LiteLLM - Arbitrary File Read

LiteLLM 1.83.0 contains a broken access control vulnerability caused by lack of admin role enforcement on /config/update endpoint, letting authenticated users modify configurations, execute code, read files, and take over accounts. id: CVE-2026-35029 info: name: LiteLLM - Arbitrary File Read...

CVE-2026-47102-PoC

CVE-2026-47102 — LiteLLM Privilege Escalation via /user/update LiteLLM v1.83.7 versions before v1.83.10 /user/update endpoint allows low-privileged users with access to this endpoint to modify their own userrole field to proxyadmin when updating their account, achieving unauthorized privilege...

CVE-2026-35029-PoC

CVE-2026-35029 — LiteLLM /config/update Broken Access Control LiteLLM 's /config/update endpoint does not check the caller's role privileges. Any authenticated user with a valid API Key without admin privileges can modify the proxy configuration, register malicious Pass-Through endpoints to achie...

CVE-2026-123295

In JetBrains Hub before 2026.2.52519 enforced two-factor authentication could be disabled via the profile update endpoint...

EUVD-2026-118060

In JetBrains Hub before 2026.2.52519 enforced two-factor authentication could be disabled via the profile update endpoint...

CVE-2026-123295

In JetBrains Hub before 2026.2.52519 enforced two-factor authentication could be disabled via the profile update endpoint...

CVE-2026-123295

In JetBrains Hub versions prior to 2026.2.52519 , an incorrect authorization vulnerability (CWE-863) allows an attacker to disable enforced two-factor authentication via the profile update endpoint . This flaw permits unauthorized modification of security settings, potentially leading to a compro...

CVE-2026-123295: JetBrains Hub: In JetBrains Hub before 2026.2.52519 enforced two-factor authentication could be disabled via the profile update…

In JetBrains Hub before 2026.2.52519 enforced two-factor authentication could be disabled via the profile update endpoint...

CVE-2026-114271

Authorization Bypass Through User-Controlled Key in the shopping list services in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an authenticated low-privileged user, such as a self-registered ecommerce customer, to modify another party's shopping list or take ownership of it, and...

CVE-2026-114271

Apache OFBiz versions 24.09 before 24.09.08 are vulnerable to an authorization bypass in the shopping list services. An authenticated low-privileged user, such as a self-registered ecommerce customer, can exploit user-controlled keys to modify or take ownership of another party's shopping list. B...

CVE-2026-114271 Apache OFBiz: Authorization Bypass Through User-Controlled Key in Shopping Lists Enables Cross-Party Shopping List Modification

Authorization Bypass Through User-Controlled Key in the shopping list services in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an authenticated low-privileged user, such as a self-registered ecommerce customer, to modify another party's shopping list or take ownership of it, and...

CVE-2026-120448 DoraCMS through 3.1.0 Mass Assignment via API Key Update Endpoint

DoraCMS through 3.1.0 contains a mass assignment vulnerability in the PUT /api/v1/user/api-keys/:id endpoint that allows authenticated low-privileged users to rebind their API key to another user's account. Attackers can set the userId field on their own key to a victim's id, then act as that...

CVE-2026-107711

The FlexStock – Product Stock Sync with Google Sheets for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 3.17.2 . The flaw exists in the products[].post_content parameter due to insufficient input sanitization and output escapin...

CVE-2026-107711 FlexStock <= 3.17.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_content' Parameter via REST update endpoint

The FlexStock – Product Stock Sync with Google Sheets for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'products.postcontent' parameter in all versions up to, and including, 3.17.2 due to insufficient input sanitization and output escaping. This makes it...

CVE-2026-107711 FlexStock <= 3.17.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_content' Parameter via REST update endpoint

The FlexStock – Product Stock Sync with Google Sheets for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'products.postcontent' parameter in all versions up to, and including, 3.17.2 due to insufficient input sanitization and output escaping. This makes it...

Millions of security cameras at risk: DoS vulnerability in Intelbras devices

Background Network-connected surveillance cameras are now widespread in both home and enterprise environments, so securing them is essential to safeguarding physical spaces and sensitive assets. As these devices continue to gain new features and network connectivity capabilities, vulnerabilities ...

Hitachi Energy RTU500 Missing Authentication for Critical Function (CVE-2026-8065)

An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 allows an unauthenticated attacker to upload arbitrary firmware through a crafted POST request. Successful exploitation could allow the attacker to modify device functionality or compromise the integri...

CVE-2026-110121 PickMall lilishop through 4.4 IDOR via Goods Edit Endpoint

PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that allows authenticated sellers to overwrite any store's product by supplying another store's goodsId to the goods update endpoint. Attackers can send PUT requests to /store/goods/goods/update/goodsId to...

CVE-2026-110121 PickMall lilishop through 4.4 IDOR via Goods Edit Endpoint

PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that allows authenticated sellers to overwrite any store's product by supplying another store's goodsId to the goods update endpoint. Attackers can send PUT requests to /store/goods/goods/update/goodsId to...

EUVD-2026-98952

PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that allows authenticated sellers to overwrite any store's product by supplying another store's goodsId to the goods update endpoint. Attackers can send PUT requests to /store/goods/goods/update/goodsId to...