PT-2026-106326

Name of the Vulnerable Software and Affected Versions iatoai IATO MCP versions prior to 1.12.0 Description A missing authorization issue allows the exploitation of incorrectly configured access control security levels. Recommendations Update to version 1.12.0 or later...

PT-2026-106328

Unauthenticated Broken Access Control in Morning for WooCommerce = 2.4.1 versions...

PT-2026-106327

Name of the Vulnerable Software and Affected Versions WDS MCP Content Manager versions prior to 3.10.5 Description A broken access control issue exists for contributors, allowing unauthorized access or actions within the system. Recommendations Update to a version newer than 3.10.4...

PT-2026-106404

Name of the Vulnerable Software and Affected Versions ECPay Ecommerce for WooCommerce versions prior to 1.1.2606091 Description Broken access control allows users with the Subscriber role to perform unauthorized actions within the plugin. Recommendations Update ECPay Ecommerce for WooCommerce to ...

PT-2026-106482

Unauthenticated Broken Access Control in Easy Digital Downloads = 3.7.1 versions...

CVE-2026-39730: Missing Authorization

Missing Authorization vulnerability in Marcin Wise Chat wise-chat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wise Chat: from n/a through 3.4.3...

CVE-2026-105072: Missing Authorization

Unauthenticated Broken Access Control in FluentBooking Pro 2.5.0 versions...

PT-2026-106460

Unauthenticated Broken Access Control in WooCommerce Multivendor Marketplace – REST API = 1.6.3 versions...

Access Control Bypass vulnerability in the RBAC validation engine of Brocade Fabric OS

| Summary: An Access Control Bypass vulnerability exists in the Role-Based Access Control RBAC validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management protocol operations, the RBAC engine incorrectly categorizes non-standard action opcodes during permissi...

ROS-20261006-73-0452

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-106800

Name of the Vulnerable Software and Affected Versions @payloadcms/storage-s3 versions prior to 3.90.0 @payloadcms/storage-s3 canary versions prior to 4.0.0-canary.34 Description An authenticated user can overwrite an existing S3 object belonging to another upload collection. This occurs when clie...

PT-2026-107196

Name of the Vulnerable Software and Affected Versions HPE Networking ClearPass Policy Manager Android client application affected versions not specified Description An improper access control issue allows application functionality to be invoked by untrusted sources. This could enable an...

ROS-20261006-73-0199

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-25433: Missing Authorization

Subscriber Broken Access Control in WP2LEADS = 3.5.7 versions...

CVE-2026-39776: Improper Control of Generation of Code

Editor Remote Code Execution RCE in Tabs = 2.5 versions...

ROS-20261006-73-0004

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-107300

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 3.3.1 Backstage versions prior to 3.4.1 Backstage versions prior to 4.0.3 Backstage versions prior to 4.1.0 Description The @backstage/plugin-scaffolder-backend package contains an authorization bypass regarding...

ROS-20261006-73-0270

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-107312

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.12.2 Description Improper access control allows a remote authenticated attacker to execute arbitrary code. Recommendations Upgrade to version 1.12.3...

PT-2026-107334

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.12.2 Description Improper access control in the vertex result caching subsystem allows a remote authenticated attacker to obtain sensitive information or inject malicious data. Recommendations Update I...