a770dc6ec7060333721b5eeca90a6b05f6d56 The package eslint-config-pexip-engage was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-205523

Malicious code in eslint-config-pexip-engage npm...

MAL-2025-192955 Malicious code in eslint-config-pexip-engage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f2ae2981daf16023f28b58d952a770dc6ec7060333721b5eeca90a6b05f6d56 The package eslint-config-pexip-engage was found to contain malicious code. Source: ossf-package-analysis...