167981 matches found
CVE-2026-78372
RansomLook is a ransomware group monitoring platform that fails to consistently enforce authorization checks when accessing groups, markets, and ransom notes marked as private. An unauthenticated remote attacker can access information associated with private entities through several web views and...
CVE-2026-78370
CVE-2026-78370 is a CRITICAL (CVSS 4.0: 9.2) authorization flaw in RansomLook , a ransomware intelligence platform. The legacy /export/ endpoint allowed unauthenticated remote users to export internal databases without consistently enforcing private-entity access restrictions, potentially disclos...
EUVD-2026-64840
HCL Hive is affected by a broken access control vulnerability which could allow an attacker or unauthorized user to introduce unverified, malicious, or broken code directly into production environments...
CVE-2026-21756
HCL Hive is affected by a broken access control vulnerability that could allow an authenticated or unauthorized user to introduce unverified, malicious, or broken code directly into production environments . The CVSS 3.1 score is 7.2 (HIGH) , with a vector requiring high privileges (PR:H), networ...
CVE-2026-21756 HCL Hive is affected by a broken access control vulnerability
HCL Hive is affected by a broken access control vulnerability which could allow an attacker or unauthorized user to introduce unverified, malicious, or broken code directly into production environments...
CVE-2026-78291
Unauthenticated Broken Access Control in RepairBuddy = 4.1223 versions...
CVE-2026-78272
Subscriber Broken Access Control in Fluent Support Pro = 2.3.1 versions...
CVE-2026-78258
Unauthenticated Broken Access Control in Booking and Rental Manager = 2.7.5 versions...
CVE-2026-28190
Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...
CVE-2026-28153
Unauthenticated Broken Access Control in Notification Master Real-Time WordPress Notifications With Email, SMS, Webhooks & More = 1.7.1 versions...
EUVD-2026-64798
Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...
CVE-2026-28190
CVE-2026-28190 is a Broken Access Control vulnerability in the ProLancer Element WordPress plugin, affecting versions 1.4.8 and earlier . The flaw allows users with the Subscriber role to perform actions beyond their intended privilege level, resulting in primarily integrity impact and minor avai...
CVE-2026-28190 WordPress ProLancer Element plugin <= 1.4.8 - Broken Access Control vulnerability
Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...
CVE-2026-28153 WordPress Notification Master – Real-Time WordPress Notifications With Email, SMS, Webhooks & More plugin <= 1.7.1 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Notification Master Real-Time WordPress Notifications With Email, SMS, Webhooks & More = 1.7.1 versions...
EUVD-2026-64792
Unauthenticated Broken Access Control in Notification Master Real-Time WordPress Notifications With Email, SMS, Webhooks & More = 1.7.1 versions...
CVE-2026-28153
Notification Master – Real-Time WordPress Notifications With Email, SMS, Webhooks & More plugin (versions
CVE-2026-78272
CVE-2026-78272 is a Subscriber Broken Access Control vulnerability in the Fluent Support Pro WordPress plugin, affecting versions
CVE-2026-78272 WordPress Fluent Support Pro plugin <= 2.3.1 - Broken Access Control vulnerability
Subscriber Broken Access Control in Fluent Support Pro = 2.3.1 versions...