CVE-2026-73310 XenForo < 2.3.13 OAuth2 Authorization Code Token Theft via redirect_uri Bypass

XenForo before 2.3.13 contains an authorization flaw in the OAuth2 token endpoint that allows attackers controlling any allowlisted redirect URI to bypass redirect URI binding by submitting a different allowlisted URI than the one recorded at authorization time. Attackers can exchange an...

EUVD-2026-72781

XenForo before 2.3.13 contains an authorization flaw in the OAuth2 token endpoint that allows attackers controlling any allowlisted redirect URI to bypass redirect URI binding by submitting a different allowlisted URI than the one recorded at authorization time. Attackers can exchange an...

CVE-2026-47102-PoC

CVE-2026-47102 — Escalada de Privilegios en LiteLLM mediante /user/update LiteLLM v1.83.7 antes de v1.83.10 el endpoint /user/update permite a usuarios con bajo privilegio que tengan acceso a este endpoint, modificar el campo userrole a proxyadmin al actualizar su propia cuenta, logrando una...

WordPress WPML Multilingual CMS plugin <= 4.9.5 - Incorrect Authorization to Authenticated (Subscriber+) SQL Injection vulnerability

Incorrect Authorization to Authenticated Subscriber+ SQL Injection vulnerability discovered by h0xilo in WordPress Plugin Multilingual CMS versions = 4.9.5...

CVE-2026-8380

CVE-2026-8380 CVE-2026-8380 — Frontend File Manager = 23.6 Eliminación Arbitraria de Entradas Resumen Se identificó una falla crítica de autorización en el plugin de WordPress Frontend File Manager nmedia-user-file-uploader que afecta a las versiones = 23.6. La vulnerabilidad permite a usuarios...

CVE-2026-34213

CVE-2026-34213 Un usuario de Docmost con pocos privilegios podría proporcionar un attachmentId de una víctima al endpoint de carga genérico y sobrescribir el archivo adjunto de otra página dentro del mismo espacio de trabajo. Introducción Identifiqué, divulgué responsablemente y reproduje una fal...

CVE-2026-86498

JetBrains YouTrack before versions 2025.3.160480 and 2026.1.14047 is affected by an authorization flaw: PUT requests on link sub-resources allowed modification of linked entities without requiring the update permission. The issue carries a CVSS v3.1 score of 7.7 (HIGH) with a changed scope , indi...

CVE-2026-74248

A flaw was found in OpenStack Octavia. An authenticated user can exploit this vulnerability by associating a Quality of Service QoS policy from another project with an amphora. This mishandling of QoS policy authorization may prevent the deletion of the policy, leading to a denial of service DoS...

PT-2026-86870

In JetBrains YouTrack before 2025.3.160480, 2026.1.14047 pUT requests on link sub-resources allowed modification linked entities without update permission...

EUVD-2026-71778

ntopng before 6.7.260717 fails to check user privileges in the pools bulk-delete endpoint, allowing authenticated non-administrators to delete all host pools and member bindings. Attackers can issue POST requests to the delete pools endpoint to irreversibly destroy every host pool, removing traff...

Fedora 44 : chromium (2026-d805461e31)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d805461e31 advisory. - Update to 152.0.7977.75 CVE-2026-84353: Use after free in Shared Tab Groups CVE-2026-84352: Use after free in WebGL CVE-2026-84354: Incorrect...

CVE-2026-85533

An authorization flaw in MISP allowed an authenticated user to submit a sharinggroupid without verifying that the user was authorized to use the referenced Sharing Group. In several attribute and Galaxy Cluster creation and editing workflows, validation of the submitted Sharing Group was performe...

EUVD-2026-70976

An authorization flaw in MISP allowed an authenticated user to submit a sharinggroupid without verifying that the user was authorized to use the referenced Sharing Group. In several attribute and Galaxy Cluster creation and editing workflows, validation of the submitted Sharing Group was performe...

CVE-2026-85226

MISP contains an authorization flaw in the OnDemand correlation engine where correlations were calculated solely from matching attribute values without applying the distribution, sharing group, organization, or other access-control restrictions associated with the correlated attributes and events...

EUVD-2026-70504

A flaw was found in Rancher Manager. The GlobalRole controller derived the target ClusterRole name from the user-settable authz.management.cattle.io/cr-name annotation and overwrote that object's rules without verifying ownership. A user with delegated GlobalRole create or update permission could...

EUVD-2026-70499

MISP contains an authorization flaw in the OnDemand correlation engine where correlations were calculated solely from matching attribute values without applying the distribution, sharing group, organization, or other access-control restrictions associated with the correlated attributes and events...

CVE-2026-85226

CVE-2026-85226 affects the OnDemand correlation engine in MISP , a threat intelligence platform. Correlations were computed solely from matching attribute values without applying distribution, sharing-group, or organization-level access controls , allowing an authenticated low-privileged user to ...

CVE-2026-85226 MISP OnDemand Correlation Engine Missing Access Control Allows Disclosure of Restricted Correlations

MISP contains an authorization flaw in the OnDemand correlation engine where correlations were calculated solely from matching attribute values without applying the distribution, sharing group, organization, or other access-control restrictions associated with the correlated attributes and events...

CVE-2026-9853

A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read and modify application objects without being authenticated to the SYS600 system itself. Only the SYS600 system users should be permitted to view and modify...

Inductive Automation Ignition

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow any authenticated user to create projects. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for all control...