24244 matches found
CVE-2026-64676
A flaw was found in Kata Containers. When the mem-agent feature is enabled, an untrusted host can bypass authorization checks in the kata-agent's memory management. This allows the host to tamper with in-guest memory, leading to attacker-controlled availability and performance degradation of...
EUVD-2026-89724
A flaw was found in Moodle. When enrolling a user into a course while assigning them to a group, the application does not verify whether the selected group actually belongs to that course. An authenticated user with teacher privileges could exploit this flaw to add users to groups within courses...
CVE-2026-102582
A flaw in Moodle allows users with enrolment permissions to bypass administrative restrictions. The manual enrolment management page fails to verify whether the manual enrolment plugin is disabled, enabling authorized users to access and manage enrolments directly via its URL even after an admini...
CVE-2026-102844
A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This vulnerability affects the function detail of the file application/modules/admin/controllers/laporandatapasien.php. Executing a manipulation of the argument idparam can lead to...
CVE-2026-103054
AiSOC versions before 12.0.0 contain an authorization bypass vulnerability in the MSSP module that allows authenticated users to add arbitrary tenants to portfolios they own. Attackers can submit tenant UUIDs via the addtenantstoportfolio endpoint to claim unclaimed tenants and read their securit...
CVE-2026-102844
A vulnerability exists in gedelumbung HospitalManagement (commit up to c2d45543789a3887067d3915f69d44cfc2cf76a8) involving the detail function in the file application/modules/admin/controllers/laporan_data_pasien.php. By manipulating the id_param argument, an attacker can achieve an authorization...
CVE-2026-102844 gedelumbung HospitalManagement laporan_data_pasien.php detail authorization
A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This vulnerability affects the function detail of the file application/modules/admin/controllers/laporandatapasien.php. Executing a manipulation of the argument idparam can lead to...
CVE-2026-102844 gedelumbung HospitalManagement laporan_data_pasien.php detail authorization
A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This vulnerability affects the function detail of the file application/modules/admin/controllers/laporandatapasien.php. Executing a manipulation of the argument idparam can lead to...
EUVD-2026-89557
A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This vulnerability affects the function detail of the file application/modules/admin/controllers/laporandatapasien.php. Executing a manipulation of the argument idparam can lead to...
CVE-2026-102844 gedelumbung HospitalManagement laporan_data_pasien.php detail authorization
A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This vulnerability affects the function detail of the file application/modules/admin/controllers/laporandatapasien.php. Executing a manipulation of the argument idparam can lead to...
grafana: grafana: Authorization bypass via missing destination folder permission check
A flaw was found in Grafana. The application fails to verify creation permissions on destination folders during panel update operations. An authenticated user with edit permissions in one folder can exploit this vulnerability through the library elements API to move a library panel into a folder...
CVE-2026-103054 AiSOC 10.0.0 before 12.0.0 Unauthorized Tenant Access via MSSP
AiSOC versions before 12.0.0 contain an authorization bypass vulnerability in the MSSP module that allows authenticated users to add arbitrary tenants to portfolios they own. Attackers can submit tenant UUIDs via the addtenantstoportfolio endpoint to claim unclaimed tenants and read their securit...
CVE-2026-103054 AiSOC 10.0.0 before 12.0.0 Unauthorized Tenant Access via MSSP
AiSOC versions before 12.0.0 contain an authorization bypass vulnerability in the MSSP module that allows authenticated users to add arbitrary tenants to portfolios they own. Attackers can submit tenant UUIDs via the addtenantstoportfolio endpoint to claim unclaimed tenants and read their securit...
CVE-2026-103054
AiSOC versions before 12.0.0 contain an authorization bypass vulnerability within the MSSP module . This flaw allows authenticated users to submit tenant UUIDs via the add_tenants_to_portfolio endpoint, enabling them to claim unclaimed tenants and access sensitive data, including security alerts,...
EUVD-2026-89538
AiSOC versions before 12.0.0 contain an authorization bypass vulnerability in the MSSP module that allows authenticated users to add arbitrary tenants to portfolios they own. Attackers can submit tenant UUIDs via the addtenantstoportfolio endpoint to claim unclaimed tenants and read their securit...
CVE-2026-103054 AiSOC 10.0.0 before 12.0.0 Unauthorized Tenant Access via MSSP
AiSOC versions before 12.0.0 contain an authorization bypass vulnerability in the MSSP module that allows authenticated users to add arbitrary tenants to portfolios they own. Attackers can submit tenant UUIDs via the addtenantstoportfolio endpoint to claim unclaimed tenants and read their securit...
PT-2026-103401
Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver for Linux affected versions not specified Description A flaw exists in the kernel mode layer that allows an unprivileged user to bypass an authorization check and modify privileged configuration. This could result in...
PT-2026-103515
Name of the Vulnerable Software and Affected Versions OpenClaw Windows Node versions prior to 2026.7.1 Description An incorrect authorization issue exists in the system.run exec-approval policy. The ExecShellWrapperParser function fails to properly split commands on pipe operators or extract...
