Lucene search
+L

377 matches found

attackerkb
attackerkb
added 2026/07/22 7:17 p.m.12 views

CVE-2026-13065

A user with read-only privileges is able to craft an aggregation pipeline using the $linearFill window function operator with a specific sortBy expression type to cause the mongod process to terminate abnormally, resulting in denial of service. The issue stems from insufficient validation of sort...

7.1CVSS5.3AI score0.00497EPSS
SaveExploits0References2Affected Software1
MongoDB
MongoDB
added 2026/07/22 7:13 p.m.15 views

MongoDB Aggregation Command Invariant Assertion Failure Leading to Process Termination

An authenticated user with read-only privileges can cause the mongod process to terminate abnormally by issuing a crafted aggregation command, resulting in denial of service for all connected clients until the process is restarted. The issue stems from an internal engine selection inconsistency...

5.3CVSS5.3AI score0.00217EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2026/07/22 1:53 p.m.152 views

CVE-2026-62145

CVE-2026-62145 affects Check Point Gaia Portal. An authenticated user with read-only Gaia Portal privileges can escalate to root privileges by executing commands, with CVSS 3.1: AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H (base score 7.5). Impact is high (confidentiality, integrity, availability). Exploi...

7.5CVSS5.6AI score0.07614EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
added 2026/07/22 12:00 a.m.2 views

CVE-2026-62145: Improper Privilege Management

A vulnerability in Check Point Gaia Portal allows an authenticated attacker with read-only Gaia Portal privileges to execute commands with root privileges...

7.5CVSS0.07614EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/21 12:00 a.m.31 views

PT-2026-62094

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description Improper Access Control allows a low-privileged authenticated user with read-only Security Solution access to perform write operations on Entity Analytics Watchlist configuration, which should...

5.4CVSS5.9AI score0.00238EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/07/17 7:05 p.m.14 views

EUVD-2026-45271

Amazon Athena is a serverless, interactive query service that lets you analyze data directly in Amazon S3 using standard SQL. Athena Query Federation is a feature that allows you to connect to data sources outside of Amazon S3 like DynamoDB, Azure Synapse, and custom connectors using standard SQL...

6.8CVSS6AI score0.0059EPSS
SaveExploits0References3
CheckPoint Security
CheckPoint Security
added 2026/07/14 12:00 a.m.21 views

CVE-2026-62145 - Local privilege escalation in Gaia Portal

Symptoms - A vulnerability in Gaia Portal allows an authenticated attacker with read-only access to run commands as root. - Affected Products and Versions: Versions: R77.30, R80, R80.10, R80.20, R80.30, R81 R81.10, R81.20, R82, R82.10 Products: Security Gateway, Security Management Note: Check...

7.5CVSS5.5AI score0.07614EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.22 views

PT-2026-58087

An authorization bypass in Nexus Repository 3's component upload API allowed a user with only read/browse privileges on a Swift, Terraform, or Conda hosted repository to upload arbitrary artifacts, bypassing the intended write-permission check...

8.2CVSS6.2AI score0.00329EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/07/08 1:49 p.m.12 views

CVE-2026-56778 n8n - Authorization Bypass in Public API Execution Retry Endpoint

n8n before 2.25.7 and 2.26.x before 2.26.2 contains an authorization bypass in the Public API execution retry endpoint, which authorizes access using the workflow:read scope instead of workflow:execute. An authenticated user with read-only access to a shared workflow can use the Public API to ret...

6.4CVSS6.1AI score0.00295EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/08 1:49 p.m.73 views

CVE-2026-56778

CVE-2026-56778 (n8n) : Affected versions are n8n before 2.25.7 and 2.26.x before 2.26.2. The Public API execution retry endpoint authorizes with the workflow:read scope instead of workflow:execute, allowing an authenticated user with read-only access to a shared workflow to retry executions, bypa...

