CLEANSTART-2026-UI77772 Apache Airflow's asset materialization endpoint (`POST /api/v2/assets/{asset_id}/materialize`) and the XCom result check on `wait_dag_run_until_finished` authorized the target Dag without its team,...

Security vulnerability affects the airflow-3 package. Apache Airflow's asset materialization endpoint POST /api/v2/assets/assetid/materialize and the XCom result check on waitdagrununtilfinished authorized the target Dag without its team, unlike every other authorization site...

CLEANSTART-2026-OM50067 Apache Airflow's Backfill API authorized a request against a Dag id supplied by the caller whenever the `backfill_id` path segment failed to parse

Security vulnerability affects the airflow-3 package. Apache Airflow's Backfill API authorized a request against a Dag id supplied by the caller whenever the backfillid path segment failed to parse...

CLEANSTART-2026-VC78529 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel Salesforce Component

Security vulnerability affects the apache-nifi package. Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection', Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel Salesforce Component...

CLEANSTART-2026-NA10191 Authorization handling for component configuration verification requests in Apache NiFi 1

Security vulnerability affects the apache-nifi package. Authorization handling for component configuration verification requests in Apache NiFi 1...

PT-2026-109895

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description Low-privileged authenticated users can delete department permission bindings due to missing authorization. An attacker can retrieve row identifiers from an unguarded list endpoint and provide them...

PT-2026-109934

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the exportXls handler within the AiragPromptsController. This issue allows any authenticated user, including those with low privileges, to export all AI prompts from...

PT-2026-109885

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the deleteBatch handler of the SysMessageController. This issue allows authenticated users with low privileges to delete message push records, including those pendin...

PT-2026-109909

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the SystemApiController within the GET '/sys/api/getDynamicDbSourceByCode' endpoint. The endpoint lacks Shiro permission or role annotations, allowing an authenticat...

PT-2026-109929

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the deleteRecycleBin handler within the AiragPromptsController. This issue allows any authenticated user to purge AI prompt templates by sending DELETE requests to t...

PT-2026-109919

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the queryTenantAuthInfo handler within the SysTenantController. This issue allows any authenticated user to access records belonging to other tenants. Low-privileged...

PT-2026-109922

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw allows authenticated users to transfer tenant ownership. By sending a request to the POST '/sys/tenant/changeOwenUserTenant' endpoint, low-privileged attackers can use the...

PT-2026-109879

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description Low-privileged authenticated users can modify message templates due to missing authorization. By accessing the unguarded list endpoint to obtain template IDs, an attacker can use the PUT...

PT-2026-109937

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description Low-privileged authenticated users can download announcement attachments due to missing authorization in the SysAnnouncementController downLoadFiles handler. By providing a known announcement id, a...

PT-2026-109890

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the saveDatarule handler of the SysDepartPermissionController. This issue allows authenticated users with low privileges to modify department data rules by sending...

PT-2026-109927

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the deleteBatch handler of the AiragPromptsController. This issue allows any authenticated user to delete AI prompt templates. An attacker with low privileges can...

PT-2026-109496

Name of the Vulnerable Software and Affected Versions Avada versions prior to 7.16.2 Fusion Builder versions prior to 3.16.2 Description An authorization bypass exists due to improper verification before dispatching a WordPress action hook. The issue occurs when the hook name is derived from an...

PT-2026-109876

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the AiragExtDataController delete handler. Low-privileged authenticated users can delete AI evaluator or test-tracking records belonging to other users or tenants...

PT-2026-109665

Name of the Vulnerable Software and Affected Versions SkillHub versions prior to 0.2.22 Description An incorrect authorization issue exists within the AccountMergeService and AccountMergeController. Authenticated attackers can exploit the account merge flow to take over other accounts. By calling...

CVE-2026-105989: Missing Authorization

The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization or request-validation checks on one of its AJAX actions, allowing unauthenticated attackers to forge the stored transaction status of records and to write the Accept PayPal Payments...

CVE-2026-105977: Authorization Bypass Through User-Controlled Key

The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform a per-object authorization check before deleting an attachment, allowing users with the Contributor role and above to permanently delete certain media attachments belonging to other users, including administrators...