EUVD-2026-78279

Android application "ManabiPocket for Parents" contains an improper access control vulnerability in one of its components. A malicious application installed on the user's Android device may exploit the affected component via an Intent, potentially allowing the malicious application to obtain...

CVE-2026-86701

CVE-2026-86701 affects the Android application ManabiPocket for Parents , which contains an improper access control vulnerability in one of its components. A malicious application installed on the same device can exploit the affected component via an Intent , potentially allowing it to obtain sen...

CVE-2025-24076

CVE-2025-24076 Microsoft Windows Cross Device Service - Exploitation de vulnérabilité d'élévation de privilèges Aperçu Ce script exploite une vulnérabilité dans le service Cross Device de Windows qui permet une élévation de privilèges sur les systèmes Windows 11 , Windows Server 2025 et Windows...

CVE-2026-90851

A flaw has been found in PHPGurukul Hostel Management System 3.0. This affects an unknown part of the file /admin/includes/checklogin.php. This manipulation of the argument ID causes improper access controls. Remote exploitation of the attack is possible. The exploit has been published and may be...

EUVD-2026-78253

A flaw has been found in PHPGurukul Hostel Management System 3.0. This affects an unknown part of the file /admin/includes/checklogin.php. This manipulation of the argument ID causes improper access controls. Remote exploitation of the attack is possible. The exploit has been published and may be...

CVE-2022-24693

CVE-2022-24693 Описание Устройства Baicells Nova436Q и Neutrino 430 с прошивкой до QRTB 2.7.8 имеют жестко закодированные учетные данные, которые легко обнаруживаются и могут использоваться удаленными злоумышленниками для аутентификации через ssh. Учетные данные хранятся в прошивке, зашифрованные...

CVE-2026-48907

🚨 CVE-2026-48907 - JCE Joomla Content Editor Exécution de code à distance non authentifiée ⚠️ RCE non authentifiée critique dans JCE Joomla Content Editor Une vulnérabilité critique de contrôle d'accès permettant à des attaquants non authentifiés de compromettre des installations Joomla vulnérable...

PT-2026-91846

A flaw has been found in PHPGurukul Hostel Management System 3.0. This affects an unknown part of the file /admin/includes/checklogin.php. This manipulation of the argument ID causes improper access controls. Remote exploitation of the attack is possible. The exploit has been published and may be...

EUVD-2026-78163

ZITADEL is an open source identity management platform. Prior to version 4.16.0, a bug in how ZITADEL updates permissions when multiple project roles are deleted at the same time can cause some user permissions to be missed. This issue specifically affects User Grants on Granted Projects projects...

CVE-2026-19290

IBM Sterling File Gateway 6.2.0.0 through 6.2.0.61, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 could allow a remote attacker to obtain sensitive information due to improper access control...

CVE-2026-19273

CVE-2026-19273 affects the Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway (Standard Edition), versions 6.2.0.0 through 6.2.0.6_2, 6.2.1.0–6.2.1.2, and 6.2.2.0–6.2.2.1. The root cause is improper authentication (CWE-287), which allows a remote authenticated attacker to bypa...

EUVD-2026-78141

IBM Sterling File Gateway 6.2.0.0 through 6.2.0.61, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 could allow a remote attacker to obtain sensitive information due to improper access control...

CVE-2026-19290

IBM Sterling File Gateway is affected by an improper access control flaw (CWE-284) that allows a remote, unauthenticated attacker to obtain sensitive information over the network. The vulnerability impacts versions 6.2.0.0 through 6.2.0.6_1, 6.2.1.0 through 6.2.1.2, and 6.2.2.0 through 6.2.2.1 , ...

CVE-2026-19290 IBM Sterling File Gateway is Vulnerable to Improper Access Control

IBM Sterling File Gateway 6.2.0.0 through 6.2.0.61, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 could allow a remote attacker to obtain sensitive information due to improper access control...

CVE-2026-36425

CVE-2026-36425 : OPSWAT AppRemover Terminaison arbitraire de processus Un pilote noyau signé d'OPSWAT qui tue n'importe quel processus à la demande. Aucun droit administrateur requis, aucune vérification de privilège, aucune question posée. Pointez-le sur un EDR, un antivirus, un processus protég...

CVE-2026-76441

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-76441 Cisco Secure Email Gateway Security Hardening Release

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

EUVD-2026-77620

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-76441

CVE-2026-76441 affects Cisco Secure Email Gateway and Cisco Secure Email and Web Manager . Cisco's internal security review identified multiple vulnerabilities rooted in improper access control (CWE-284), addressed through software hardening releases . The vulnerability carries a CVSS 3.1 score o...

Astra Linux – Vulnerability in Commons-BeanUtils

Apache Commons has a vulnerability related to improper access control. A special BeanIntrospector class was added in version 1.9.2. This can be used to prevent attackers from using the declared class property of Java enum objects to gain access to the classloader. However, this protection was not...