358 matches found
CVE-2025-12523
The Centreon Web monitoring system is vulnerable to Broken Object Level Authorization in the Users Configuration Endpoint (/centreon/api/latest/configuration/users). This security flaw allows an authenticated user to bypass access restrictions, potentially leading to the disclosure of sensitive i...
EUVD-2025-211213
Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user...
CVE-2026-24134-PoC
CVE-2026-24134-PoC Overview This repository contains the Proof of Concept PoC for CVE-2026-24134 , a Broken Object Level Authorization BOLA vulnerability in StudioCMS. Contents cve202624134poc.py - Python exploitation script Prerequisites StudioCMS=0.1.1 pip install requests colorama Quick Start...
CVE-2026-50539
Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing object-level authorization on /notification/export/id allows an authenticated user to download attachments from any notification, including notificatio...
CVE-2026-72001-Pangolin-Cross-Org-Auth-Bypass
CVE-2026-72001 — Pangolin Cross-Organization Resource Authentication Bypass Proof-of-concept for CVE-2026-72001 , a broken-object-level-authorization flaw in Pangolin 1.22.0 that lets the holder of one resource share link mint a valid resource session for any other resource on the instance...
EUVD-2026-112139
Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing object-level authorization on /notification/export/id allows an authenticated user to download attachments from any notification, including notificatio...
CVE-2026-50539 Xibo: Missing Object-Level Authorization on /notification/export/{id} Allows Authenticated Users to Download Arbitrary Attachments
Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing object-level authorization on /notification/export/id allows an authenticated user to download attachments from any notification, including notificatio...
CVE-2026-50539 Xibo: Missing Object-Level Authorization on /notification/export/{id} Allows Authenticated Users to Download Arbitrary Attachments
Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing object-level authorization on /notification/export/id allows an authenticated user to download attachments from any notification, including notificatio...
CVE-2026-50539
The Xibo digital signage platform (prior to version 4.4.3 ) is vulnerable to missing object-level authorization on the /notification/export/{id} endpoint. This flaw allows an authenticated user to download attachments from any notification, including those created by administrators, by iterating ...
PT-2026-128267
Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing object-level authorization on /notification/export/id allows an authenticated user to download attachments from any notification, including notificatio...
CVE-2026-35045-PoC
CVE-2026-35045 — Broken Object-Level Authorization in Tandoor Recipes Summary The PUT /api/recipe/batchupdate/ endpoint in Tandoor Recipes v2.6.1 allows any authenticated user within a Space to modify any recipe in that Space — including private recipes owned by other users. This completely...
CVE-2026-114741
The WPVR WordPress plugin before 9.0.3 does not perform object-level authorization checks when reading and updating virtual tours, allowing users with contributor-level access and above to read and modify tours created by other users...
EUVD-2026-109348
The WPVR WordPress plugin before 9.0.3 does not perform object-level authorization checks when reading and updating virtual tours, allowing users with contributor-level access and above to read and modify tours created by other users...
PT-2026-122946
The WPVR WordPress plugin before 9.0.3 does not perform object-level authorization checks when reading and updating virtual tours, allowing users with contributor-level access and above to read and modify tours created by other users...
ApostropheCMS: Authenticated Object-Level Authorization Bypass In Exist-in-locale Reveals Restricted Localized Draft Ide
Summary ApostropheCMS’s exist-in-locale API allows an authenticated low-privilege user to determine whether restricted documents exist in a specified locale and mode, including draft mode. The endpoint returns localized document identifiers without applying document-level view or edit authorizati...
GHSA-VMXH-77CW-65J7 ApostropheCMS: Authenticated Object-Level Authorization Bypass in exist-in-locale Reveals Restricted Localized Draft Identifiers
Summary ApostropheCMS’s exist-in-locale API allows an authenticated low-privilege user to determine whether restricted documents exist in a specified locale and mode, including draft mode. The endpoint returns localized document identifiers without applying document-level view or edit authorizati...
ApostropheCMS: Authenticated Object-Level Authorization Bypass in exist-in-locale Reveals Restricted Localized Draft Identifiers
Summary ApostropheCMS’s exist-in-locale API allows an authenticated low-privilege user to determine whether restricted documents exist in a specified locale and mode, including draft mode. The endpoint returns localized document identifiers without applying document-level view or edit authorizati...
npm: ApostropheCMS: Authenticated Object-Level Authorization Bypass in exist-in-locale Reveals Restricted Localized Draft Identifiers
npm: ApostropheCMS: Authenticated Object-Level Authorization Bypass in exist-in-locale Reveals Restricted Localized Draft Identifiers vulnerability discovered by ? in WordPress npm apostrophe versions 4.33.0...
CVE-2026-112287
Krayin CRM before 2.2.7 contains a broken object level authorization vulnerability in EmailController write actions that allows scope-restricted authenticated users to manipulate other users' emails by supplying their numeric IDs. Attackers can call update, destroy, mass-update or mass-destroy...
CVE-2026-112287 Krayin CRM before 2.2.7 Broken Object Level Authorization in Mail Module
Krayin CRM before 2.2.7 contains a broken object level authorization vulnerability in EmailController write actions that allows scope-restricted authenticated users to manipulate other users' emails by supplying their numeric IDs. Attackers can call update, destroy, mass-update or mass-destroy...