CVE-2025-4606

CVE-2025-4606 Overview This tool is used to test the vulnerability CVE-2025-4606 in WordPress using the Sala – Startup & SaaS WordPress Theme. This vulnerability allows Privilege Escalation through Account Takeover because the theme does not properly validate user identity before updating sensiti...

CVE-2026-89264

MoguBlog through 6.2 is vulnerable to comment author spoofing in the POST /web/comment/add endpoint. The server fails to validate that the userUid supplied in the request body matches the authenticated session, allowing any authenticated user to post comments attributed to any other account, incl...

CVE-2026-89264 MoguBlog through 6.2 Comment Author Spoofing via Request-Body Identity

MoguBlog through 6.2 fails to validate the comment author identity in the POST /web/comment/add endpoint, allowing authenticated users to post comments attributed to any other user. Attackers can supply arbitrary userUid values in the request body to impersonate other accounts including...

CVE-2026-80462

A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions...

EUVD-2026-76099

A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions...

CVE-2026-80462 Privilege Escalation in Progress Chef Automate

A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions...

CVE-2026-80462

Progress Chef Automate is affected by a privilege escalation vulnerability in its API gateway and identity validation path , allowing an unauthenticated network actor to gain elevated access to protected functionality under specific conditions. The vulnerability is rated CVSS 3.1 10.0 (Critical) ...

CVE-2026-80462 Privilege Escalation in Progress Chef Automate

A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions...

PT-2026-89866

👨‍🍳 Progress Chef Automate: CVSS 10 critical. CVE-2026-80462 lets unauthenticated actors escalate privileges via the API gateway identity validation path under specific conditions. Patch immediately. cybersecurity ciso vulnerabilities mssp https://t.co/oK7C8H5CtZ https://t.co/JFDGm3roK7...

CVE-2026-14873

The Bulk Password Reset plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.3. This is due to the plugin not properly validating a user's identity prior to updating their details like arbitrary user passwords, including...

CVE-2026-14873

The Bulk Password Reset plugin for WordPress is affected in all versions up to and including 1.3.3 by a privilege escalation vulnerability. The plugin fails to properly validate a user's identity before updating account details, allowing an authenticated attacker with subscriber-level access or a...

CVE-2026-78560

CVE-2026-78560 affects the Okta Access Gateway , specifically its optional pass-through authentication source , which accepts user identity from a client-supplied HTTP header without cryptographic validation. When this source is enabled without an upstream reverse proxy or firewall that sanitizes...

EUVD-2026-70808

MOOS core-moos through 10.4.0 fails to validate client identity in MOOSDB message processing, allowing authenticated attackers to attribute writes to other clients by supplying arbitrary source identifiers in serialized messages. Attackers can forge message origins and cancel third-party...

CVE-2026-85432

MOOS core-moos through 10.4.0 fails to validate client identity in MOOSDB message processing, allowing authenticated attackers to attribute writes to other clients by supplying arbitrary source identifiers in serialized messages. Attackers can forge message origins and cancel third-party...

CVE-2026-85429

MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity from the message body rather than validating it from the connection source. Attackers can craft NODEMESSAGE packets with spoofed source identities to impersonate other nodes and post arbitrary variable notifications without...

CVE-2026-85432 MOOS core-moos through 10.4.0 MOOSDB Message Source Spoofing via Wire Identity

MOOS core-moos through 10.4.0 fails to validate client identity in MOOSDB message processing, allowing authenticated attackers to attribute writes to other clients by supplying arbitrary source identifiers in serialized messages. Attackers can forge message origins and cancel third-party...

CVE-2026-85432 MOOS core-moos through 10.4.0 MOOSDB Message Source Spoofing via Wire Identity

MOOS core-moos through 10.4.0 fails to validate client identity in MOOSDB message processing, allowing authenticated attackers to attribute writes to other clients by supplying arbitrary source identifiers in serialized messages. Attackers can forge message origins and cancel third-party...

CVE-2026-85429 MOOS-IvP through 24.8.1 uFldNodeComms Node Message Source Spoofing

MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity from the message body rather than validating it from the connection source. Attackers can craft NODEMESSAGE packets with spoofed source identities to impersonate other nodes and post arbitrary variable notifications without...

CVE-2026-17197 IBM i is Affected By Multiple Vulnerabilities in Host Servers

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to bypass security restrictions due to improper validation of client-asserted identity...

CVE-2026-17197

CVE-2026-17197 (CWE-287: Improper Authentication) affects IBM i 7.3–7.6 host servers, allowing remote unauthenticated attackers to bypass security restrictions via improper client-asserted identity validation. IBM provides PTFs: SJ11101/SJ11097 (7.6), SJ11102/SJ11098 (7.5), SJ11103/SJ11099 (7.4),...