CVE-2026-109289: Insufficient Session Expiration

Open WebUI from 0.8.8 before 0.11.4 contains an improper authorization vulnerability that allows deactivated users to keep executing terminal commands through an already open terminal WebSocket. Because the terminal proxy route in terminals.py checks access only on the first message, deactivated...

CVE-2026-109284: Missing Authorization

Open WebUI from 0.11.0 before 0.11.4 contains an improper authorization vulnerability in the chat fork handler, which places forked chats in the source chat's folder without checking folder write access. Shared folder members downgraded to read-only can call POST /api/v1/chats/id/fork on chats th...

CVE-2026-109204: Weak Password Recovery Mechanism for Forgotten Password

LogicalDOC Community Edition through 9.3 contains an improper authorization vulnerability in the PswRecovery servlet that fails to bind password recovery tickets to the requesting user. Attackers can obtain a ticket for their own account and reuse it with any userId, including administrators, to...

CVE-2026-109184: Missing Authorization

jshERP through 3.6 contains an improper authorization vulnerability that allows low-privilege authenticated users to read any settlement account ledger by supplying an arbitrary accountId. Attackers restricted to personal or department data scope can query GET /account/findAccountInOutList to vie...

PT-2026-110880

Name of the Vulnerable Software and Affected Versions IBM Db2 versions 11.5.0 through 11.5.9 IBM Db2 versions 12.1.0 through 12.1.5 Description Improper authorization when using the CREATE WRAPPER command could allow a remote authenticated attacker to obtain sensitive information. This issue...

CVE-2026-85499: Incorrect Authorization

Improper Authorization vulnerability in Apache SkyWalking BanyanDB. The Canopy includes incomplete proof-of-concept role and monitoring-proxy functionality. Under a non-default configuration with a readonly Canopy user and a reachable monitoring target, that user can send non-read requests throug...

CVE-2026-21136: Undefined Security Weakness

Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore process...

CVE-2026-108890: Improper Authorization

A vulnerability has been found in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. Affected by this issue is the function terminalManager.spawn of the file packages/server/src/browser-handlers/terminal-handler.ts of the component Terminal Handler. The manipulation of the argument cwd leads to...

CVE-2023-54410: Improper Authorization

Frappe before 13.22.0 contains an improper authorization vulnerability that allows authenticated users to rename documents by exploiting a missing permission check. Attackers can invoke the document rename functionality on documents they lack permission to modify, altering records without proper...

CVE-2026-18166: Improper Access Control

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a remote authenticated attacker to obtain sensitive information due to improper authorization when using the CREATE WRAPPER command...

PT-2026-110541

Name of the Vulnerable Software and Affected Versions Apache SkyWalking BanyanDB versions 0.11.0 Description An improper authorization issue exists in the Canopy component. Under a non-default configuration, a user assigned a readonly role can bypass restrictions and send non-read requests throug...

PT-2026-110620

🚨 CVE-2026-108899 A flaw has been found in tobychui zoraxy up to 3.3.4. This impacts the function handleBasicAuth of the file mod/dynamicproxy/authProviders.go of the component Path Exception Matcher. This manipulation of the argument PathPrefix causes improper authorization. It is possible to...

CVE-2026-108575

A vulnerability has been found in BerriAI LiteLLM up to 1.94.0. This affects the function getsecret of the file secretmanagers/main.py of the component Secret Resolution. The manipulation of the argument apikey leads to improper authorization. The attack can be initiated remotely. The exploit has...

CVE-2026-108575 BerriAI LiteLLM Secret Resolution main.py get_secret improper authorization

A vulnerability has been found in BerriAI LiteLLM up to 1.94.0. This affects the function getsecret of the file secretmanagers/main.py of the component Secret Resolution. The manipulation of the argument apikey leads to improper authorization. The attack can be initiated remotely. The exploit has...

CVE-2026-108575

A vulnerability exists in BerriAI LiteLLM (up to version 1.94.0 ) within the Secret Resolution component. The flaw resides in the get_secret function located in the file secret_managers/main.py. Specifically, an attacker can manipulate the api_key argument to cause improper authorization , potent...

EUVD-2026-96885

A vulnerability has been found in BerriAI LiteLLM up to 1.94.0. This affects the function getsecret of the file secretmanagers/main.py of the component Secret Resolution. The manipulation of the argument apikey leads to improper authorization. The attack can be initiated remotely. The exploit has...

CVE-2026-108691

mall4j through 4.0 contains an improper authorization vulnerability that allows authenticated storefront customers to delete other shoppers' cart items through an operator precedence error in the cleanExpiryProdList SQL statement. Attackers can send one DELETE request to...

CVE-2026-108691

mall4j through 4.0 contains an improper authorization vulnerability that allows authenticated storefront customers to delete other shoppers' cart items through an operator precedence error in the cleanExpiryProdList SQL statement. Attackers can send one DELETE request to...

EUVD-2026-96710

mall4j through 4.0 contains an improper authorization vulnerability that allows authenticated storefront customers to delete other shoppers' cart items through an operator precedence error in the cleanExpiryProdList SQL statement. Attackers can send one DELETE request to...

CVE-2026-108691 mall4j through 4.0 Operator Precedence Error Deletes Other Users' Cart Items via /p/shopCart/cleanExpiryProdList

mall4j through 4.0 contains an improper authorization vulnerability that allows authenticated storefront customers to delete other shoppers' cart items through an operator precedence error in the cleanExpiryProdList SQL statement. Attackers can send one DELETE request to...