169299 matches found
CVE-2026-82302 Incorrect Authorization in Kibana Leading to Unauthorized Configuration Modification
Incorrect Authorization CWE-863 in Kibana can lead to unauthorized configuration modification via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180...
EUVD-2026-70663
Incorrect Authorization CWE-863 in Kibana can lead to unauthorized configuration modification via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180...
CVE-2026-82299 Incorrect Authorization in Kibana Leading to Information Disclosure
Incorrect Authorization CWE-863 in Kibana can lead to information disclosure via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180...
CVE-2026-82299
CVE-2026-82299 is an Incorrect Authorization (CWE-863) vulnerability in Kibana that can lead to information disclosure via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180). The CVSS 3.1 score is 6.5 (MEDIUM) , with a network attack vector, low complexity, low privilege...
EUVD-2026-70662
Incorrect Authorization CWE-863 in Kibana can lead to information disclosure via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180...
CVE-2026-82298
Kibana (Elastic) is affected by an Incorrect Authorization flaw (CWE-863) that can lead to denial of service when access control security levels are incorrectly configured (CAPEC-180). The CVSS 3.1 score is 4.3 (MEDIUM) with a network vector, low complexity, low privileges required, and low avail...
CVE-2026-82298 Incorrect Authorization in Kibana Leading to Denial of Service
Incorrect Authorization CWE-863 in Kibana can lead to denial of service via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180...
EUVD-2026-70661
Incorrect Authorization CWE-863 in Kibana can lead to denial of service via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180...
EUVD-2026-66251
Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execute unsigned applications, and upload unsigned EEPROM data and firmware via exposed service...
CVE-2026-15431 HP Support Assistant – Potential Escalation of Privilege
A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.53.2.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls...
EUVD-2026-70656
A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.53.2.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls...
Kibana 8.19.21, 9.4.6, 9.5.3 Security Update (ESA-2026-178)
Incorrect Authorization in Kibana Leading to Unauthorized Configuration Modification Incorrect Authorization CWE-863 in Kibana can lead to unauthorized configuration modification via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. Affected Versions: Fixes should be...
CVE-2026-85309
Missing Authorization vulnerability in Supsystic Ultimate Maps by Supsystic allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Ultimate Maps by Supsystic: from n/a through 1.5.3...
CVE-2026-85308
Authorization Bypass Through User-Controlled Key vulnerability in Brainstorm Force SureForms allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects SureForms: from n/a through 2.12.5...
CVE-2026-85306
Missing Authorization vulnerability in Cascadia Web Services MountDev AI MCP Connector for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MountDev AI MCP Connector for WordPress: from n/a through 1.6.5...
CVE-2026-85304
Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Unlimited Elements For Elementor Free Widgets, Addons, Templates: from n/a through...
CVE-2026-84849
Unauthenticated Bypass Vulnerability in Pre-Orders for WooCommerce = 2.3 versions...
CVE-2026-84847
Unauthenticated Broken Access Control in Quick Event Manager = 9.17 versions...