111891 matches found
PT-2026-107489
Obot 0.26.0 before 0.26.2 contains an authorization bypass vulnerability that allows authenticated users matching any vMCP profile to reach prompts and resources of ungranted components. Because profiles were enforced only on tools, attackers can access prompts, resources, and resource templates...
PT-2026-107325
Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.12.2 Description Improper authorization allows a remote authenticated attacker to obtain sensitive information. Recommendations Update IBM Langflow OSS to a version later than 1.12.2...
CVE-2026-82211: Missing Authorization
The Nexi XPay Build WordPress plugin through 7.6.2 does not verify the payment result supplied to several of its unauthenticated routes, allowing attackers to mark arbitrary orders as paid or failed, to cancel them, and to obtain order keys which expose guest buyers' details...
CVE-2026-76269: Authorization Bypass Through User-Controlled Key
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could use a user-controlled job identifier to access substantially all search job information from jobs that belong to other users, including search query text, jo...
CVE-2026-106250
Missing authorization in Actor in Google Chrome prior to 155.0.8059.39...
CVE-2026-106205
Missing authorization in Passwords in Google Chrome on on Android prio...
CVE-2026-106367
Missing authorization in Mobile in Google Chrome on on Android prior t...
CVE-2026-106344
Missing authorization in Permissions in Google Chrome prior to 155.0.8...
CVE-2026-106327
Incorrect authorization in Core in Google Chrome prior to 155.0.8059.3...
CVE-2026-106328
Incorrect authorization in PDF in Google Chrome on on Android prior to...
CVE-2026-106363
Missing authorization in FullScreen in Google Chrome prior to 155.0.80...
CVE-2026-106217
Missing authorization in Google Lens in Google Chrome prior to 155.0.8...
CVE-2026-106225
Missing authorization in Autofill in Google Chrome prior to 155.0.8059...
CVE-2026-106260
Incorrect authorization in DevTools in Google Chrome prior to 155.0.80...
CVE-2026-106241
Incorrect authorization in Search in Google Chrome on on Android prior...
CVE-2026-106288
Missing authorization in Browser in Google Chrome prior to 155.0.8059...
CVE-2026-106312
Missing authorization in SignIn in Google Chrome prior to 155.0.8059.3...
CVE-2026-106183
Missing authorization in Chromoting in Google Chrome on on Windows pri...