CVE-2026-110768

Versions of holaOS through 2026.822.1 are vulnerable to an authorization bypass in the channel-gateway Telegram connector . The flaw exists because the connector authorizes senders based on mutable usernames instead of using unique numeric IDs. An attacker can register a released username that is...

EUVD-2026-101568

holaOS through 2026.822.1 contains an authorization bypass vulnerability in the channel-gateway Telegram connector that authorizes senders by mutable username rather than only numeric id. Attackers who register a released username listed in allowFrom can submit turns to the bound workspace agent,...

CVE-2026-110768 holaOS through 2026.822.1 Authorization Bypass via Telegram Connector Username Allowlist

holaOS through 2026.822.1 contains an authorization bypass vulnerability in the channel-gateway Telegram connector that authorizes senders by mutable username rather than only numeric id. Attackers who register a released username listed in allowFrom can submit turns to the bound workspace agent,...

CVE-2026-110768 holaOS through 2026.822.1 Authorization Bypass via Telegram Connector Username Allowlist

holaOS through 2026.822.1 contains an authorization bypass vulnerability in the channel-gateway Telegram connector that authorizes senders by mutable username rather than only numeric id. Attackers who register a released username listed in allowFrom can submit turns to the bound workspace agent,...

WordPress Elementor Website Builder – more than just a page builder plugin <= 4.2.3 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure vulnerability

Missing Authorization to Authenticated Contributor+ Sensitive Information Exposure vulnerability discovered by Or Benit in WordPress Plugin Elementor Website Builder versions = 4.2.3...

CVE-2026-109527

The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. In mcp versions before 1.29.1 and from 2.0.0a1 through 2.0.1, the Streamable HTTP session manager, SSE message endpoint, and OAuth authorization-server routes buffer complete HTTP...

EUVD-2026-101528

Missing Authorization vulnerability in Skydropx Skydropx skydropx allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Skydropx: from n/a through 2.1.4...

CVE-2026-109527

The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. In mcp versions before 1.29.1 and from 2.0.0a1 through 2.0.1, the Streamable HTTP session manager, SSE message endpoint, and OAuth authorization-server routes buffer complete HTTP...

EUVD-2026-101514

The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. In mcp versions before 1.29.1 and from 2.0.0a1 through 2.0.1, the Streamable HTTP session manager, SSE message endpoint, and OAuth authorization-server routes buffer complete HTTP...

CVE-2026-109527

The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. In mcp versions before 1.29.1 and from 2.0.0a1 through 2.0.1, the Streamable HTTP session manager, SSE message endpoint, and OAuth authorization-server routes buffer complete HTTP...

CVE-2026-102031 Junos OS Evolved: A low-privileged TACACS+ user causes root command execution when authorization refresh is enabled

An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged TACACS+-authenticated user to execute commands with root privileges when periodic TACACS+ authorization-refresh is enabled...

CVE-2026-89072

Incorrect Authorization vulnerability in Progress MOVEit Transfer Client Certificates module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

BMC Helix Network Management Authorization Issues Vulnerability

Versions of BMC Helix Network Management prior to 26.3.01 have an authorization issue vulnerability. This vulnerability stems from the bypass of authentication when configuring SAML single-sign-on. Unverified attackers can log in as a local administrator using any password. By submitting an...

Eclipse Jetty authorization issue vulnerability

Eclipse Jetty has an authorization issue vulnerability. This occurs when web.xml defines multiple url-patterns for a servlet, and security-constraint applies only to some of these url-patterns. In such cases, the Jakarta specification’s rules governing authoritative url-patterns are not enforced ...

WordPress Blog2Social authorization issue vulnerability

WordPress Blog2Social versions 9.1.4 and earlier have a vulnerability related to authorization. This vulnerability stems from insecure direct object references. The AJAX handlers for b2sshipitem and b2sshipitemreloadurl do not perform object-based authorization on the postId parameter. As a resul...

Eclipse Jetty authorization issue vulnerability

Versions 12.1.0 through 12.1.12 of Eclipse Jetty contain an authorization issue vulnerability. This vulnerability arises because EthereumAuthenticator uses unanchored substring matching when identifying login pages. When the latter part of a protected request path contains a configured login path...

Eclipse Jetty authorization issue vulnerability

Versions 12.1.0 through 12.1.11 of Eclipse Jetty jetty-ee11-servlet, versions 12.0.0 through 12.0.38 and 12.1.0 through 12.1.11 of jetty-ee10-servlet, versions 12.0.0 through 12.0.38 and 12.1.0 through 12.1.11 of jetty-ee9-security, versions 12.0.0 through 12.0.38 and 12.1.0 through 12.1.11 of...

CRMEB crmeb_java authorization issue vulnerability

CRMEB crmebjava 3.1 and earlier versions have an authorization issue vulnerability. This vulnerability stems from an authorization bypass. Attackers can obtain order information from other members by requesting APIs like/api/front/order/express/orderId or/api/front/order/apply/refund/orderId. Thi...

Metasfresh authorization issue vulnerability

Versions of Metasfresh 5.175 and earlier have an authorization issue. This vulnerability stems from the absence of record-level authorization in the BoardRestController. Low-privilege users, after being authenticated, can bypass role and organization access checks. They can call the getBoard,...

Classroomio authorization issue vulnerability

Classroomio versions 1.0.0 and earlier have an authorization issue vulnerability. This vulnerability stems from insecure direct object references in the Hono API course submission routing. Attackers can send their course ID along with the submission UUID of other courses as a request to the PUT o...