CVE-2026-12384

CVE-2026-12384 is an authorization bypass through a user-controlled key in the TECHIN2B Application , enabling privilege abuse . The affected version range is V1.0.7676.13 through 18092026 . The vulnerability is categorized as Broken Access Control and carries a CVSS 3.1 base score of 8.8 (HIGH) ...

CVE-2026-12384 Broken Access Control in TECHIN2B Application

Authorization bypass through User-Controlled key vulnerability in TECHIN2B TECHIN2B Application allows Privilege Abuse. This issue affects TECHIN2B Application: from V1.0.7676.13 through 18092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2026-12384 Broken Access Control in TECHIN2B Application

Authorization bypass through User-Controlled key vulnerability in TECHIN2B TECHIN2B Application allows Privilege Abuse. This issue affects TECHIN2B Application: from V1.0.7676.13 through 18092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2024-27123 QcalAgent

A cross-site scripting XSS vulnerability has been reported to affect QcalAgent. The local attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QcalAgent 1.1.9 and later...

EUVD-2024-55769

A cross-site scripting XSS vulnerability has been reported to affect QcalAgent. The local attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QcalAgent 1.1.9 and later...

PT-2026-95417

Name of the Vulnerable Software and Affected Versions JBoss Enterprise Application Platform affected versions not specified Description A flaw exists in the Elytron component of EAP. When an application security domain is backed by an Elytron token-realm using oauth2-introspection, the system...

CVE-2026-11539: Missing Authentication for Critical Function

IBM WebSphere Application Server 9.0 and 8.5 is affected by an authentication bypass vulnerability in the SOAP/JMX connector...

CVE-2026-12384: Authorization Bypass Through User-Controlled Key

Authorization bypass through User-Controlled key vulnerability in TECHIN2B TECHIN2B Application allows Privilege Abuse. This issue affects TECHIN2B Application: from V1.0.7676.13 through 18092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

PT-2026-95612

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server affected versions not specified IBM WebSphere Application Server Liberty affected versions not specified Description IBM WebSphere Application Server and WebSphere Application Server Liberty are subject to HTTP...

PT-2026-95606

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 8.5 and 9.0 Description Missing authorization checks in the administrative console may allow a remote attacker to obtain sensitive information. Recommendations At the moment, there is no information...

PT-2026-95600

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server 9.0 IBM WebSphere Application Server 8.5 Description Log injection is possible through the use of crafted LTPA Lightweight Third-Party Authentication token cookies. This allows an attacker to insert malicious...

PT-2026-95609

IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to improper handling of Content-Length headers...

PT-2026-95610

IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vulnerability in the Name Service component...

PT-2026-95605

IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet...

PT-2026-95472

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions prior to 9.0.5.29 IBM WebSphere Application Server versions prior to 8.5.5.31 Description A remote attacker can obtain sensitive information regarding the file system by exploiting the 'FileTransfer'...

CVE-2026-11540: Incorrect Authorization

IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet...

CVE-2026-11537: Trusting HTTP Permission Methods on the Server Side

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet...

PT-2026-95604

IBM WebSphere Application Server 9.0 and 8.5 is affected by an authentication bypass vulnerability in the SOAP/JMX connector...

PT-2026-95264

Name of the Vulnerable Software and Affected Versions QcalAgent versions prior to 1.1.9 Description A cross-site scripting XSS issue allows local attackers to bypass security mechanisms or read application data. Cross-site scripting is a type of security flaw where malicious scripts are injected...

PT-2026-95466

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server version 8.5 IBM WebSphere Application Server version 9.0 IBM WebSphere Liberty affected versions not specified Description IBM WebSphere Application Server and Liberty are susceptible to HTTP request smuggling,...