CVE-2024-24409

CVE-2024-24409 - ADManager Plus Build 7210 Elevation of Privilege Vulnerability Description The Modify Computers is a predefined role in ADManager for managing computers. If a technician user has the Modify Computers privilege over a computer, they can change the userAccountControl and...

EUVD-2026-74070

ColdFusion is affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction...

CVE-2026-75998

Adobe ColdFusion is affected by an Improper Access Control flaw (CWE-284) that allows an unauthenticated, remote attacker to perform an arbitrary file system read , gaining access to sensitive files and directories outside the intended scope. No user interaction is required. The CVSS 3.1 score is...

CVE-2026-75998 ColdFusion | Improper Access Control (CWE-284)

ColdFusion is affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction...

CVE-2026-48907-

CVE-2026-48907 — Escáner y Exploit de RCE No Autenticado para JCE Editor de Joomla CVSS 10.0 | CWE-284 | CISA KEV | EPSS 80% Una herramienta de escaneo y explotación de vulnerabilidades basada en Python para CVE-2026-48907 , una vulnerabilidad crítica de ejecución remota de código no autenticada ...

CVE-2026-77487

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-77480

Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-73028

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-69282

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-69273

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-69268

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-69267

Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally...

CVE-2026-66814

Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network...

EUVD-2026-57449

SiYuan: The publish-access gate treats encrypted notebooks as publicly accessible by default, allowing anonymous readers to retrieve fully decrypted document content while a notebook is unlocked...

CVE-2026-84385

A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.6, FortiSOAR on-premise 7.5.0 through 7.5.3, FortiSOAR on-premise 7....

CVE-2026-84386

A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via...

EUVD-2026-73786

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-77487

CVE-2026-77487 is an improper access control vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges required) to elevate privileges over a network with low complexity and no user interaction. The CVSS 3.1 base score is 8.8 (HIGH) , with high impact to confidentia...

EUVD-2026-73783

Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-77480

SQL Server is affected by an elevation of privilege vulnerability caused by insufficient granularity of access control . An authorized attacker with low privileges can exploit the flaw over a network to elevate their access, resulting in high impact to confidentiality, integrity, and availability...