EUVD-2026-54570

In versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActivity is declared exported with no permission guard. A co-installed application can launch it with attacker-controlled Intent extras, including a full-screen lock-screen message, an arbitrary on-call page ID,...

CVE-2026-47361

In versions of the Datadog Android application prior to v541-5.9.2, BubbleChatActivity is exported with no permission guard and accepts a SEND intent with a caller-supplied conversationid. When the activity closes and no in-process session matches that ID, it unconditionally cancels notification ...

EUVD-2026-54314

Improper authorization in Microsoft Power Apps allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-54320

Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network...

CVE-2026-59118

Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-56161

Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network...

CVE-2026-56161 Azure Logic Apps Information Disclosure Vulnerability

...

CVE-2026-56161

Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network...

CVE-2026-56161 Azure Logic Apps Information Disclosure Vulnerability

...

CVE-2026-56161

Azure Logic Apps is identified in CVE-2026-56161 as having improper access control that allows an authorized attacker to disclose information over a network. The CVSS 3.1 base score is 9.6 (CRITICAL) with NETWORK attack vector, LOW attack complexity, LOW privileges required, and no user interacti...

CVE-2026-59118 Copilot Cowork Elevation of Privilege Vulnerability

...

CVE-2026-59118

Improper authorization in Microsoft Power Apps allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-59118 Copilot Cowork Elevation of Privilege Vulnerability

...

CVE-2026-59118

Technical details such as affected components, root cause, and patch information are not publicly provided in the supplied documents. Monitor for updates from Microsoft and other sources.

Copilot Cowork Elevation of Privilege Vulnerability

Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network...

Azure Logic Apps Information Disclosure Vulnerability

Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network...

CVE-2026-70556

Hubzilla versions prior to 11.4 contains a cross-site request forgery vulnerability in the OAuth2 /authorize endpoint handled by Zotlabs\Module\Authorize::post that allows unauthenticated attackers to register arbitrary OAuth2 applications under an authenticated user's account by submitting a...

EUVD-2026-53869

Hubzilla 11.2.1 contains a cross-site request forgery vulnerability in the OAuth2 /authorize endpoint handled by Zotlabs\Module\Authorize::post that allows unauthenticated attackers to register arbitrary OAuth2 applications under an authenticated user's account by submitting a cross-origin POST...

CVE-2026-56161: Improper Access Control

Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network...

PT-2026-68827

Name of the Vulnerable Software and Affected Versions Azure Logic Apps affected versions not specified Description Improper access control allows an authorized attacker to disclose information over a network. Recommendations At the moment, there is no information about a newer version that contai...