348221 matches found
CVE-2026-108740: Improperly Controlled Modification of Dynamically-Determined Object Attributes
GoatCounter through 2.7.0 contains a mass assignment privilege escalation vulnerability in the userPrefSave handler that allows logged-in users to modify protected account fields via form-encoded requests. Attackers with read-only access can POST user.accessall= and user.emailverified=true to...
PT-2026-110049
Name of the Vulnerable Software and Affected Versions Disable Users versions prior to 1.0.6 Description The Disable Users WordPress plugin fails to enforce account-disabling controls across all authentication paths. This allows users of accounts that have been disabled by an administrator to bypa...
CVE-2026-19576: Out-of-bounds Write
The Goodix GT9xx input driver in drivers/input/inputgt911.c reads the touch point count from the controller's status register and masks it with GT911TOUCHPOINTSMSK 0x0F, yielding a value of 0..15. In gt911process that value is used directly as the loop bound for filling pointreg, a stack array...
PT-2026-110039
Name of the Vulnerable Software and Affected Versions Crowdfundly WordPress plugin versions prior to 2.2.3 Description Insufficient capability checks on certain AJAX actions allow users with low-privileged roles to grant themselves the administrator role or arbitrary capabilities, which can resul...
AlmaLinux 9.2 [TuxCare] Security Update: flatpak / flatpak-devel / flatpak-libs / flatpak-selinux / etc (ALMALINUX9.2:CLSA-2026:1791735799)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791735799 advisory. - In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivileged callers,...
PT-2026-110009
Name of the Vulnerable Software and Affected Versions Mobile builder WordPress plugin versions prior to 1.4.3 Description An issue exists where the plugin fails to properly restrict the user meta keys that a logged-in user can update via a REST route. This allows any user with a self-registered...
PT-2026-110148
Name of the Vulnerable Software and Affected Versions Vearch versions 3.5.2 through 3.5.9 Description An incorrect authorization issue exists in the HasPermissionForResources function. This flaw allows the system to ignore stored ReadOnly or None privilege levels for resources assigned to a role...
CVE-2026-108746: Incorrect Authorization
Vearch 3.5.2 through 3.5.9 contains an incorrect authorization vulnerability in Role.HasPermissionForResources that ignores stored ReadOnly or None privilege levels for resources listed in a role. Authenticated non-root users can upsert and delete documents with read-only access, or call PUT /rol...
CVE-2026-103694: Improper Privilege Management
The Mobile builder WordPress plugin through 1.4.2 does not properly restrict which user meta keys a logged-in user can update through one of its REST routes, allowing any user with a self-registered account, such as a customer, to grant themselves the administrator role...
CVE-2026-104680: Improper Privilege Management
The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user holds the capability WordPress reserves for installing Envira Gallery WordPress plugin before 1.16.2 code before processing its setup-wizard Envira Gallery WordPress plugin before 1.16.2-installation request, and does n...
CVE-2026-85118: Improper Privilege Management
The AI Content Generator Marketing WordPress plugin through 1.0.0 does not enforce a nonce or capability check on some of its AJAX actions, allowing unauthenticated users to update and delete arbitrary WordPress options, which can be used to gain administrator access to the site...
CVE-2026-108708: Missing Authorization
WukongHRM through commit 186115e contains a missing authorization vulnerability because EmployeeAspect assigns every caller the HR administrator role and EmployeeUtil data-scope checks return all employees. Any authenticated low-privileged employee can read payslips, salary records, bank cards an...
CVE-2026-108628
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDeptRolePermission endpoint of SysDepartPermissionController that allows any authenticated user to modify department role permissions. Low-privileged attackers can submit roleId and permissionIds values to grant...
CVE-2026-108628 JeecgBoot through 3.9.5 Missing Authorization via saveDeptRolePermission Endpoint
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDeptRolePermission endpoint of SysDepartPermissionController that allows any authenticated user to modify department role permissions. Low-privileged attackers can submit roleId and permissionIds values to grant...
CVE-2026-108628
Versions of JeecgBoot through 3.9.5 are vulnerable to a missing authorization flaw in the saveDeptRolePermission endpoint of the SysDepartPermissionController. This vulnerability allows any authenticated user to modify department role permissions by submitting roleId and permissionIds values. Con...
CVE-2026-108628 JeecgBoot through 3.9.5 Missing Authorization via saveDeptRolePermission Endpoint
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDeptRolePermission endpoint of SysDepartPermissionController that allows any authenticated user to modify department role permissions. Low-privileged attackers can submit roleId and permissionIds values to grant...
CVE-2026-98280
A flaw was found in the Linux kernel's Intel Xe graphics driver. During device unbinding, internal driver structures are freed before interrupt requests IRQs are disabled. If an interrupt occurs during this timing window, it can trigger a use-after-free condition where the system accesses already...
CVE-2026-98276
A flaw was found in the Linux kernel's networking subsystem. A local attacker can exploit a race condition during concurrent socket operations, such as retrieving timestamps while binding a network socket, because socket flags are modified without proper locking. This issue causes socket memory t...