CVE-2026-68484

Cash Collect by Sage contains an improper authorization vulnerability in the Sage AR Automation API . Administrative functions fail to properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and escalate to elevated privileges. The issue is ra...

analyze-Exploit-CVE-2023-22518-Confluence

Exploit-CVE-2023-22518 Confluence 中的 CVE-2023-22518 CVE-2023-22518：该漏洞被描述为“Confluence 数据中心和服务器中的授权不当漏洞”。该漏洞影响 Atlassian 产品的本地部署（On-premises）版本。 环境搭建 搭建环境，使用受影响的版本 8.0.4。下载 URL：https://product-downloads.atlassian.com/software/confluence/downloads/atlassian-confluence-8.0.4-x64.exe 选择 Trial...

CVE-2026-54121

🛡️ CVE-2026-54121 — Investigación CTI de Certighost Escalada de privilegios en Active Directory Certificate Services / Riesgo de compromiso del dominio Creado por Pratik Chhetri Fecha del informe: 2026-07-28 📌 Resumen ejecutivo...

CVE-2026-11838 Improper Authorization in Yordam Informatics' Library Reservation System

Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation. This issue affects Library Reservation System: before v22.2...

CVE-2026-11838

CVE-2026-11838 is a missing authentication vulnerability in the Library Reservation System developed by Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. The flaw allows input data manipulation in a critical function that lacks proper access contro...

CVE-2026-21086

Improper authorization in ProxyHandler prior to SMR Aug-2026 Release 1 allows local attackers to access proxy configuration...

CVE-2026-21086

CVE-2026-21086 is an improper authorization vulnerability in the ProxyHandler component of Samsung Mobile devices prior to SMR Aug-2026 Release 1 . A local attacker with low privileges can access the proxy configuration. The Samsung Mobile CNA assigned a CVSS 4.0 base score of 4.8 (MEDIUM) with a...

EUVD-2026-74627

Improper authorization in ProxyHandler prior to SMR Aug-2026 Release 1 allows local attackers to access proxy configuration...

CVE-2026-86804

A vulnerability was identified in seakee CPA-Manager-Plus up to 1.11.10. This vulnerability affects the function CPAResource of the file apps/manager-server/internal/http/controller/proxy/handler.go of the component HTTP Handler. The manipulation leads to improper authorization. It is possible to...

CVE-2026-86804 seakee CPA-Manager-Plus HTTP handler.go CPAResource improper authorization

A vulnerability was identified in seakee CPA-Manager-Plus up to 1.11.10. This vulnerability affects the function CPAResource of the file apps/manager-server/internal/http/controller/proxy/handler.go of the component HTTP Handler. The manipulation leads to improper authorization. It is possible to...

CVE-2026-86804

An improper authorization vulnerability in seakee CPA-Manager-Plus versions up to 1.11.10 affects the CPAResource function in the file apps/manager-server/internal/http/controller/proxy/handler.go within the HTTP Handler component. An unauthenticated remote attacker can manipulate this handler to...

EUVD-2026-74049

A vulnerability was identified in seakee CPA-Manager-Plus up to 1.11.10. This vulnerability affects the function CPAResource of the file apps/manager-server/internal/http/controller/proxy/handler.go of the component HTTP Handler. The manipulation leads to improper authorization. It is possible to...

CVE-2026-86804 seakee CPA-Manager-Plus HTTP handler.go CPAResource improper authorization

A vulnerability was identified in seakee CPA-Manager-Plus up to 1.11.10. This vulnerability affects the function CPAResource of the file apps/manager-server/internal/http/controller/proxy/handler.go of the component HTTP Handler. The manipulation leads to improper authorization. It is possible to...

CVE-2026-58611

Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally...

EUVD-2026-73368

Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally...

CVE-2026-58611

CVE-2026-58611 is an improper authorization vulnerability in Xbox Gaming Services that allows an already-authorized (low-privilege) attacker to elevate privileges locally , resulting in high impact to confidentiality, integrity, and availability. The assigned CVSS 3.1 score is 7.8 (HIGH) with a l...

CVE-2026-86840

The vtoken-minting and slpx pallets in Bifrost contain an improper authorization vulnerability in channel commission attribution. A signed account can supply an arbitrary registered channelid when minting tokens without verifying that the caller is authorized to mint on behalf of that channel. Th...

Improper Authorization in MongoDB Server applyOps Command Allows Writes to Arbitrary Internal Storage Tables via Feature Gate Bypass

A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by specifying an internal replication mode value that was not intended to be client-selectable. This bypass enables execution of container...

CVE-2026-82062

MongoDB Server is affected by an improper authorization flaw in the applyOps command . An authenticated user with elevated internal privileges can bypass a disabled feature gate by specifying an internal replication mode value not intended to be client-selectable. This enables container operation...

CVE-2026-82062 Improper Authorization in MongoDB Server applyOps Command Allows Writes to Arbitrary Internal Storage Tables via Feature Gate Bypass

A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by specifying an internal replication mode value that was not intended to be client-selectable. This bypass enables execution of container...