PT-2026-115227

The EnergizeLab Eilik NestJS auth service accepts a user-controlled user ID in account update requests mass assignment. A registered user can set another account's identifier and take over that account...

CVE-2026-105040: Authorization Bypass Through User-Controlled Key

The EnergizeLab Eilik NestJS auth service accepts a user-controlled user ID in account update requests mass assignment. A registered user can set another account's identifier and take over that account...

WordPress SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin <= 3.10.0 - Unauthenticated Privilege Escalation to wp_capabilities Mass Assignment vulnerability

Unauthenticated Privilege Escalation to wpcapabilities Mass Assignment vulnerability discovered by Sebastian Albrecht mySebbe in WordPress Plugin FormFlow versions = 3.10.0...

CVE-2026-104748 SimpleForm <= 3.10.0 - Unauthenticated Privilege Escalation to wp_capabilities Mass Assignment via simpleform_wp_register

The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.10.0 This is due to the wpajaxnoprivsimpleformwpregister AJAX action lacking any capability check for role...

CVE-2026-104748

The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to unauthenticated privilege escalation in all versions up to and including 3.10.0 . The flaw stems from the wp_ajax_nopriv_simpleform_wp_register AJAX action failing to perfor...

CVE-2026-104748 SimpleForm <= 3.10.0 - Unauthenticated Privilege Escalation to wp_capabilities Mass Assignment via simpleform_wp_register

The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.10.0 This is due to the wpajaxnoprivsimpleformwpregister AJAX action lacking any capability check for role...

CVE-2026-92119

REST API Mass Assignment vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users are recommended to upgrade to version 1.22.0, which fixes the issue...

CVE-2026-92119

Apache Allura versions prior to 1.22.0 are vulnerable to a REST API Mass Assignment issue (CWE-915). The vulnerability occurs when the application binds user-provided input directly to internal objects or database models without proper filtering, potentially allowing an attacker to modify restric...

EUVD-2026-97831

REST API Mass Assignment vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users are recommended to upgrade to version 1.22.0, which fixes the issue...

CVE-2026-92119

REST API Mass Assignment vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users are recommended to upgrade to version 1.22.0, which fixes the issue...

CVE-2026-92119 Apache Allura: REST API Mass Assignment

REST API Mass Assignment vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users are recommended to upgrade to version 1.22.0, which fixes the issue...

CVE-2026-92119 Apache Allura: REST API Mass Assignment

REST API Mass Assignment vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users are recommended to upgrade to version 1.22.0, which fixes the issue...

CVE-2026-109186

jshERP through 3.6 contains a mass assignment vulnerability in the UserController update handler that allows authenticated users to overwrite protected fields including tenantid and password. Attackers can send a crafted PUT /user/update body to switch into another tenant on next login or overwri...

EUVD-2026-97390

jshERP through 3.6 contains a mass assignment vulnerability in the UserController update handler that allows authenticated users to overwrite protected fields including tenantid and password. Attackers can send a crafted PUT /user/update body to switch into another tenant on next login or overwri...

CVE-2026-109186 jshERP through 3.6 Mass Assignment via PUT /user/update

jshERP through 3.6 contains a mass assignment vulnerability in the UserController update handler that allows authenticated users to overwrite protected fields including tenantid and password. Attackers can send a crafted PUT /user/update body to switch into another tenant on next login or overwri...

CVE-2026-109186

The jshERP application (versions through 3.6 ) is susceptible to a mass assignment vulnerability within the UserController update handler. This flaw allows authenticated users to overwrite protected fields, specifically tenant_id and password , by sending a crafted PUT /user/update request. Pract...

CVE-2026-109186 jshERP through 3.6 Mass Assignment via PUT /user/update

jshERP through 3.6 contains a mass assignment vulnerability in the UserController update handler that allows authenticated users to overwrite protected fields including tenantid and password. Attackers can send a crafted PUT /user/update body to switch into another tenant on next login or overwri...

CVE-2026-109186

jshERP through 3.6 contains a mass assignment vulnerability in the UserController update handler that allows authenticated users to overwrite protected fields including tenantid and password. Attackers can send a crafted PUT /user/update body to switch into another tenant on next login or overwri...

CVE-2026-109186 jshERP through 3.6 Mass Assignment via PUT /user/update

jshERP through 3.6 contains a mass assignment vulnerability in the UserController update handler that allows authenticated users to overwrite protected fields including tenantid and password. Attackers can send a crafted PUT /user/update body to switch into another tenant on next login or overwri...

PT-2026-110575

jshERP through 3.6 contains a mass assignment vulnerability in the UserController update handler that allows authenticated users to overwrite protected fields including tenant id and password. Attackers can send a crafted PUT /user/update body to switch into another tenant on next login or...