CVE-2026-108504 Unauthorized information retrieval vulnerability in ZTE Z80 Ultra product

ZTE Z80 Ultra has an unauthorized information disclosure vulnerability. The access control for methods within the framework is insufficient. An attacker can exploit this method to read device-related information...

CVE-2026-108504

The ZTE Z80 Ultra product contains an unauthorized information disclosure vulnerability due to insufficient access control for methods within the framework. An attacker can exploit this flaw to read device-related information . No specific remediation steps or exploit details are provided in the ...

CVE-2026-93950 WordPress Motors theme <= 1.4.108 - Broken Access Control vulnerability

Missing Authorization vulnerability in StylemixThemes Motors motors allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors: from n/a through 1.4.108...

CVE-2026-93950

The StylemixThemes Motors WordPress theme (versions up to and including 1.4.108 ) is susceptible to a Broken Access Control vulnerability. The issue arises from Missing Authorization , specifically allowing for the exploitation of Incorrectly Configured Access Control Security Levels . This vulne...

CVE-2026-108503 Unauthorized information acquisition vulnerability in ZTE Z80 Ultra product

ZTE Z80 Ultra has an interface permission validation vulnerability. The callable functions provided by the system lack sufficient access control. An attacker can leverage these functions to read relevant information...

SUSE CVE-2026-78663

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...

CVE-2026-62035: Missing Authorization

Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted = 3.1.0 versions...

CVE-2026-40777: Missing Authorization

Subscriber Broken Access Control in WPSection = 1.5.1 versions...

CVE-2026-106609: Missing Authorization

Missing Authorization vulnerability in Web Impian Bayarcash WooCommerce bayarcash-wc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bayarcash WooCommerce: from n/a through 4.4.2...

CVE-2026-103685: Missing Authorization

Missing Authorization vulnerability in VillaTheme ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce woo-alidropship allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce: from n/...

CVE-2026-93950: Missing Authorization

Missing Authorization vulnerability in StylemixThemes Motors motors allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors: from n/a through 1.4.108...

CVE-2026-42706: Missing Authorization

Unauthenticated Broken Access Control in DK = 3.2.1 versions...

CVE-2026-62118: Missing Authorization

Unauthenticated Broken Access Control in Barcode Scanner with Inventory & Order Manager = 1.13.1 versions...

CVE-2026-42705: Missing Authorization

Unauthenticated Broken Access Control in Grand News = 3.4 versions...

CVE-2026-40808: Missing Authorization

Subscriber Broken Access Control in Jetpack VideoPress = 3.6 versions...

CVE-2026-40801: Missing Authorization

Subscriber Broken Access Control in Wordable = 8.2.10 versions...

CVE-2026-103357: Missing Authorization

Missing Authorization vulnerability in VillaTheme GIFT4U gift4u-gift-cards-all-in-one-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GIFT4U: from n/a through 1.1.3...

CVE-2026-108504: Improper Privilege Management

ZTE Z80 Ultra has an unauthorized information disclosure vulnerability. The access control for methods within the framework is insufficient. An attacker can exploit this method to read device-related information...

PT-2026-109757

Name of the Vulnerable Software and Affected Versions Wordable versions prior to 8.2.11 Description Broken access control exists for subscribers, allowing unauthorized access or actions. Recommendations Update to version 8.2.11 or later...

PT-2026-109755

Name of the Vulnerable Software and Affected Versions WPSection versions prior to 1.5.2 Description Broken access control allows users with subscriber privileges to perform unauthorized actions. Recommendations Update to a version newer than 1.5.1...