EUVD-2025-206853

Tanium addressed an improper access controls vulnerability in Interact...

The security implementation gap: Why Microsoft is supporting Operation Winter SHIELD

Every conversation I have with information security leaders tends to land in the same place. People understand what matters. They know the frameworks, the controls, and the guidance. They can explain why identity security, patching, and access control are critical. And yet incidents keep happenin...

CVE-2026-23572

Improper access control in the TeamViewer Full and Host clients Windows, macOS, Linux prior version 15.74.5 allows an authenticated user to bypass additional access controls with “Allow after confirmation” configuration in a remote session. An exploit could result in unauthorized access prior to...

SUSE CVE-2026-23089

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix use-after-free in sndusbmixerfree When sndusbcreatemixer fails, sndusbmixerfree frees mixer-idelems but the controls already added to the card still reference the freed memory. Later when sndcardregister runs...

PT-2026-6612

Name of the Vulnerable Software and Affected Versions Tanium Deploy affected versions not specified Description Tanium Deploy suffers from an improper access controls issue. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2026-6611

Name of the Vulnerable Software and Affected Versions Tanium Patch affected versions not specified Description Tanium Patch suffers from an improper access controls issue. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2026-6625

Name of the Vulnerable Software and Affected Versions Tanium Reputation affected versions not specified Description Tanium Reputation contains an issue with improper access controls. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

PT-2026-6631

Name of the Vulnerable Software and Affected Versions WeKan versions up to 8.20 Description A flaw exists in WeKan that relates to improper access controls within the Attachment Storage component. The issue is located in the file models/attachments.js and impacts an unknown function. This...

Important: libsoup3

Issue Overview: A flaw in libsoup's HTTP header handling allows multiple Host: headers in a request and returns the last occurrence for server-side processing. Common front proxies often honor the first Host: header, so this mismatch can cause vhost confusion where a proxy routes a request to one...

PT-2026-6604

Name of the Vulnerable Software and Affected Versions Tanium Interact affected versions not specified Description Tanium Interact was found to have improper access controls. This allows unauthorized access to resources. Recommendations At the moment, there is no information about a newer version...

CVE-2025-15326: Missing Authorization

Tanium addressed an improper access controls vulnerability in Patch...

CVE-2025-15342: Incorrect Authorization

Tanium addressed an improper access controls vulnerability in Reputation...

CVE-2025-15289: Missing Authorization

Tanium addressed an improper access controls vulnerability in Interact...

CVE-2025-15327: Missing Authorization

Tanium addressed an improper access controls vulnerability in Deploy...

CVE-2026-1896

A vulnerability has been found in WeKan up to 8.20. Affected by this vulnerability is the function ComprehensiveBoardMigration of the file server/migrations/comprehensiveBoardMigration.js of the component Migration Operation Handler. The manipulation of the argument boardId leads to improper acce...

CVE-2026-1895 WeKan Attachment Storage lists.js applyWipLimit ListWIPBleed access control

A flaw has been found in WeKan up to 8.20. Affected is the function applyWipLimit of the file models/lists.js of the component Attachment Storage Handler. Executing a manipulation can lead to improper access controls. The attack can be executed remotely. Upgrading to version 8.21 is able to addre...

CVE-2026-1895

CVE-2026-1895 affects WeKan up to version 8.20, specifically the Attachment Storage Handler’s file models/lists.js , function applyWipLimit . The vulnerability arises from a manipulation that can lead to improper access controls and can be exploited remotely. The advisory states that upgrading to...

CVE-2026-25036

Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through = 4.2.25...

n8n's Improper File Access Controls Allow Arbitrary File Read by Authenticated Users

Impact A vulnerability in the file access controls allows authenticated users with permission to create or modify workflows to read sensitive files from the n8n host system. This can be exploited to obtain critical configuration data and user credentials, leading to complete account takeover of a...

CVE-2026-25052

n8n is an open source workflow automation platform. Prior to versions 1.123.18 and 2.5.0, a vulnerability in the file access controls allows authenticated users with permission to create or modify workflows to read sensitive files from the n8n host system. This can be exploited to obtain critical...