277931 matches found
PT-2026-113348
Name of the Vulnerable Software and Affected Versions Adobe Experience Manager affected versions not specified Description An Incorrect Authorization issue allows for arbitrary code execution within the context of the current user. This could enable an attacker to gain elevated access or control...
PT-2026-111365
Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.8...
CVE-2026-93895: Improper Access Control
IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods...
CVE-2026-110111: Improperly Controlled Modification of Object Prototype Attributes
Xen Orchestra before 6.9.0 contains an improper access control vulnerability that allows any authenticated user to become global administrator by abusing the unprotected vm.importFromEsxi and vm.importMultipleFromEsxi methods. Attackers can point xo-server at a malicious ESXi host serving a craft...
PT-2026-112033
Xen Orchestra before 6.9.0 contains an improper access control vulnerability that allows any authenticated user to become global administrator by abusing the unprotected vm.importFromEsxi and vm.importMultipleFromEsxi methods. Attackers can point xo-server at a malicious ESXi host serving a craft...
Microsoft Windows: CVE-2026-87710: Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
Improper access control in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...
PT-2026-111852
QloApps through 1.7.0 contains an improper access control vulnerability in AdminSlipController that allows hotel-restricted back-office employees to access credit slips of all hotels. Attackers can list, export as PDF, mark as redeemed, and generate store-credit vouchers from other hotels' refund...
ROS-20261013-73-0325
The vulnerability in the kernel-lt is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : GNU cpio vulnerabilities (USN-8704-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8704-1 advisory. It was discovered that cpio incorrectly sanitized hard-link targets when extracti...
Microsoft Windows: CVE-2026-83499: Windows Server Update Service Elevation of Privilege Vulnerability
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-109958: Exposure of Sensitive Information to an Unauthorized Actor
EspoCRM 4.0.0 before 10.0.7 contains an improper access control vulnerability that allows authenticated users to read restricted emailAddress values via the address-book search API. Users with record access can query address-book search to obtain email addresses even when Roles restrict the...
MMA-SafetyBench: A Benchmark for Multimodal Agent Safety Evaluation
Multimodal agents increasingly rely on visual interfaces to perceive state and select actions, creating an attack surface not captured by text-only safety evaluations. We study Visual Semantic Hijacking, in which deceptive but semantically meaningful interface elements, such as forged system...
CVE-2026-70093: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally...
CVE-2026-70137: Missing Authentication for Critical Function
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally...
EUVD-2024-55797
ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in sensitive API endpoints...
ROS-20261013-73-0174
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261013-73-0375
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
Microsoft SharePoint: CVE-2026-70217: Microsoft Office SharePoint Information Disclosure Vulnerability
Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...
PT-2026-111323
Missing Authorization vulnerability in Karolína Vyskočilová Pay for Payment for WooCommerce woocommerce-pay-for-payment allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pay for Payment for WooCommerce: from n/a through 3.0.1...