278189 matches found
PT-2026-103239
Subscriber Broken Access Control in AllAble Connector = 0.13.4 versions...
ROS-20260930-73-0088
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-103193
Unauthenticated Broken Access Control in Bookly = 28.2 versions...
PT-2026-103169
Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms = 2.7.2 versions...
CVE-2026-97267: Missing Authorization
Subscriber Broken Access Control in Prevent files / folders access = 2.6.7 versions...
PT-2026-103286
LightLLM through 1.2.0 mounts reinforcement learning control routes on the public HTTP API without authentication checks. Unauthenticated attackers can call endpoints like /pause generation, /abort request, /flush cache, and /init weights update group to disrupt inference operations and wedge...
PT-2026-103010
Name of the Vulnerable Software and Affected Versions Pexip Infinity versions prior to 38.2 Pexip Infinity version 39.0 Pexip Infinity version 39.1 Pexip Infinity version 40.0 Description Improper access control on a product-internal API allows an attacker with local access to a node within an...
Towards Hierarchical Cyber Defense with Large Language Models: From Planning to Execution
An autonomous cyber defender trained with reinforcement learning RL is typically tied to the network on which it was trained, limiting its ability to generalize as network scale changes. Hierarchical RL reduces decision complexity by separating strategic targeting from tactical execution, but it...
PT-2026-103243
Unauthenticated Broken Access Control in Blocksy Companion = 2.1.55 versions...
Azure SQL Database Privilege Escalation
The vulnerability of the Azure SQL Database cloud relational database model is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...
D-Link DIR-822A Router Tunnel Set Params Buffer Overflow
The vulnerability of the tunnelsetparams function in the L2TP Control Message Parser component of D-Link DIR-822A router microprogramming software is related to the output of operations that go beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the...
L2TP Control Channel Parser Heap Buffer Overflow DoS
The vulnerability of the tunnelsetparams function in the tunnel.c file of the L2TP Control Channel Parser component of the D-Link DIR-895L router microprogramming system is related to the escape operation from the buffer into memory. Exploiting this vulnerability could allow a remote attacker to...
CVE-2026-97259: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key vulnerability in WP Hosting AS Pay with Vipps for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pay with Vipps for WooCommerce: from n/a through 6.2.4...
ROS-20260930-73-0069
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260930-73-0046
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260930-73-0095
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-94499: Missing Authorization
Subscriber Broken Access Control in FormGent = 1.12.2 versions...
CVE-2026-51867
agentgpt v.1.0.0 is vulnerable to Incorrect Access Control in next/src/server/api/routers/agentRouter.ts. An externally reachable path accepts a caller-selected object or tenant identifier and reaches a data-access operation without a visible owner, tenant, workspace, or membership binding on tha...