Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, and Apple visionOS versions prior to 27.2. This vulnerability stems from an out-of-bounds write operation and may lead to unintended terminatio...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS versions prior to Golden Gate 27.2, macOS Sequoia prior to 15.8.2, and macOS Tahoe prior to 26.7.2. This vulnerability stems from insufficient sandbox restrictions, leading to access control issues that may allow applications to access sensitive user...

VulnCheck KEV: CVE-2026-81543

The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 10.7.1. This is due to missing capability checks and nonce verification on multiple AJAX actions including wcapsaveconnectorsettings, wcapsendmanualemail,...

FedCM Component XSS

The vulnerability in the FedCM web browser components for Google Chrome and Microsoft Edge is related to the user interface’s false representation of critical information. Exploitation of this vulnerability may allow a remote attacker to gain access to protected data, as well as trigger a...

OpenBB permission and access control issue vulnerability

OpenBB versions 4.7.2 and earlier, as well as 5.0.0 and earlier, contain a permission and access control vulnerability. This vulnerability stems from improper access control in the file openbbplatform/core/openbbcore/app/model/apisettings.py within the Local API Server component, potentially...

ROS-20261026-73-0149

The vulnerability in openssh is related to errors in processing the relative path to the directory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Blink Component Protected Information Access

The Blink component vulnerability in Google Chrome and Microsoft Edge web browsers is related to a flaw in the source verification mechanism. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

PT-2026-125435

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An attacker with root privileges may be able to access protected user data...

boneIO black_debian_images permission and access control issues vulnerability

In boneIO blackdebianimages versions prior to 1.6.0, there is a vulnerability related to permission escalation and access control. This issue arises from storing the Mosquitto MQTT agent password file in /etc/mosquitto/passwd with global read permissions, which may allow any local user to read al...

PT-2026-123315

A broken access control vulnerability exists in the Mautic Stats API /api/stats/table. The endpoint did not enforce permissions for several internal tables: an intended administrator-only restriction was never applied, and tables without an explicit permission mapping were readable by default. As...

CVE-2026-116638

The Windows Recovery Environment (WinRE) in Windows 10 and 11 may allow attackers with physical or administrative access to bypass firmware security controls , including administrator-configured UEFI/BIOS passwords . The issue stems from inconsistent enforcement of security controls during recove...

PT-2026-123202

Missing Authorization vulnerability in Meow Apps AI Engine ai-engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engine: from n/a through 3.8.6...

PT-2026-123271

Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.5...

PT-2026-123257

Authorization Bypass Through User-Controlled Key vulnerability in WProyal Royal Elementor Addons royal-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Royal Elementor Addons: from n/a through 1.7.1069...

ROS-20261026-73-0014

The vulnerability in openssh is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

ROS-20261026-73-0203

The vulnerability in rabbitmq-server relates to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

Apple Security Advisory 10-26-2026-5

Apple Security Advisory 10-26-2026-5 - macOS Tahoe 26.7.2 addresses out of bounds access, out of bounds read, out of bounds write, use-after-free, memory corruption, buffer overflow, integer overflow, arbitrary code execution, and information disclosure vulnerabilities...

Apple Security Advisory 10-26-2026-7

Apple Security Advisory 10-26-2026-7 - tvOS 27.2 addresses out of bounds access, out of bounds read, out of bounds write, use-after-free, buffer overflow, integer overflow, and information disclosure vulnerabilities...

WordPress Bopo authorization issue vulnerability

WordPress Bopo versions 1.2.3 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, which may lead to exploitation of improperly configured access control levels...

PT-2026-123154

A flaw has been found in openbq-org OpenBB up to 4.7.2/5.0.0. This affects an unknown part of the file openbb platform/core/openbb core/app/model/api settings.py of the component Local API Server. This manipulation causes improper access controls. Remote exploitation of the attack is possible. Th...