PT-2026-117326

A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. The impacted element is an unknown function of the file database.ts of the component Remote Control Server. Executing a manipulation of the argument remoteEnabled can lead to missing authentication. The attack may be launched...

PT-2026-117379

Missing Authorization vulnerability in WP ManageNinja LLC FluentCommunity fluent-community allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentCommunity: from n/a through 2.11.0...

PT-2026-117380

Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadcast Live Video: from n/a through 7.3.7...

CVE-2026-111836: Missing Authorization

Missing Authorization vulnerability in WP ManageNinja LLC FluentCommunity fluent-community allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentCommunity: from n/a through 2.11.0...

CVE-2026-110363: Missing Authorization

Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.10...

CVE-2026-112222: Missing Authorization

Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfer: from n/a through 1.8.0.744...

TP-Link Tapo C320WS v2 buffer error vulnerability

The TP-Link Tapo C320WS v2 running firmware versions prior to 1.6.6 Build 260917 Rel.81089n contain a buffer error vulnerability. This vulnerability arises from an authenticated stack buffer overflow in the local Wi-Fi configuration path. Authenticated attackers on adjacent networks can submit...

CVE-2026-85316: Insufficient Granularity of Access Control

Insufficient Granularity of Access Control vulnerability in Apache Camel Platform HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The component decided whether an endpoint ran in proxy mode by testing whether its configured path started with t...

PT-2026-117363

Insufficient Granularity of Access Control vulnerability in Apache Camel Platform HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The component decided whether an endpoint ran in proxy mode by testing whether its configured path started with t...

PT-2026-117265

在 openGauss-server 的 src/common/backend/libpq/hba.cpp 中，复制连接认证存在访问控制绕过。hba getauthmethod 在处理 HADR/SW 复制发送方时，不要求 is node internal connection，直接调用 check hba replication。check hba replication 仅按 replication 标记做弱匹配，缺少普通 check hba 中的远程 trust 禁止等完整校验。因此，非内部网络的 HADR/SW 复制连接可绕过内部连接限制和完整 pg hba...

ROS-20261019-73-0077

The vulnerability in Java-25-openJDK is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

ROS-20261019-73-0087

The vulnerability in Java-11-openjdk is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

ROS-20261019-73-0086

The vulnerability in Java 1.8.0-openjdk is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Honeypots for AI Agent Insider Threats

AI agents deployed inside organizations can pose an insider threat if they make mistakes, are compromised by an attacker, or pursue misaligned objectives. We propose honeypots as an AI control method to improve the security of internal agent deployments. Rather than only using honeypots for...

Linux drivers/mmc/host/vub300.c DoS

The vulnerability of the drivers/mmc/host/vub300.c component in the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel bpf lsp DoS

The vulnerability of the kernel/bpf/bpflsm.c component in the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

GitLab Access Control Issue

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to deficiencies in the access control mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify and delete any data they wish...

PT-2026-117270

MISP contains an access control flaw in the proposal shadow attribute visibility logic. The authorization check accepted any attribute or object carrying one of the user's sharing groups without verifying the distribution level, and denied the owning organisation access to proposals on its own...

CVE-2026-112025 light0011 cms Captcha Validation UserController.class.php access control

A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This impacts an unknown function of the file App/Home/Controller/UserController.class.php of the component Captcha Validation. Executing a manipulation can lead to...

CVE-2026-112025

A weakness in the light0011 cms (specifically the Captcha Validation component) impacts an unknown function within the App/Home/Controller/UserController.class.php file. This vulnerability allows for improper access controls via remote manipulation. While the project was notified early via an iss...