CVE-2026-66422

Apache Tomcat is susceptible to an improper authorization vulnerability where security-role-ref definitions are incorrectly utilized as role aliases within the Realm, alongside their intended use with Request.isUserInRole() . This flaw affects versions 11.0.0-M1 through 11.0.24 , 10.1.0-M1 throug...

CVE-2026-66422 Apache Tomcat: Servlet role references can bypass declarative role constraints

Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 throu...

CVE-2026-66422 Apache Tomcat: Servlet role references can bypass declarative role constraints

Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 throu...

GO-2026-6280 Mattermost doesn't require role-management authorization when setting the scheme_admin flag on group syncable link and patch endpoints in github.com/mattermost/mattermost-server

Mattermost doesn't require role-management authorization when setting the schemeadmin flag on group syncable link and patch endpoints in github.com/mattermost/mattermost-server...

WordPress MetForm plugin <= 4.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mf_form_id' Widget Setting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'mfformid' Widget Setting vulnerability discovered by Jonah Burgess CryptoCat in WordPress Plugin Metform versions = 4.1.8...

WordPress Newsletters plugin <= 4.17 - Authenticated (Author+) Arbitrary Modification via 'newsletters_mailinglistsroles' POST Parameter vulnerability

Authenticated Author+ Arbitrary Modification via 'newslettersmailinglistsroles' POST Parameter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Newsletters versions = 4.17...

WordPress Insert or Embed Articulate Content into WordPress plugin <= 4.3000000027 - Editor+ Arbitrary File Upload vulnerability

Editor+ Arbitrary File Upload vulnerability discovered by Yaswanth Reddy Sunkara in WordPress Plugin Insert or Embed Articulate Content into WordPress versions = 4.3000000027...

BIT-KEYCLOAK-2026-14613 Keycloak-services: keycloak-services: keycloak: fgap v2 role groups endpoint discloses hidden group metadata without group view permission

A vulnerability was discovered in Keycloak's administrative interface that allows certain administrators to see information about groups they shouldn't have access to. When the new Fine-Grained Admin Permissions FGAP v2 are turned on, an administrator who is allowed to see a specific "role" can...

BIT-KEYCLOAK-2026-4636 Keycloak: keycloak: uma policy bypass allows authenticated users to gain unauthorized access to victim-owned resources.

A flaw was found in Keycloak. An authenticated user with the umaprotection role can bypass User-Managed Access UMA policy validation. This allows the attacker to include resource identifiers owned by other users in a policy creation request, even if the URL path specifies an attacker-owned...

BIT-KEYCLOAK-2026-3911 Org.keycloak.services.resources.admin.userresource: keycloak: information disclosure of disabled user attributes via administrative endpoint

A flaw was found in Keycloak. An authenticated user with the view-users role could exploit a vulnerability in the UserResource component. By accessing a specific administrative endpoint, this user could improperly retrieve user attributes that were configured to be hidden. This unauthorized...

BIT-KEYCLOAK-2026-37978 Keycloak: org.keycloak.services: keycloak: information disclosure via evaluate-scopes admin api

A flaw was found in Keycloak. A low-privilege administrator with the 'view-clients' role can exploit this by invoking the 'evaluate-scopes' Admin API endpoints with an arbitrary user ID userId parameter. This vulnerability allows for cross-role personally identifiable information PII leakage,...

BIT-KEYCLOAK-2026-16102 Keycloak-services: keycloak-services: default dcr policy allows role forgery via user property mappers

A flaw was found in the Dynamic Client Registration DCR component of Keycloak, an identity and access management solution. The default DCR policy fails to properly validate the claim path for User Property mappers, allowing them to write values to sensitive internal claim locations. An attacker...

BIT-KEYCLOAK-2026-11986 Keycloak-rest-admin-ui-ext: authorization bypass vulnerability in the admin-ui-ext bulk role-mapping-delete endpoints of keycloak

A flaw was found in the admin-ui-ext component of Keycloak, which provides extended administrative user interface capabilities. The issue occurs because certain bulk role-removal endpoints fail to perform granular permission checks when deleting role mappings. This allows a delegated administrato...

WordPress Advanced Form Integration plugin < 2.1.1 - Unauthenticated Privilege Escalation via Breakdance Form Role Mapping vulnerability

Unauthenticated Privilege Escalation via Breakdance Form Role Mapping vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin Advanced Form Integration versions 2.1.1...

CVE-2026-77144

The frontend management plugin attributed a newly created event to the submitting user's organizer record only when the request supplied no organizer of its own. The accompanying permission check confirmed only that the submitting user held any organizer role. A user with frontend event managemen...

Improper Authorization

keycloak-services is vulnerable to an improper authorization. The vulnerability is due to insufficient permission checks when a restricted administrator lists users assigned to a role, which allows an attacker with limited administrative privileges to exploit the role-users endpoint and access...

WordPress Events Manager – Calendar, Bookings, Tickets, and more! plugin <= 7.4.0 - Authenticated (Contributor+) SQL Injection vulnerability

Authenticated Contributor+ SQL Injection vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Events Manager versions = 7.4.0...

EUVD-2026-65173

Subscriber Broken Access Control in AutomatorWP = 5.8.3 versions...

PT-2026-81244

Name of the Vulnerable Software and Affected Versions Events 2 affected versions not specified Description The frontend management plugin contains a broken access control issue. The system attributes a newly created event to the submitting user's organizer record only if the request does not...

JetBrains TeamCity < 2019.2 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2019.2. It is, therefore, affected by multiple vulnerabilities: - JetBrains TeamCity before 2019.2 was vulnerable to a stored XSS attack by a user with the developer role. CVE-2020-7910 - In JetBrains TeamCity before 2019....