CVE-2026-82879: Incorrect Authorization

DataEase before 2.10.26 contains multiple access control defects in the sharing link module. Tickets are not bound to the target share UUID, so a valid ticket issued for one share can be reused against another ShareTicketManage.validateTicket / POST /de2api/share/proxyInfo. The POST...

Solaris File System DoS

The vulnerability of the Solaris operating system’s file system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause a service failure...

Azure Site Recovery VMWare Privilege Escalation

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

Windows Remote Process Execution Privilege Escalation

The vulnerability of the execution environment for remote process calls in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Oracle MySQL Server DoS

The vulnerability of the Server component, specifically Security: Audit of the Oracle MySQL Server database management system, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...

Oracle WebLogic Server Unauthorized Access

The vulnerability of the WLS Core Components component of Oracle WebLogic Server applications is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...

Portable Clusterware Oracle Database Server Full Control

The vulnerability of the Portable Clusterware component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...