23166 matches found
PT-2026-116769
In the Linux kernel, the following vulnerability has been resolved: tipc: reject invalid and unexpected GRP ACK MSG to prevent bc ackers underflow Commit 48a5fe38772b "tipc: fix bc ackers underflow on duplicate GRP ACK MSG" rejected duplicate/stale ACKs in tipc group proto rcv by returning early...
PT-2026-117042
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: preserve hidden-group beacon IE ownership A hidden-group probe-response entry borrows its beacon IEs from the group's beacon entry. cfg80211 update assoc bss entry can pass such an entry to cfg80211 update known b...
CVE-2026-111930
Coder from 2.26.0 before 2.34.8 contains an incorrect authorization flaw in the GET /api/v2/workspaces/id/acl endpoint, which checks only workspace read access and then fetches group members using an elevated system context. Authenticated users granted workspace use access can query the endpoint ...
CVE-2026-111891
phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta contains a privilege escalation vulnerability in the group permission API, whose updatePermissions and updateMembers endpoints check held rights without regard to language or category scope and write unrestricted group grants. Non-superadmin...
CVE-2026-111893
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a privilege escalation vulnerability in GroupController::saveCategoryRestrictions that lets delegated administrators assign categories outside their own scope. Category-restricted administrators can POST to /admin/api/group/category-restrictions wit...
CVE-2026-111930 Coder from 2.26.0 before 2.34.8 Information Disclosure via Workspace ACL Endpoint
Coder from 2.26.0 before 2.34.8 contains an incorrect authorization flaw in the GET /api/v2/workspaces/id/acl endpoint, which checks only workspace read access and then fetches group members using an elevated system context. Authenticated users granted workspace use access can query the endpoint ...
CVE-2026-111930 Coder from 2.26.0 before 2.34.8 Information Disclosure via Workspace ACL Endpoint
Coder from 2.26.0 before 2.34.8 contains an incorrect authorization flaw in the GET /api/v2/workspaces/id/acl endpoint, which checks only workspace read access and then fetches group members using an elevated system context. Authenticated users granted workspace use access can query the endpoint ...
EUVD-2026-103297
Coder from 2.26.0 before 2.34.8 contains an incorrect authorization flaw in the GET /api/v2/workspaces/id/acl endpoint, which checks only workspace read access and then fetches group members using an elevated system context. Authenticated users granted workspace use access can query the endpoint ...
CVE-2026-111930
The Coder platform, versions 2.26.0 before 2.34.8 , is susceptible to an information disclosure vulnerability due to an incorrect authorization flaw in the GET /api/v2/workspaces/{id}/acl endpoint. The system fails to properly validate permissions, checking only for workspace read access before f...
EUVD-2026-103326
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a privilege escalation vulnerability in GroupController::saveCategoryRestrictions that lets delegated administrators assign categories outside their own scope. Category-restricted administrators can POST to /admin/api/group/category-restrictions wit...
CVE-2026-111893
The phpMyFAQ application (versions 4.2.0-alpha before 4.2.0-beta ) contains a privilege escalation vulnerability within the GroupController::saveCategoryRestrictions() function. Due to improper privilege management (CWE-269 ), delegated administrators can bypass restrictions by sending a POST req...
CVE-2026-111893 phpMyFAQ 4.2.0-alpha before 4.2.0-beta Privilege Escalation via Group Category Restrictions API
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a privilege escalation vulnerability in GroupController::saveCategoryRestrictions that lets delegated administrators assign categories outside their own scope. Category-restricted administrators can POST to /admin/api/group/category-restrictions wit...
CVE-2026-111893 phpMyFAQ 4.2.0-alpha before 4.2.0-beta Privilege Escalation via Group Category Restrictions API
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a privilege escalation vulnerability in GroupController::saveCategoryRestrictions that lets delegated administrators assign categories outside their own scope. Category-restricted administrators can POST to /admin/api/group/category-restrictions wit...
CVE-2026-111893 phpMyFAQ 4.2.0-alpha before 4.2.0-beta Privilege Escalation via Group Category Restrictions API
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a privilege escalation vulnerability in GroupController::saveCategoryRestrictions that lets delegated administrators assign categories outside their own scope. Category-restricted administrators can POST to /admin/api/group/category-restrictions wit...
CVE-2026-111891 phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta Privilege Escalation via Group Permissions API
phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta contains a privilege escalation vulnerability in the group permission API, whose updatePermissions and updateMembers endpoints check held rights without regard to language or category scope and write unrestricted group grants. Non-superadmin...
CVE-2026-111891 phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta Privilege Escalation via Group Permissions API
phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta contains a privilege escalation vulnerability in the group permission API, whose updatePermissions and updateMembers endpoints check held rights without regard to language or category scope and write unrestricted group grants. Non-superadmin...
CVE-2026-111891
The phpMyFAQ software, versions 4.2.0-alpha.2 before 4.2.0-beta , is susceptible to a privilege escalation vulnerability within the group permission API. The updatePermissions and updateMembers endpoints fail to validate held rights against specific language or category scopes, allowing for the c...
EUVD-2026-103328
phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta contains a privilege escalation vulnerability in the group permission API, whose updatePermissions and updateMembers endpoints check held rights without regard to language or category scope and write unrestricted group grants. Non-superadmin...
EUVD-2026-103334
phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a missing authorization vulnerability in GroupController::deleteGroup that omits privilege-level checks on target groups. Authenticated non-SuperAdmin administrators holding GROUPDELETE can send a crafted groupId to /admin/api/group/delete to...
CVE-2026-111885 phpMyFAQ 4.2.0-alpha before 4.2.0-beta Missing Authorization via deleteGroup API
phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a missing authorization vulnerability in GroupController::deleteGroup that omits privilege-level checks on target groups. Authenticated non-SuperAdmin administrators holding GROUPDELETE can send a crafted groupId to /admin/api/group/delete to...