EUVD-2026-81086

Tanium addressed an improper access controls vulnerability in Threat Response...

CVE-2026-87026 Tanium addressed an improper access controls vulnerability in Threat Response.

Tanium addressed an improper access controls vulnerability in Threat Response...

CVE-2026-87113

Tanium Threat Response contains an improper access controls vulnerability, assigned a CVSS v3.1 score of 6.3 (MEDIUM) with a network-based attack vector requiring only low privileges and no user interaction. The flaw impacts confidentiality, integrity, and availability at a low level each, with u...

CVE-2026-87113 Tanium addressed an improper access controls vulnerability in Threat Response.

Tanium addressed an improper access controls vulnerability in Threat Response...

EUVD-2026-81085

Tanium addressed an improper access controls vulnerability in Threat Response...

CVE-2026-87113 Tanium addressed an improper access controls vulnerability in Threat Response.

Tanium addressed an improper access controls vulnerability in Threat Response...

CVE-2026-87113: Authorization Bypass Through User-Controlled Key

Tanium addressed an improper access controls vulnerability in Threat Response...

CVE-2026-87026: Missing Authorization

Tanium addressed an improper access controls vulnerability in Threat Response...

PT-2026-93939

Tanium addressed an improper access controls vulnerability in Threat Response...

CVE-2026-20121: Improper Access Control

A vulnerability in the access control list ACL Object Group Search OGS implementation of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured access controls. This...

PT-2026-93936

Tanium addressed an improper access controls vulnerability in Threat Response...

CVE-2026-90565 Rizwan17 inventory-management-system dashboard.php access control

A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is an unknown function of the file dashboard.php. Performing a manipulation of the argument userid results in improper access controls. It is possible to initiate t...

EUVD-2026-77039

A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is an unknown function of the file dashboard.php. Performing a manipulation of the argument userid results in improper access controls. It is possible to initiate t...

EUVD-2026-76980

A vulnerability was identified in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. Affected is the function getsurgesubscription of the file services/subscription.py of the component Subscription Handler. Such manipulation of the argument key leads to improper access...

CVE-2026-90493

A vulnerability was detected in Tonec Internet Download Manager up to 6.42 Build 63 on Windows. The impacted element is an unknown function of the file idmwfp.sys of the component Kernel Driver. The manipulation results in improper access controls. Attacking locally is a requirement. Internet...

CVE-2026-90493 Tonec Internet Download Manager Kernel Driver idmwfp.sys access control

A vulnerability was detected in Tonec Internet Download Manager up to 6.42 Build 63 on Windows. The impacted element is an unknown function of the file idmwfp.sys of the component Kernel Driver. The manipulation results in improper access controls. Attacking locally is a requirement. Internet...

PT-2026-90783

Name of the Vulnerable Software and Affected Versions Tonec Internet Download Manager versions prior to 6.42 Build 64 Description An improper access control issue exists in the idmwfp.sys kernel driver of Tonec Internet Download Manager on Windows. The driver exposes the .IDMWFP device interface ...

PT-2026-90870

A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is an unknown function of the file dashboard.php. Performing a manipulation of the argument userid results in improper access controls. It is possible to initiate t...

CVE-2026-90546: Missing Authorization

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate video access permissions in the like.json.php endpoint, allowing logged-in users to record likes on password-protected and group-restricted videos. Attackers can submit like requests for videos they cannot watch...

HP Support Assistant < 9.53.2.0 Potential Escalation of Privilege (HPSBGN04131)

The version of HP Support Assistant installed on the remote Windows host is prior to 9.53.2.0. It is, therefore, affected by a privilege escalation vulnerability as referenced in the HPSBGN04131 advisory: - A potential security vulnerability has been identified in the HP Support Assistant for...