20356 matches found
CVE-2026-73352
Unauthenticated Broken Access Control in GiveWP = 4.16.5.1 versions...
CVE-2026-69189
Hoppscotch is an open source API development ecosystem. Prior to 2026.6.0, the team, teamMembers.user, RESTHistory, GQLHistory, currentRESTSession, currentGQLSession, environments, globalEnvironments, and settings GraphQL paths expose another workspace member's private User data, while...
CVE-2026-66651
Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MultiVendorX: from n/a through 5.0.20...
CVE-2026-66679
Unauthenticated Broken Access Control in Appointment Hour Booking = 1.5.91 versions...
CVE-2026-32481
Unauthenticated Broken Authentication in Ezoic = 2.22.11 versions...
CVE-2026-32549
Unauthenticated Broken Access Control in ThumbPress 6.5 versions...
CVE-2026-32472
Unauthenticated Broken Access Control in Online Contact Widget = 1.3.0 versions...
EUVD-2026-60952
Hoppscotch is an open source API development ecosystem. Prior to 2026.6.0, the team, teamMembers.user, RESTHistory, GQLHistory, currentRESTSession, currentGQLSession, environments, globalEnvironments, and settings GraphQL paths expose another workspace member's private User data, while...
CVE-2026-69189
Hoppscotch is an open source API development ecosystem. Prior to 2026.6.0, the team, teamMembers.user, RESTHistory, GQLHistory, currentRESTSession, currentGQLSession, environments, globalEnvironments, and settings GraphQL paths expose another workspace member's private User data, while...
GO-2026-6102 Cloudreve: Broken Access Control in file event stream: a single-file share recipient is subscribed to the owner's parent folder and receives activity events for unshared siblings in github.com/cloudreve/Cloudreve
Cloudreve: Broken Access Control in file event stream: a single-file share recipient is subscribed to the owner's parent folder and receives activity events for unshared siblings in github.com/cloudreve/Cloudreve...
GO-2026-6125 grepai Uses a Broken or Risky Cryptographic Algorithm in github.com/yoanbernabeu/grepai
grepai Uses a Broken or Risky Cryptographic Algorithm in github.com/yoanbernabeu/grepai...
GO-2026-6224 Openshift Migration Advisor lacks proper authorization and filtering for its DELETE /api/v1/sources API in github.com/kubev2v/migration-planner
Openshift Migration Advisor lacks proper authorization and filtering for its DELETE /api/v1/sources API in github.com/kubev2v/migration-planner...
GO-2026-6229 Openshift Migration Advisor: Broken access control in migration-planner image-url endpoint exposes other users' OVA images and agent JWTs in github.com/kubev2v/migration-planner
Openshift Migration Advisor: Broken access control in migration-planner image-url endpoint exposes other users' OVA images and agent JWTs in github.com/kubev2v/migration-planner...
GO-2026-6128 grepai Uses a Broken or Risky Cryptographic Algorithm in github.com/yoanbernabeu/grepai
grepai Uses a Broken or Risky Cryptographic Algorithm in github.com/yoanbernabeu/grepai...
CVE-2026-28571
Unauthenticated Broken Access Control in FormyChat = 2.15.7 versions...
CVE-2026-28567
Unauthenticated Broken Access Control in WP Sort Order = 1.3.5 versions...
ANT-2026-GQ8G77M4 · supabase/auth · broken-access-control
broken-access-control medium Severity Claude medium · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-GQ8G77M4: Banned users retain authenticated endpoint access maybeLoadUserOrSession in...
ANT-2026-AM0R21ZY · supabase/supabase · broken-access-control
broken-access-control medium Severity Claude medium · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-AM0R21ZY: HIPAA sensitive-project AI block enforced only client-side The client hook...
