20003 matches found
EUVD-2026-68528
Joomla Extension - joomshaper.com - Broken Access Control & Missing Authorization in MegaMenu Settings in Helix Ultimate 2.2.10 - The AJAX endpoint save-megamenu-settings failed to enforce item-level and menu-level edit permissions core.edit on commenus.item.id or core.admin. An authenticated use...
CVE-2026-78076
Helix Ultimate (joomshaper.com), a Joomla template/extension, is affected in versions below 2.2.10 . The vulnerability is a Broken Access Control issue in the MegaMenu Settings feature: the AJAX endpoint save-megamenu-settings failed to enforce item-level and menu-level edit permissions (core.edi...
CVE-2026-74010 WordPress bbPress plugin <= 2.6.14 - Broken Access Control vulnerability
Missing Authorization vulnerability in John James Jacoby bbPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects bbPress: from n/a through 2.6.14...
CVE-2026-74010 WordPress bbPress plugin <= 2.6.14 - Broken Access Control vulnerability
Missing Authorization vulnerability in John James Jacoby bbPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects bbPress: from n/a through 2.6.14...
CVE-2026-74010
bbPress (WordPress plugin by John James Jacoby) versions up to and including 2.6.14 contain a Missing Authorization (Broken Access Control) vulnerability that allows exploitation of incorrectly configured access control security levels. The CVSS 3.1 score is 5.3 (MEDIUM) with a network vector, no...
WordPress bbPress plugin <= 2.6.14 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin bbPress versions = 2.6.14...
CVE-2026-82878
DataEase versions before 2.10.26 omit object-level authorization checks on geographic information, dashboard linkage, and chart detail REST endpoints, allowing authenticated users to access resources belonging to other users. Attackers can overwrite or delete map geometry, modify dashboard...
CVE-2026-82878 DataEase before 2.10.26 Missing Object-Level Authorization on Geographic, Linkage and Chart Endpoints
DataEase versions before 2.10.26 omit object-level authorization checks on geographic information, dashboard linkage, and chart detail REST endpoints, allowing authenticated users to access resources belonging to other users. Attackers can overwrite or delete map geometry, modify dashboard...
EUVD-2026-68464
DataEase versions before 2.10.26 omit object-level authorization checks on geographic information, dashboard linkage, and chart detail REST endpoints, allowing authenticated users to access resources belonging to other users. Attackers can overwrite or delete map geometry, modify dashboard...
CVE-2026-82871
ToolJet before v3.16.208 fails to validate organization membership in database read routes, allowing any authenticated user to access other organizations' table schemas and row data. Attackers can supply arbitrary organization IDs in URL parameters to list tables, retrieve column definitions, and...
CVE-2026-82872
ToolJet before v3.16.208 fails to validate that the path organizationId matches the authenticated user's workspace before performing ToolJet DB table operations. A workspace admin can create, view, and delete database tables in another workspace by replacing the organizationId parameter in...
EUVD-2026-68409
ToolJet before v3.16.208 fails to validate that authenticated users belong to the organization specified in the organizationId path parameter of tooljet-db endpoints, allowing any Builder user to read, modify, and delete tables across tenant boundaries. Attackers can extract victim organization I...
EUVD-2026-68406
ToolJet before v3.16.208 fails to validate organization membership in database read routes, allowing any authenticated user to access other organizations' table schemas and row data. Attackers can supply arbitrary organization IDs in URL parameters to list tables, retrieve column definitions, and...
EUVD-2026-68405
ToolJet before v3.16.208 fails to validate organizationId ownership in database write and destroy routes, allowing any builder-role user to create, alter, or drop tables in other organizations' databases. Attackers can exploit missing organization-resolving guards to permanently delete tables,...
CVE-2026-40463 An Insufficient Role-based Access Control Vulnerability in WaveSuite
WaveSuite is affected by an insufficient role-based access control vulnerability in the CPB Log Files feature. Successful exploitation allows an authenticated low-privilege user to load pages restricted to higher-privilege roles by requesting the corresponding URL directly in the browser...
CVE-2026-82724 Broken access control in AshPhoenix SubdomainHook via a nil tenant in handle_subdomain
Incorrect Authorization vulnerability in ash-project ashphoenix invokes the SubdomainHook authorization callback with a nil tenant, so tenant-scoped access checks never see the tenant they are meant to enforce. AshPhoenix.LiveView.SubdomainHook.onmount/4 attached a handleparams hook to assign the...
CVE-2026-82724
AshPhoenix.LiveView.SubdomainHook in the ash-project/ash_phoenix Elixir library (versions 2.1.26 through before 2.3.25) contains a broken access control flaw. The handle_subdomain authorization callback was invoked during on_mount/4 , before the tenant assign was written by the handle_params hook...
CVE-2026-82724 Broken access control in AshPhoenix SubdomainHook via a nil tenant in handle_subdomain
Incorrect Authorization vulnerability in ash-project ashphoenix invokes the SubdomainHook authorization callback with a nil tenant, so tenant-scoped access checks never see the tenant they are meant to enforce. AshPhoenix.LiveView.SubdomainHook.onmount/4 attached a handleparams hook to assign the...
EEF-CVE-2026-82724 Broken access control in AshPhoenix SubdomainHook via a nil tenant in handle_subdomain
Summary Incorrect Authorization vulnerability in ash-project ashphoenix invokes the SubdomainHook authorization callback with a nil tenant, so tenant-scoped access checks never see the tenant they are meant to enforce. AshPhoenix.LiveView.SubdomainHook.onmount/4 attached a handleparams hook to...
