CVE-2026-14310

The Tutor LMS WordPress plugin before 4.0.0 does not properly verify that a user has access to the course a Q&A thread belongs to before returning or writing to that thread, allowing authenticated users with subscriber-level access and above who can access any single course to read the Q&A thread...

Telegram Authorization Issues Vulnerabilities

Telegram is an instant messaging mobile application. An authorization issue vulnerability exists in versions 5.12 and earlier of Telegram, based on the Android platform, which can be exploited by attackers to bypass message read and reply restrictions...