CVE-2026-58437

A flaw was found in Gitea. This vulnerability allows an attacker to manipulate repository visibility settings by leveraging specific Git push options. This could lead to unauthorized disclosure of repository information or unintended access control changes. Mitigation Mitigation for this issue is...

GO-2026-4950 vulnerabilities

Vulnerabilities for packages: dapr...

Azure SQL Database Elevation of Privilege Vulnerability

Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network...

CVE-2026-28163

Missing Authorization vulnerability in myCred New User Approve allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects New User Approve: from n/a through 3.2.8...

CVE-2026-76878

A flaw was found in OpenStack Aodh and Watcher. In Aodh, the alarm listing API does not correctly enforce project scope when the allprojects query parameter is present with a false value. A non-admin authenticated user can list alarms belonging to other projects, potentially exposing alarm...

Security Bulletin: Multiple vulnerabilities affect IBM® Semeru Runtime

Summary This bulletin for IBM Semeru Runtime covers all applicable Java SE CVEs published by OpenJDK as part of their July 2026 Vulnerability Advisory, plus three further vulnerabilities. For more information please refer to OpenJDK's July 2026 Vulnerability Advisory and the CVE links below...

CVE-2026-28163

The New User Approve WordPress plugin (versions ≤ 3.2.8) has a broken access control vulnerability discovered by Austin Ginder. Unauthenticated remote attackers can exploit incorrectly configured access control security levels, achieving low integrity impact (CVSS 5.3 MEDIUM). No patch version or...

EUVD-2026-63325

Missing Authorization vulnerability in myCred New User Approve allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects New User Approve: from n/a through 3.2.8...

CVE-2026-28163 WordPress New User Approve plugin <= 3.2.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in myCred New User Approve allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects New User Approve: from n/a through 3.2.8...

WordPress New User Approve plugin <= 3.2.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Austin Ginder in WordPress Plugin New User Approve versions = 3.2.8...

CVE-2026-74021

Unauthenticated Broken Access Control in Chaplin = 2.6.8 versions...

CVE-2026-74019

Unauthenticated Broken Access Control in EPROLO Dropshipping = 2.4.2 versions...

CVE-2026-74020

Unauthenticated Broken Access Control in Koji = 2.2.1 versions...

CVE-2026-66647

Subscriber Broken Access Control in Homlisti = 3.1.2 versions...

CVE-2026-66595

Unauthenticated Broken Access Control in WP Data Access = 5.5.80 versions...

CVE-2025-53999

Unauthenticated Broken Access Control in Altair = 5.2.2 versions...

CVE-2025-62299

HCL IntelliOps Event Management (IEM) has a least-privilege violation allowing a privileged (PR:H) network attacker to access resources beyond their original privileges, with HIGH confidentiality impact. CVSS 6.6 MEDIUM; no exploitation details or fix version provided in the documents.

CVE-2026-74020 WordPress Koji theme <= 2.2.1 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Koji = 2.2.1 versions...

EUVD-2026-63320

Unauthenticated Broken Access Control in Koji = 2.2.1 versions...

CVE-2026-74020

CVE-2026-74020 is an unauthenticated Broken Access Control vulnerability in the WordPress Koji theme , affecting versions ≤ 2.2.1 . The flaw allows a remote, unauthenticated attacker to access restricted resources over the network with low complexity, resulting in a high confidentiality impact (C...