CVE-2026-1964

CVE-2026-1964 affects WeKan up to version 8.20, in the REST Endpoint’s models/boards.js, causing improper access controls. The vulnerability enables remote exploitation as described across multiple sources, with upgrade to 8.21 and official patch 545566f5663545d16174e0f2399f231aa693ab6e recommend...

EUVD-2026-5526

A vulnerability was found in WeKan up to 8.20. This affects an unknown function of the file models/attachments.js of the component Attachment Storage. The manipulation results in improper access controls. The attack may be launched remotely. Upgrading to version 8.21 mitigates this issue. The pat...

CVE-2025-15289

CVE-2025-15289 concerns an improper access controls vulnerability in Tanium Interact. The connected sources identify the affected product as Tanium Interact and cite an improper access controls issue. CVSS v3.1 metrics from NVD assign a base score of 3.1 (Low) with AV:N, AC:H, PR:L, UI:N, S:U, C:...

CVE-2025-15289 Tanium addressed an improper access controls vulnerability in Interact.

Tanium addressed an improper access controls vulnerability in Interact...

EUVD-2026-5555

Improper access control in the TeamViewer Full and Host clients Windows, macOS, Linux prior version 15.74.5 allows an authenticated user to bypass additional access controls with “Allow after confirmation” configuration in a remote session. An exploit could result in unauthorized access prior to...

CVE-2026-23572 Improper Access Control in TeamViewer clients

Improper access control in the TeamViewer Full and Host clients Windows, macOS, Linux prior version 15.74.5 allows an authenticated user to bypass additional access controls with “Allow after confirmation” configuration in a remote session. An exploit could result in unauthorized access prior to...

CVE-2026-1898

A vulnerability was determined in WeKan up to 8.20. This affects an unknown part of the file packages/wekan-ldap/server/syncUser.js of the component LDAP User Sync. This manipulation causes improper access controls. It is possible to initiate the attack remotely. Upgrading to version 8.21 is able...

PT-2026-6560

Name of the Vulnerable Software and Affected Versions Axigen Mail Server versions prior to 10.5.57 Description Axigen Mail Server contains an improper access control issue in the WebAdmin interface. A delegated admin account with no permissions can bypass access control checks and gain unauthoriz...

Tanium Interact 安全漏洞

Tanium Interact is a query and interaction component of the Tanium platform from the American company Tanium. There is a security vulnerability in Tanium Interact, which stems from improper access control...

Tanium Deploy 安全漏洞

Tanium Deploy is a software management module developed by the American company Tanium. Tanium Deploy has a security vulnerability, which stems from improper access control...

Tanium Reputation 安全漏洞

Tanium Reputation is a threat intelligence integration engine developed by the American company Tanium. Tanium Reputation has a security vulnerability, which stems from improper access control practices...

CVE-2025-68721

Axigen Mail Server before 10.5.57 contains an improper access control vulnerability in the WebAdmin interface. A delegated admin account with zero permissions can bypass access control checks and gain unauthorized access to the SSL Certificates management endpoint page=sslcerts. This allows the...

Tanium Patch 安全漏洞

Tanium Patch is a patch management module developed by the American company Tanium. Tanium Patch has a security vulnerability, which stems from improper access control...

CVE-2026-20977

Improper access control in Emergency Sharing prior to SMR Feb-2026 Release 1 allows local attackers to interrupt its functioning...

CVE-2026-20977

Improper access control in Emergency Sharing prior to SMR Feb-2026 Release 1 allows local attackers to interrupt its functioning...

CVE-2026-20977

CVE-2026-20977 concerns an improper access control in Samsung’s Emergency Sharing prior to the SMR Feb-2026 Release 1. Multiple sources (NVD, Red Hat, NCSC, CVE listings, Attackerkb, CVE list) consistently describe that local attackers can interrupt the service’s functioning due to weak access ma...

CVE-2026-20977

Improper access control in Emergency Sharing prior to SMR Feb-2026 Release 1 allows local attackers to interrupt its functioning...

CVE-2026-20977

Improper access control in Emergency Sharing prior to SMR Feb-2026 Release 1 allows local attackers to interrupt its functioning...

EUVD-2026-5399

Improper access control in Emergency Sharing prior to SMR Feb-2026 Release 1 allows local attackers to interrupt its functioning...

PT-2026-6087

Name of the Vulnerable Software and Affected Versions Citrix Emergency Sharing versions prior to SMR Feb-2026 Release 1 Description An improper access control issue exists in Emergency Sharing. This allows local attackers to interrupt the functionality of the service. Recommendations Update to SM...