CVE-2026-19418 TYPO3 CMS - Broken Access Control in Backend and Install Tool

The referrer enforcement introduced with TYPO3-CORE-SA-2020-006 CVE-2020-11069 became ineffective in TYPO3 v13.0, where TYPO3 CMS started serving the backend and Install Tool applications from the site's main entry script instead of the dedicated typo3/ directory. Whether a request originated fro...

EUVD-2026-55970

Affected versions of cti-transmute fail to apply comment-level access-control rules when generating evaluation report exports. Although normal comment retrieval filters comments according to conversion visibility, comment privacy, ownership, authorship, and administrative privileges,...

WordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.5.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by dodoh4t in WordPress Plugin Contact Form 7 – PayPal & Stripe Add-on versions = 2.5.1...

CVE-2026-14548

The Ray Enterprise Translation WordPress plugin through 1.7.3 does not perform any capability or nonce checks on one of its AJAX actions, allowing any authenticated user, including Subscribers, to overwrite the administrator-configured translation API token with an arbitrary value...

CVE-2026-58237

WebSocket of SAP Approuter does not perform sufficient authorization checks in certain functionality. An attacker with low privileges could exploit this to access restricted functionality. Successful exploitation could allow the attacker to read sensitive information and perform limited...

PT-2026-70823

Cap v0.3.1 contains a broken access control vulnerability in the POST /api/video/comment endpoint that allows authenticated users to post comments on any private video without permission by supplying an arbitrary videoId in the request body. Attackers can inject comments into private video...

PT-2026-70263

CamaleonCMS version 2.9.2 and earlier contains a missing authorization vulnerability in the admin users controller that allows any authenticated user to access any other user's profile data by supplying an arbitrary user ID parameter. Attackers can send a GET request to the admin profile endpoint...

PT-2026-70794

TypeBot is a chatbot builder tool. In version 3.16.1, an authenticated user who has read access to any typebot can resume a WhatsApp preview webhook session that belongs to a different typebot by mixing an authorized typebotId and blockId and a foreign preview phone number tied to another preview...

PT-2026-70131

Name of the Vulnerable Software and Affected Versions ZoneMinder version 1.39.17 Description An authenticated user can execute OS commands due to a broken permission check within the Filter class. The canEdit and canDelete functions call nonexistent methods on the ZMUser class, which triggers the...

PT-2026-70140

Name of the Vulnerable Software and Affected Versions Ghost Foundation Ghost versions 5.x Description An issue with broken access control allows authenticated users with the Author role to delete posts belonging to other users. This occurs because the permissible function in the post model lacks ...

PT-2026-70080

Name of the Vulnerable Software and Affected Versions cti-transmute affected versions not specified Description Authenticated users can add or remove emoji reactions on comments without authorization checks to verify if they are permitted to view the target comment. The react handler passes a...

PT-2026-70130

Name of the Vulnerable Software and Affected Versions Peppermint Lab Peppermint versions through commit ba6e217 Description Broken access control occurs because the Config.roles active flag defaults to false, which causes permission checks on ticket, client, and user handlers to behave as no-ops...

PT-2026-70136

Name of the Vulnerable Software and Affected Versions Peppermint Lab Peppermint versions prior to commit ba6e217 Description Broken access control allows authenticated non-administrative users to reconfigure global OIDC/SSO settings. This occurs because a configuration endpoint fails to perform...

PT-2026-70145

Name of the Vulnerable Software and Affected Versions CSZ CMS version 1.3.2 Description Broken access control allows unauthenticated remote attackers to read all form submissions, including personally identifiable information, through the admin form-submission viewer. This occurs because the view...

PT-2026-70138

Name of the Vulnerable Software and Affected Versions BadChoice Handesk versions prior to 2026-07-10 Description Broken access control allows authenticated agents to overwrite lead records belonging to other teams. This occurs because the 'LeadsController@update' endpoint lacks authorization chec...

PT-2026-70129

Name of the Vulnerable Software and Affected Versions Ladybird Web Solution Faveo Helpdesk version 2.0.3 Description A broken access control issue exists in the v1 REST API. The API verifies if a requested ticket exists but fails to verify if the authenticated user owns that ticket. This allows a...

PT-2026-70144

Name of the Vulnerable Software and Affected Versions Idurar IDURAR ERP CRM version 4.1.0 Description A broken access control issue allows unauthenticated remote attackers to download invoice PDF files containing customer personally identifiable information PII. This occurs because the '/download...

PT-2026-70238

ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI agents. Prior to 3.20.207, the ToolJet Database HTTP API in server/src/modules/tooljet-db/controller.ts authorizes operations against the :organizationId URL path value without...

PT-2026-70139

Name of the Vulnerable Software and Affected Versions BadChoice Handesk versions prior to 2026-07-10 Description Broken access control allows any authenticated agent to update ticket records belonging to other teams. This occurs because the 'TicketsController@update' endpoint does not call an...

CVE-2025-30237

The CVE-2025-30237 entry describes an authentication bypass on TP-Link Aginet devices caused by improper enforcement of access control in the device web management interface. The vulnerability affects the web server’s endpoints where authentication checks are not consistently enforced, enabling a...