Red Hat Enterprise Linux 访问控制错误漏洞

Red Hat Enterprise Linux is a Linux operating system for enterprise users developed by Red Hat Corporation in the United States. Red Hat Enterprise Linux 10 contains an access control vulnerability, which stems from improper access control mechanisms and could lead to the execution of arbitrary...

WordPress plugin Chocolate House 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

Huawei HarmonyOS Security Control Conditional Competition Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A conditional contention vulnerability exists in the Huawei HarmonyOS security control, which can be exploited by an attacker to cause availability to be...

WordPress Jobs for WordPress plugin <= 2.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Krissaphat Jankaew in WordPress Plugin Jobs for WordPress versions = 2.8...

Microsoft Projected File System 访问控制错误漏洞

The Microsoft Projected File System is an application system developed by Microsoft Corporation. It projects hierarchical data into the file system, making it appear as files and directories within the file system. The Microsoft Projected File System has an access control vulnerability. Attackers...

Fortinet FortiSwitchAXFixed 访问控制错误漏洞

The Fortinet FortiSwitchAXFixed is a network switch device developed by the American company Fortinet. There was an access control vulnerability in the Fortinet FortiSwitchAXFixed version 1.0.0 to 1.0.1. This vulnerability stemmed from improper access control, allowing authenticated administrator...

Siemens Heliox EV Chargers Access Control Vulnerability

The Heliox Flex 180 kW EV Charging Station is a modular DC fast charging device in the Heliox series from Siemens.Heliox Mobile DC 40 kW EV Charging Station is a portable, plug-and-play fast charging device for electric vehicles from the Heliox brand of Siemens. The Heliox Mobile DC 40 kW EV...

Microsoft Windows Ancillary Function Driver for WinSock 访问控制错误漏洞

The Microsoft Windows Ancillary Function Driver for WinSock is a accessibility driver developed by Microsoft for Winsock. There is an access control vulnerability present in the Microsoft Windows Ancillary Function Driver for WinSock. Attackers can exploit this vulnerability to gain elevated...

Microsoft Azure Portal 访问控制错误漏洞

Microsoft Azure Portal is a web-based unified management console of Microsoft Corporation. There is an access control vulnerability in Microsoft Azure Portal. Attackers can exploit this vulnerability to gain higher privileges...

PT-2026-24098

An incorrect access control vulnerability exists in Tenda W15E V02.03.01.26 cn. An unauthenticated attacker can access the /cgi-bin/DownloadCfg/RouterCfm.jpg endpoint to download the configuration file containing plaintext administrator credentials, leading to sensitive information disclosure and...

QiAnXin QAX Virus Removal 访问控制错误漏洞

QiAnXin QAX Virus Removal is a malware and virus removal tool developed by QiAnXin Corporation. Versions of QiAnXin QAX Virus Removal released on or before October 22, 2025, have a vulnerability related to access control. This vulnerability stems from incorrect operations on the function...

CVE-2026-28800

Natro Macro is an open-source Bee Swarm Simulator macro written in AutoHotkey. Prior to version 1.1.0, anyone with Discord Remote Control set up in a non-private channel gives access to any user with the permission to send message in said channel access to do anything on their computer. This...

Mobiliti 访问控制错误漏洞

Mobiliti is an electric vehicle charging station system developed by the Hungarian company Mobiliti. Mobiliti has a security access control vulnerability, which stems from the lack of proper authentication mechanisms for WebSocket endpoints. This vulnerability could allow unauthorized sites to...

CVE-2026-21422

Dell PowerScale OneFS, versions 9.10.0.0 through 9.10.1.5 and versions 9.11.0.0 through 9.12.0.1, contains an external control of system or configuration setting vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to protection mechani...

EUVD-2026-9802

Permission control vulnerability in the cellulardata module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-28541

Permission control vulnerability in the cellulardata module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-28541

CVE-2026-28541 describes a permission control vulnerability in the cellular_data module. The CVSS 3.1 vector indicates LOCAL attack, low complexity, no privileges required, and an availability impact (BASE score 4.0, MEDIUM). The description provides impact on availability but does not include co...

EUVD-2026-9643

Missing Authorization vulnerability in e-plugins Directory Pro directory-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directory Pro: from n/a through = 2.5.6...

EUVD-2026-9562

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Helvig helvig allows PHP Local File Inclusion.This issue affects Helvig: from n/a through = 1.0...

EUVD-2026-9536

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Holmes holmes allows PHP Local File Inclusion.This issue affects Holmes: from n/a through = 1.7...