277533 matches found
CVE-2026-92989: Improper Access Control
The SendPress Newsletters WordPress plugin through 1.26.1.20 does not check the user's capability on several newsletter-management actions, allowing any authenticated subscriber-level user to synchronise all site users into a mailing list and to drive the newsletter send queue...
PT-2026-108874
Name of the Vulnerable Software and Affected Versions Asgaros Forum versions prior to 3.4.0 Description Asgaros Forum contains a missing authorization flaw that allows the exploitation of incorrectly configured access control security levels. Recommendations Update Asgaros Forum to version 3.4.0 ...
PT-2026-108878
Name of the Vulnerable Software and Affected Versions WP Event Manager versions prior to 3.4.2 Description A missing authorization issue exists that allows the exploitation of incorrectly configured access control security levels. Recommendations Update to version 3.4.2 or later...
PT-2026-108841
Missing Authorization vulnerability in codemstory 워드프레스 결제 심플페이 pgall-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 워드프레스 결제 심플페이: from n/a through 5.5.17...
PT-2026-108838
Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-payment-or-deposit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Deposits and Partial Payments for WooCommerce: from n...
PT-2026-108859
Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3...
PT-2026-109136
Ghost versions 5.3.0 before 6.58.0 fail to properly enforce access controls on comments in private mode. Unauthenticated visitors can read comments that should be restricted, bypassing privacy settings...
ROS-20261009-73-0538
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261009-73-0528
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261009-73-0491
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261009-73-0349
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261009-73-0274
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261009-73-0029
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
Cisco Application Policy Infrastructure Controller Security Hardening Release: October 2026 (cisco-sa-hardening-apic-UOXWtfh)
According to its self-reported version, Cisco Application Policy Infrastructure Controller APIC is affected by multiple vulnerabilities. - An input validation vulnerability exists in Cisco Application Policy Infrastructure Controller APIC due to improper neutralization of user-supplied input. An...
Cisco Application Policy Infrastructure Controller Resource Management Data Compromise
The vulnerability of the Cisco Application Policy Infrastructure Controller APIC management tool is related to insufficient control over resources during its existence. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of t...
Cisco Application Policy Infrastructure Controller Access Control Compromise
The vulnerability of the Cisco Application Policy Infrastructure Controller APIC management tool is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...
driver/net/ethernet/intel/ice/ice_main.c component of the DoS
The vulnerability in the drivers/net/ethernet/intel/ice/icemain.c component of the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261009-73-0248
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261009-73-0551
The vulnerability of the ipoptionsget function in the net/ipv4/ipoptions.c module of the Linux kernel’s IPv4 implementation is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...