CVE-2026-106503: Improper Handling of Case Sensitivity

Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by scaffolder action input authorization bypass. An authenticated user with access to affected Scaffolder templates could bypass...

CVE-2026-39756: Authorization Bypass Through User-Controlled Key

Unauthenticated Insecure Direct Object References IDOR in Wappointment = 2.7.7 versions...

CVE-2026-105859: Authorization Bypass Through User-Controlled Key

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an attacker can submit a request to a specific update endpoint that modifies collection documents without enforcing collection or field-level access control...

CVE-2026-105811: Authorization Bypass Through User-Controlled Key

Authorization bypass through a user-controlled key in the optional Amazon Q Business Lambda hook sample q-business-lambda-hook https://github.com/aws-solutions-library-samples/qnabot-on-aws/blob/main/source/docs/lambdahooks/README.md , available with QnABot on AWS versions 7.0.0 through 7.4.5,...

CVE-2026-102157: Authorization Bypass Through User-Controlled Key

An insecure direct object reference IDOR vulnerability in a CloudVision CUE file-serving interface may allow an authenticated network user, under specific attack conditions, to access another user's transient data...

sudo security update

1.9.17-7 - CVE-2026-96512 sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization rhel-10.2.z 1.9.17-6 - Fix CVE-2026-82474: execveat2 intercept/logsubcmds bypass 1.9.17-5.p2 - Resolves: RHEL-212546 - Use canonicalized path if user path contains '..'...

PT-2026-106336

The Slider Pro WordPress plugin through 1.0.0 does not perform any capability or authorisation check on one of its AJAX actions, allowing unauthenticated users to retrieve the title, excerpt and permalink of non-public posts, including drafts, pending, scheduled, private and trashed posts, as wel...

CVE-2026-106324: Incorrect Authorization

Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-105836: Authorization Bypass Through User-Controlled Key

QloApps through 1.7.0 contains an authorization bypass vulnerability in AdminProductsController::ajaxProcessBulkUpdateRooms that allows hotel-restricted back-office employees to modify rooms of other hotels. Attackers can submit foreign room IDs in the idrooms parameter to change status, floor,...

PT-2026-106932

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the PermissionElement allows a remote attacker to bypass system access restrictions by using a crafted HTML page. Recommendations Update Google Chrome to...

CVE-2026-105268: Authorization Bypass Through User-Controlled Key

The Gitea API routes for issue attachments /api/v1/repos/owner/repo/issues/index/assets/attachmentid also accepted attachments that belong to comments on the issue. Because the author of an issue may edit and delete the issue's attachments, a user who opened an issue could rename or delete...

CVE-2026-32576: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key vulnerability in ZWEISCHNEIDER Faktur Pro for WooCommerce woorechnung allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Faktur Pro for WooCommerce: from n/a through 3.2.2...

PT-2026-107300

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 3.3.1 Backstage versions prior to 3.4.1 Backstage versions prior to 4.0.3 Backstage versions prior to 4.1.0 Description The @backstage/plugin-scaffolder-backend package contains an authorization bypass regarding...

CVE-2026-106369: Missing Authorization

Missing authorization in Translate in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

PT-2026-106996

Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106363: Missing Authorization

Missing authorization in FullScreen in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

PT-2026-106312

A vulnerability has been found in PickMall Lilishop up to 4.2.4. This affects an unknown function of the file /buyer/trade/receipt of the component Buyer Invoice List. Such manipulation of the argument memberId leads to authorization bypass. It is possible to launch the attack remotely. The explo...

Privilege Escalation / Access Control Bypass in Brocade Fabric OS account management interface (CVE-2026-94576)

: An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Under specific conditions, an authenticated user can bypass authorization restrictions intended to prevent modifying...

PT-2026-107237

Name of the Vulnerable Software and Affected Versions QnABot on AWS versions 7.0.0 through 7.4.5 Description An authorization bypass exists in the optional Amazon Q Business Lambda hook sample. This issue occurs due to a user-controlled key, which may allow an authenticated remote user to read...

PT-2026-106340

Name of the Vulnerable Software and Affected Versions File Media Renamer versions prior to 1.4 Description The File Media Renamer WordPress plugin fails to verify if the requesting user is authorized to modify a specific media attachment. This allows any user with file-upload privileges to rename...