Doctor Near Telemedicine Premium Authentication Bypass

The vulnerability of the “Doctor Near. Telemedicine Premium” platform relates to bypassing authentication using a user-controlled key. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

QAFA Firmware Authentication Bypass

The vulnerability of the QAFA Firmware for telecommunications equipment relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the administrative web console...

EUVD-2026-125291

Authorization Bypass Through User-Controlled Key vulnerability in Tobias WebinarIgnition webinar-ignition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebinarIgnition: from n/a through 4.27.125...

CVE-2026-105880 WordPress WebinarIgnition plugin <= 4.27.125 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Tobias WebinarIgnition webinar-ignition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebinarIgnition: from n/a through 4.27.125...

CVE-2026-18315-PoC

CVE-2026-18315-PoC Proof-of-concept for CVE-2026-18315 TrueBooker = 1.2.6 WordPress Plugin: Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover...

PT-2026-146832

Authorization Bypass Through User-Controlled Key vulnerability in Tobias WebinarIgnition webinar-ignition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebinarIgnition: from n/a through 4.27.125...

CVE-2026-126183: Fortinet: A authorization bypass through user-controlled key vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1,…

A authorization bypass through user-controlled key vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Clo...

Fortinet FortiManager Authorization bypass through user-controlled key in dmserver (FG-IR-26-244)

The version of FortiManager installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-244 advisory. - A authorization bypass through user-controlled key vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1,...

Fortinet FortiAnalyzer Authorization bypass through user-controlled key in dmserver (FG-IR-26-244)

The version of FortiAnalyzer installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-244 advisory. - A authorization bypass through user-controlled key vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1,...

CVE-2026-126156: Fortinet FortiMail: A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail…

A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated remote attacker to take over an arbitrary IBE recipient account via...

Fortinet FortiManager Authorization bypass through user-controlled key (FG-IR-26-235)

The version of FortiManager installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-235 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

Microsoft MCP Gateway Elevation of Privilege Vulnerability

Authorization bypass through user-controlled key in Microsoft MCP Gateway allows an authorized attacker to elevate privileges over a network...

PT-2026-144871

Name of the Vulnerable Software and Affected Versions FortiMail versions 8.0.0 through 8.0.1 FortiMail versions 7.6.0 through 7.6.6 FortiMail versions 7.4.0 through 7.4.8 FortiMail version 7.2 all versions Description An authorization bypass exists due to a user-controlled key, which allows an...

PT-2026-144894

Name of the Vulnerable Software and Affected Versions FortiAnalyzer versions 8.0.0 through 8.0.1 FortiAnalyzer versions 7.6.0 through 7.6.7 FortiAnalyzer versions 7.4.0 through 7.4.11 FortiAnalyzer version 7.2 FortiAnalyzer Cloud version 8.0.1 FortiAnalyzer Cloud versions 7.6.0 through 7.6.7...

Fortinet FortiManager Authorization bypass through user-controlled key in GUI (FG-IR-26-228)

The version of FortiManager installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-228 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

CVE-2026-123861

Authorization Bypass Through User-Controlled Key vulnerability in CrocoBlock JetFormBuilder – Hierarchical Select jet-form-builder-hierarchical-select allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetFormBuilder – Hierarchical Select: from n/a through...

EUVD-2026-119251

Authorization Bypass Through User-Controlled Key vulnerability in CrocoBlock JetFormBuilder – Hierarchical Select jet-form-builder-hierarchical-select allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetFormBuilder – Hierarchical Select: from n/a through...

CLEANSTART-2025-WF95244 Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3

Security vulnerability affects the gitlab-runner-fips package. Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3...

WordPress YITH WooCommerce Product Add-Ons authorization issue vulnerability

WordPress YITH WooCommerce Product Add-Ons versions 4.34.0 and earlier contain an authorization issue vulnerability. This vulnerability arises because unauthenticated attackers can bypass authorization using a user-controlled key...

EUVD-2026-110854

Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects EdoWEB: before 780-g7...