PT-2026-109654

Name of the Vulnerable Software and Affected Versions Strapi versions 5.47.0 through 5.57.0 Description An improper authorization issue exists where admin API tokens maintain full access to Content Manager fields even after the owner's role has been restricted. This occurs because the...

PT-2026-109749

Name of the Vulnerable Software and Affected Versions Tabularis versions prior to 0.27.1 Description An incorrect authorization issue exists in the MCP run query safety gate. This allows prompt-injected agents or untrusted MCP clients to bypass read-only mode by submitting side-effecting SELECT...

PT-2026-109875

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the exportXls handler within the AiragExtDataController. This issue allows any authenticated user, including those with low privileges, to export AI evaluator data. ...

PT-2026-109889

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the 'saveDeptRolePermission' endpoint of the SysDepartPermissionController. This issue allows any authenticated user to modify department role permissions by...

PT-2026-109914

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the queryPageList handler of the OpenApiController. This allows any authenticated user to list OpenAPI registry definitions. Low-privileged attackers can access the...

PT-2026-109925

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description Low-privileged authenticated users can read any AI prompt template due to missing authorization in the queryById handler of the AiragPromptsController. An attacker can use the unguarded...

PT-2026-109932

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists where the permission check in the queryById function is commented out in the source code. This allows any authenticated user to access the '/airag/app/queryById' endpoi...

PT-2026-109937

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description Low-privileged authenticated users can download announcement attachments due to missing authorization in the SysAnnouncementController downLoadFiles handler. By providing a known announcement id, a...

PT-2026-109907

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the importExcel handler of the SysCategoryController. This issue allows any authenticated user, including those with low privileges, to upload specially crafted Exce...

PT-2026-109591

Name of the Vulnerable Software and Affected Versions StylemixThemes Motors versions prior to 1.4.109 Description Missing authorization allows for the exploitation of incorrectly configured access control security levels. Recommendations Update StylemixThemes Motors to version 1.4.109 or later...

PT-2026-109880

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description Low-privileged authenticated users can delete message templates due to missing authorization. This is possible via the 'DELETE /sys/message/sysMessageTemplate/deleteBatch' endpoint. By providing...

PT-2026-109924

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the SysTenantController deleteApply handler. This issue allows any authenticated user, including those with low privileges, to reject tenant administrator...

PT-2026-109940

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the sendBusAnnouncement handler of the SystemApiController. This issue allows any authenticated user to send announcements without possessing the necessary...

PT-2026-109904

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description Low-privileged authenticated users can delete category dictionary entries due to missing authorization. Attackers can retrieve node identifiers from the unguarded rootList and childList endpoints a...

PT-2026-109886

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description Low-privileged authenticated users can modify message push records due to missing authorization. By calling the endpoint "PUT /sys/message/sysMessage/edit", an attacker can provide any sys sms reco...

PT-2026-109894

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description Low-privileged authenticated users can create department permission bindings due to missing authorization. By sending requests to the endpoint "POST /sys/sysDepartPermission/add", an attacker can...

PT-2026-109930

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the embeddingSearch handler of the AiragKnowledgeController due to missing Shiro permission annotations. This allows authenticated users with low privileges to acces...

PT-2026-109910

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description Authenticated users can read the role codes of any user due to missing authorization in the queryUserRolesById handler of the SystemApiController. Low-privileged attackers can exploit this by sendi...

PT-2026-109911

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the getUserPermissionSet handler of the SystemApiController. This issue allows an authenticated user with low privileges to retrieve the complete permission set of a...

PT-2026-109921

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw allows authenticated users to modify tenant settings. By calling the 'PUT /sys/tenant/updateApplyStatus' endpoint, low-privileged attackers can provide any tenant id to...