6.4CVSS6.1AI score0.00295EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/07/08 1:49 p.m.26 views

CVE-2026-56778 n8n - Authorization Bypass in Public API Execution Retry Endpoint

n8n before 2.25.7 and 2.26.x before 2.26.2 contains an authorization bypass in the Public API execution retry endpoint, which authorizes access using the workflow:read scope instead of workflow:execute. An authenticated user with read-only access to a shared workflow can use the Public API to ret...

5.3CVSS6.2AI score
SaveExploits0References4
CVE
CVE
added 2026/07/08 1:49 p.m.51 views

CVE-2026-56776

CVE-2026-56776 affects n8n versions prior to 1.123.55, 2.25.7, and 2.26.2. The issue is an authorization bypass in POST /workflows/{workflowId}/test-runs/new where access is granted using workflow:read instead of workflow:execute, enabling an authenticated user with read-only access to trigger a ...

7.4CVSS6.1AI score0.00276EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/07/08 1:49 p.m.36 views

EUVD-2026-42263

n8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization bypass in the POST /workflows/workflowId/test-runs/new endpoint, which authorizes access using the workflow:read scope instead of workflow:execute. An authenticated user with read-only access to a workflow can trigger a real...

7.4CVSS6.1AI score0.00276EPSS
SaveExploits0References2
attackerkb
attackerkb
added 2026/07/08 1:49 p.m.11 views

CVE-2026-56776

n8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization bypass in the POST /workflows/workflowId/test-runs/new endpoint, which authorizes access using the workflow:read scope instead of workflow:execute. An authenticated user with read-only access to a workflow can trigger a real...

7.4CVSS6.1AI score0.00276EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/07/08 1:49 p.m.13 views

CVE-2026-56776 n8n - Incorrect OAuth Scope Validation in Workflow Test Run Endpoint

n8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization bypass in the POST /workflows/workflowId/test-runs/new endpoint, which authorizes access using the workflow:read scope instead of workflow:execute. An authenticated user with read-only access to a workflow can trigger a real...

7.4CVSS6.1AI score0.00276EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/08 1:48 p.m.13 views

EUVD-2026-42247

Capgo before 12.128.2 contains an authorization bypass vulnerability in the public.manifest INSERT policy that allows read-only org members to insert OTA manifest rows. Attackers with read-only org access can inject malicious manifest entries with arbitrary s3path values that are served to device...

7.1CVSS6AI score0.00348EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/08 1:30 p.m.27 views

CVE-2026-60124

The CVE-2026-60124 in MISP concerns an authorization bypass in EventsController::importModule(). When an import module returns results in the misp_standard format, the write path failed to verify event modification rights, allowing authenticated users or read-only API keys with event view access ...

5.3CVSS6AI score0.00372EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/07/08 12:00 a.m.25 views

PT-2026-56443

n8n before 2.25.7 and 2.26.x before 2.26.2 contains an authorization bypass in the Public API execution retry endpoint, which authorizes access using the workflow:read scope instead of workflow:execute. An authenticated user with read-only access to a shared workflow can use the Public API to ret...

6.4CVSS6.1AI score0.00295EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/07 3:16 p.m.26 views

CVE-2026-59709

Ghostfolio's PUT /api/v1/portfolio/holding/:dataSource/:symbol/tags endpoint fails to verify Access.permissions field when processing the Impersonation-Id header, allowing read-only access grantees to modify portfolio holding tags. Attackers with valid read-only share tokens can assign or remove...

5.3CVSS0.00243EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/07/07 2:12 p.m.22 views

EUVD-2026-42046

Ghostfolio's PUT /api/v1/portfolio/holding/:dataSource/:symbol/tags endpoint fails to verify Access.permissions field when processing the Impersonation-Id header, allowing read-only access grantees to modify portfolio holding tags. Attackers with valid read-only share tokens can assign or remove...

5.3CVSS6AI score0.00243EPSS
SaveExploits0References4
Rows per page
Query Builder