CVE-2026-51905

TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in the get_agent_execution_configuration function located in superagi/controllers/agent_execution_config.py. A remote authenticated attacker from one organization can access and read another organization's agent executi...

CVE-2026-51905

TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in getagentexecutionconfiguration in superagi/controllers/agentexecutionconfig.py. A remote authenticated attacker from one organization can read another organization's agent execution configuration by supplying the...

EUVD-2026-113343

TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in getagentexecutionconfiguration in superagi/controllers/agentexecutionconfig.py. A remote authenticated attacker from one organization can read another organization's agent execution configuration by supplying the...

CVE-2026-115706: Elastic Elastic Cloud Enterprise: Authorization Bypass Through User-Controlled Key (CWE-639) in Elastic Cloud Enterprise (ECE) can lead to privilege…

Authorization Bypass Through User-Controlled Key CWE-639 in Elastic Cloud Enterprise ECE can lead to privilege escalation via Privilege Abuse CAPEC-122. An attacker who controls any host in an ECE installation can obtain credentials that are reserved for other platform roles. These credentials ca...

CVE-2026-103092: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due…

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper access control...

EUVD-2026-113345

SuperAGI up to v0.0.14 contains an improper access control vulnerability. The agent controller endpoint /api/agents/get/project/projectid allows authenticated users from one organization to retrieve the complete list of agents belonging to a different organization's project. The endpoint accepts ...

EUVD-2026-113168

Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of application data...

EUVD-2026-113344

SuperAGI v0.0.14 contains an improper access control vulnerability in getagentbylatestexecution in superagi/controllers/agentexecution.py. A remote authenticated attacker from one organization can retrieve latest execution and agent metadata for another organization's project through...

EUVD-2026-113166

Insecure permissions in MBasov OMN-Go versionCode 26080824 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of data flow...

VulnCheck KEV: CVE-2023-42442

JumpServer is an open source bastion host and a professional operation and maintenance security audit system. Starting in version 3.0.0 and prior to versions 3.5.5 and 3.6.4, session replays can download without authentication. Session replays stored in S3, OSS, or other cloud storage are not...

CVE-2026-107038

The software Yet Another UPnP Controller (versionCode 50200 ) is affected by a vulnerability caused by insecure permissions . This flaw allows an unauthorized attacker to invoke an exported component, which can lead to arbitrary data access and the ability to exercise control over application dat...

CVE-2026-107032

The Bulk Share : Location Sender application (version v2.1.0 , versionCode 5) is affected by insecure permissions that allow unauthorized attackers to invoke an exported component . This vulnerability, categorized under CWE-926 , can lead to arbitrary data access and unauthorized control of data ...

EUVD-2026-113174

Insecure permissions in Bulk Share : Location Sender v2.1.0 versionCode 5 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of data flow...

CVE-2026-51902

SuperAGI up to v0.0.14 contains an improper access control vulnerability. The agent controller endpoint /api/agents/get/project/projectid allows authenticated users from one organization to retrieve the complete list of agents belonging to a different organization's project. The endpoint accepts ...

EUVD-2026-112934

The WIFI4 N300 router Model: T1 Pro v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root shell. The vulnerability is caused by the exposure of the UART debugging interface having a lack of authentication, authorization and access control...

CVE-2026-107036

The application Mission Control / AIMSICD (version 2026080501 ) is vulnerable to unauthorized access due to insecure permissions . This flaw allows an attacker to invoke an exported component , which directly impacts the application's tracker blocker mechanism . No specific remediation or exploit...

CVE-2026-107040

The MBasov OMN-Go software (version 26080824 ) contains a vulnerability caused by insecure permissions . This flaw allows an unauthorized attacker to invoke an exported component, which can lead to arbitrary data access and the ability to control data flow . No specific remediation details, explo...

CVE-2026-107032

Insecure permissions in Bulk Share : Location Sender v2.1.0 versionCode 5 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of data flow...

CVE-2026-90867: Progress Software WS_FTP Server: Improper access control in the Web Admin console of Progress Software WS_FTP Server versions prior to 2024.0.7 and…

Improper access control in the Web Admin console of Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could expose administrative functionality to remote authentication attempts...

CVE-2026-51902

SuperAGI (up to v0.0.14 ) contains an improper access control vulnerability. The agent controller endpoint /api/agents/get/project/{project_id} fails to verify if the project belongs to the authenticated user's organization. This allows authenticated users to retrieve a complete list of agents be...