CVE-2024-43998

CVE-2024-43998 Beschreibung CVE-2024-43998 : Fehlende Autorisierungsschwachstelle im Theme Blogpoet ermöglicht Zugriff auf Funktionalität, die nicht ordnungsgemäß durch ACLs eingeschränkt wird. Dieses Problem betrifft Blogpoet-Versionen von n/a bis 1.0.3. Verwendung root@kitploit: usage:...

CVE-2026-78581

Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to unauthorized data modification via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. Under certain conditions, an authenticated user could reference another user's AI Assistant conversation identifier t...

CVE-2026-72650

Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user who is authorized to read alerting rules in a single Kibana space could retrieve alerting rule executio...

EUVD-2026-58267

Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to unauthorized query execution against Elastic Agents that are assigned to a Kibana space the requesting user has no access to, via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. A user who is authoriz...

PT-2025-22034 · Unknown · Analyticswp

Name of the Vulnerable Software and Affected Versions: AnalyticsWP versions 2.0.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For AnalyticsWP versions 2.0.0 and...

CVE-2023-41812

Unrestricted Upload of File with Dangerous Type vulnerability in Pandora FMS on all allows Accessing Functionality Not Properly Constrained by ACLs. This vulnerability allowed PHP executable files to be uploaded through the file manager. This issue affects Pandora FMS: from 700 through 773...