CVE-2026-88959 Anchor CMS through 0.12.7 Privilege Escalation via Missing Authorization on Admin User-Management Endpoints

Anchor CMS through 0.12.7 fails to enforce role-based access control in admin user-management endpoints, allowing any authenticated low-privilege user to create administrator accounts or modify existing ones. Attackers with editor or user roles can POST directly to admin/users/add or...

CVE-2026-4129 Improper Access Controls in NI SystemLink

There is an improper access control vulnerability in NI SystemLink that may allow an authenticated user with limited privileges to access host operating system files and directories that should be restricted. This vulnerability affects NI SystemLink and NI SystemLink Server 2026 Q3 and prior...

EUVD-2026-75564

There is an improper access control vulnerability in NI SystemLink that may allow an authenticated user with limited privileges to access host operating system files and directories that should be restricted. This vulnerability affects NI SystemLink and NI SystemLink Server 2026 Q3 and prior...

CVE-2026-4129

NI SystemLink and NI SystemLink Server (versions 2026 Q3 and prior) contain an improper access control vulnerability that allows an authenticated user with limited privileges to access host operating system files and directories that should be restricted. The CVSS 3.1 score is 8.1 (HIGH) with hig...

cve-2026-86060

CVE-2026-86060 — MikroTik RouterOS SSH 인증 전 권한 상승을 통한 완전한 관리자 제어 필드| 값 ---|--- CVE| CVE-2026-86060 제품| MikroTik RouterOS SSH 서비스 영향받는 버전| RouterOS 6.x 및 7.0.0 – 7.23.3 포함 수정된 버전| RouterOS 7.23.4 및 이후 취약점 유형| 인증 전 권한 상승 인증 우회 / 접근 제어 결함 공격 벡터| 원격, 비인증, SSH 서비스를 통한 공격 사전 조건| 없음 — 자격 증명, 사용자 상호작용, 로...

CVE-2026-88008

Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.26 until 2.11.57 and 3.7.13, Traefik forwards a client-supplied Connection header requesting Upgrade, the Upgrade: h2c token, and HTTP2-Settings to a shared backend. If the backend accepts h2c and returns 101 Switching...

CVE-2026-84821

Unauthenticated Broken Access Control in WP Fast Total Search = 1.82.284 versions...

CVE-2026-81799

Unauthenticated Broken Access Control in Return Refund and Exchange For WooCommerce = 4.6.4 versions...

CVE-2026-81794

Unauthenticated Broken Access Control in Shirt Product Designer for WooCommerce 1.0.4 versions...

CVE-2026-81793

Unauthenticated Broken Access Control in Salon booking system = 10.31.5 versions...

CVE-2026-81786

Unauthenticated Broken Access Control in Thank You Page Customizer for WooCommerce = 1.2.2 versions...

CVE-2026-81788

Subscriber Broken Access Control in IMPress for IDX Broker = 3.3.0 versions...

CVE-2026-81785

Unauthenticated Broken Access Control in BuddyForms = 2.9.0 versions...

CVE-2026-78536

Unauthenticated Broken Access Control in Robokassa payment gateway for Woocommerce = 1.8.9 versions...

Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends

Summary The built-in knowledge search tool returns knowledge bases the calling user has no access to. The tool works out which knowledge bases the caller may read and hands that set to the vector store as a search filter, and that filter is the only access control on the path. Most of the shipped...

Open WebUI: Channel members can overwrite another member's message via the chat completions endpoint

Summary Any member of a channel who can post to it could also replace the text of a message written by a different member. The channel branch of the chat completions endpoint checked that the caller may write to the channel, and that the targeted message belongs to that channel, but never checked...

EUVD-2026-75178

Open WebUI: Channel members can overwrite another member's message via the chat completions endpoint...

Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion

Summary External knowledge connections are created and owned by administrators, and are shared by every external knowledge base bound to them. Deleting an external knowledge base also removed that connection from the instance configuration, with no check on the caller's role and no check for othe...

CVE-2026-21962

🚨 CVE-2026-21962 - 重大な認証バイパス脆弱性 🧾 概要 🔥 Oracle ミドルウェアシステムへの認証不要のリモートアクセス を可能にする、最大深刻度 10.0 の脆弱性。 root@kitploit: CVE ID : CVE-2026-21962 Severity : CRITICAL Published : 2026-01-20 Category : Authentication Bypass CWE : CWE-284 Improper Access Control 🧠 技術的解説 root@kitploit: - Authentication boundary...

CVE-2026-88006 Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.11.1, Open WebUI's OAuth token exchange endpoint issues a session for a provider access token without running the OAuth role management that the normal OAuth login callback runs. A user whose...