CVE-2026-87075

Tanium Comply contains an improper access controls vulnerability that the vendor has addressed. The flaw carries a CVSS 3.1 score of 8.1 (HIGH) , with a network attack vector, low complexity, and low privileges required. Successful exploitation results in high integrity and high availability impa...

CVE-2026-87047

Tanium Comply is affected by an improper access controls vulnerability, assigned CVSS 3.1 score of 6.3 (Medium) with a network attack vector, low complexity, and low required privileges, resulting in low impacts to confidentiality, integrity, and availability. The vulnerability has been addressed...

EUVD-2026-74548

Tanium addressed an improper access controls vulnerability in Comply...

CVE-2026-87047 Tanium addressed an improper access controls vulnerability in Comply.

Tanium addressed an improper access controls vulnerability in Comply...

CVE-2026-87019 Tanium addressed an improper access controls vulnerability in Comply.

Tanium addressed an improper access controls vulnerability in Comply...

CVE-2026-87019

Tanium Comply is affected by an improper access controls vulnerability, as reported by Tanium in advisory TAN-2026-035 . The issue was addressed by the vendor. The CVSS 3.1 score is 4.3 (MEDIUM) , with a network attack vector, low complexity, and low privileges required; the impact is limited to ...

EUVD-2026-74547

Tanium addressed an improper access controls vulnerability in Comply...

CVE-2026-87037 Tanium addressed an improper access controls vulnerability in Comply.

Tanium addressed an improper access controls vulnerability in Comply...

CVE-2026-86512

A vulnerability was identified in java-json-tools json-patch up to 1.13. This affects the function CopyOperation.apply/MoveOperation.apply of the file src/main/java/com/github/fge/jsonpatch/CopyOperation.java of the component Copy Move Operations. The manipulation leads to improper access control...

CVE-2026-86512 java-json-tools json-patch Copy Move Operations CopyOperation.java MoveOperation.apply access control

A vulnerability was identified in java-json-tools json-patch up to 1.13. This affects the function CopyOperation.apply/MoveOperation.apply of the file src/main/java/com/github/fge/jsonpatch/CopyOperation.java of the component Copy Move Operations. The manipulation leads to improper access control...

EUVD-2026-72613

A vulnerability was identified in java-json-tools json-patch up to 1.13. This affects the function CopyOperation.apply/MoveOperation.apply of the file src/main/java/com/github/fge/jsonpatch/CopyOperation.java of the component Copy Move Operations. The manipulation leads to improper access control...

CVE-2026-86285

BookStack versions up to 26.05.2 are affected by an improper access control vulnerability in the Attachment Edit Endpoint , specifically the AttachmentController::getUpdateForm function in app/Uploads/Controllers/AttachmentController.php. The ID argument can be manipulated to bypass permission ch...

EUVD-2026-72178

A security vulnerability has been detected in JeecgBoot up to 3.9.3. This vulnerability affects the function exportXls of the file jeecg-boot/jeecg-boot-module/jeecg-boot-module-airag/src/main/java/org/jeecg/modules/airag/llm/controller/AiragModelController.java. Such manipulation of the argument...

CVE-2026-85401 Dolibarr Legacy File Manager config.inc.php access control

A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is some unknown functionality of the file htdocs/core/filemanagerdol/connectors/php/config.inc.php of the component Legacy File Manager. Executing a manipulation can lead to improper access controls. The...

CVE-2026-82835

A weakness has been identified in caoqianming django-vue-admin 1.0. This vulnerability affects unknown code of the file /api/file/. Executing a manipulation of the argument fileid can lead to improper access controls. The attack can be executed remotely. The exploit has been made available to the...

CVE-2026-82833

A vulnerability was identified in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Labeling Pipeline Module to Annotate a Document Automatically up to 1.8.5. Affected by this issue is the function ExampleDetail of the file /v1/projects/1/examples/ of the component...

CVE-2026-82834 Doccano Open Source Annotation Tools for Machine Learning Practitioners Bulk-Delete Endpoint category-types LabelList access control

A security flaw has been discovered in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Labeling Pipeline Module to Annotate a Document Automatically up to 1.8.5. This affects the function LabelList of the file /v1/projects/1/category-types of the component...

CVE-2026-82486

A vulnerability was found in SiteServer SSCMS 7.4.0. Affected by this issue is some unknown functionality of the component Agent Installation Workflow. Performing a manipulation of the argument SecurityKey results in improper access controls. Remote exploitation of the attack is possible. The...

EUVD-2026-68176

A vulnerability was found in SiteServer SSCMS 7.4.0. Affected by this issue is some unknown functionality of the component Agent Installation Workflow. Performing a manipulation of the argument SecurityKey results in improper access controls. Remote exploitation of the attack is possible. The...

PT-2026-73064

A vulnerability has been found in SpaceX Starlink Router Gen 3 2025.11.14.mr64708.3. This affects the function get status of the component gRPC Management Interface. The manipulation leads to improper access controls. The attack can only be initiated within the local network. The exploit has been...