CVE-2026-17433

A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. This impacts the function createChatSdkBridge.setup of the file src/channels/chat-sdk-bridge.ts of the component MCP Server Approval. Performing a manipulation results in improper authorization. The attack needs to be approached...

CVE-2026-17433 nanocoai NanoClaw MCP Server Approval chat-sdk-bridge.ts createChatSdkBridge.setup improper authorization

A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. This impacts the function createChatSdkBridge.setup of the file src/channels/chat-sdk-bridge.ts of the component MCP Server Approval. Performing a manipulation results in improper authorization. The attack needs to be approached...

PT-2026-64793

Name of the Vulnerable Software and Affected Versions ananocoai NanoClaw versions prior to 2.0.65 Description An improper authorization issue exists within the MCP Server Approval component, specifically affecting the createChatSdkBridge.setup function located in the src/channels/chat-sdk-bridge....

PT-2026-64794

Name of the Vulnerable Software and Affected Versions ananocoai NanoClaw versions prior to 2.0.65 Description A flaw in the add mcp server component allows for improper authorization via remote manipulation. The issue resides within the handleAddMcpServer function located in the...

Exploit for Improper Authorization in Microsoft

No d...

Exploit for Improper Authorization in Microsoft

cve-id Donate Support the maintenance of this project wit...

CVE-2026-62835

Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network...

CVE-2026-62835

Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network...

EUVD-2026-48737

Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network...

Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

Researchers H0j3n and Aniq Fakhrul published a working exploit on July 24 that lets a low-privileged Active Directory user obtain a certificate for a Domain Controller and authenticate as that machine. They codenamed the flaw Certighost. Because Domain Controller accounts carry directory...

Improper Authorization

Apache Accumulo is vulnerable to Improper Authorization. The vulnerability is due to insufficient privilege enforcement on remote shutdown commands, allowing authenticated low-privileged users to shut down system components and cause a denial of service...

EUVD-2026-48454

Improper authorization in Azure Red Hat OpenShift ARO allows an authorized attacker to elevate privileges over a network...

Apache Syncope permission granting and access control issues

Apache Syncope is an open-source identity management and governance system that primarily provides features for user management, permission control, and role assignment. Apache Syncope has a security vulnerability that arises from the improper validation of authorization for users who register or...

PT-2026-64411

Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network...

CVE-2026-56160

Improper authorization in Azure Red Hat OpenShift ARO allows an authorized attacker to elevate privileges over a network...

Azure Portal Information Disclosure Vulnerability

Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network...

Azure Red Hat OpenShift (ARO) Elevation of Privilege Vulnerability

Improper authorization in Azure Red Hat OpenShift ARO allows an authorized attacker to elevate privileges over a network...

PT-2026-64205

Name of the Vulnerable Software and Affected Versions Azure Red Hat OpenShift ARO affected versions not specified Description Improper authorization allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version tha...

GHSA-2XGM-WC4G-5JVG n8n: Improper Authorization Allows Authenticated Users to Assign Workflows to Folders in Other Projects

Impact An authenticated user with permission to create workflows in one project could bypass project/folder authorization boundaries during workflow creation. By supplying a crafted request payload, the user could associate a newly created workflow with a folder belonging to a different project...

OPENSUSE-SU-2026:21425-1 Security update for PackageKit

This update for PackageKit fixes the following issues: Security issue fixed: - CVE-2026-10294: manipulation of the argument frontend-socket can lead to improper authorization bsc1267250. Non security issue fixed: - KDE Discover ignores package locks bsc1263252...