CVE-2026-58242

The SAP Cloud Connector contains an improper authorization check that can be exploited by a low-privileged attacker using specially crafted requests. This vulnerability requires the attacker to be on an adjacent network . Successful exploitation allows the attacker to obtain limited information a...

EUVD-2026-98183

SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests. Exploitation requires the attacker to be on an adjacent network. Successful exploitation could allow the attacker to obtain limited information...

CVE-2026-58242 Improper Authorization check in SAP Cloud Connector

SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests. Exploitation requires the attacker to be on an adjacent network. Successful exploitation could allow the attacker to obtain limited information...

CVE-2026-18343

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization...

CVE-2026-18343: Improper Privilege Management

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization...

CVE-2026-109962: Improper Authorization

Froxlor 0.10.0 before 2.3.14 contains a missing authorization vulnerability that allows reseller accounts to read full-admin-only MySQL server and cronjob configuration via API read commands. Resellers can call MysqlServer.listing, MysqlServer.get, or Cronjobs.listing through api.php to obtain...

Google Chrome Downloads Component Unauthorized Access

The vulnerability of the Downloads component in Google Chrome and Microsoft Edge is related to improper authorization. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, as well as cause service failures through a specially created HTML page...

Google Chrome Downloads Unauthorized Access

The vulnerability of the Downloads component in Google Chrome and Microsoft Edge is related to improper authorization. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created HTML page...

CVE-2026-103560: Missing Authorization

Improper authorization in DNS Server allows an authorized attacker to perform tampering locally...

PT-2026-112972

Name of the Vulnerable Software and Affected Versions Windows Encrypting File System EFS affected versions not specified Description Improper authorization in the Windows Encrypting File System EFS allows an authorized attacker to perform local tampering, which can affect the system...

CVE-2026-103549: Incorrect Authorization

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with maintainer-role permissions to remove certain package registry metadata that...

Microsoft Windows: CVE-2026-88162: Windows Encrypting File System (EFS) Tampering Vulnerability

Improper authorization in Windows Encrypting File System EFS allows an authorized attacker to perform tampering locally...

PT-2026-112255

Name of the Vulnerable Software and Affected Versions Windows Broadcast DVR User Service affected versions not specified Description Improper authorization in the Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally. Recommendations At the moment, there...

PT-2026-111160

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 17.6 through 19.2.7 GitLab CE/EE versions 19.3 through 19.3.4 GitLab CE/EE versions 19.4 through 19.4.1 Description Improper authorization checks allow an authenticated user with maintainer-role permissions to remove...

PT-2026-111170

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 15.1 through 19.2.7 GitLab CE/EE versions 19.3 through 19.3.4 GitLab CE/EE versions 19.4 through 19.4.1 Description Improper authorization checks under certain conditions could allow a user to download package files from ...

PT-2026-111169

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 18.7 through 19.2.7 GitLab CE/EE versions 19.3 through 19.3.4 GitLab CE/EE versions 19.4 through 19.4.1 Description An improper authorization check in the downstream pipeline creation service allows an authenticated user...

PT-2026-111177

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 19.2 through 19.2.7 GitLab CE/EE versions 19.3 through 19.3.4 GitLab CE/EE versions 19.4 through 19.4.1 Description Improper authorization in the GraphQL API allows an unauthenticated user to read internal notes and...

PT-2026-111127

Name of the Vulnerable Software and Affected Versions SAP Cloud Connector affected versions not specified Description An improper authorization check allows a low-privileged attacker on an adjacent network to obtain limited information about internal systems by sending specially crafted requests...

CVE-2026-88162: Incorrect Authorization

Improper authorization in Windows Encrypting File System EFS allows an authorized attacker to perform tampering locally...

CVE-2026-70148: Unintended Proxy or Intermediary

Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally...