CVE-2026-56424

MISP core contained multiple broken access-control flaws where authorization checks were performed against the wrong entity, or where ownership/editability checks were missing on write paths. In affected subsystems, a lower-privileged authenticated user with the relevant feature permission could...

SUSE CVE-2026-20750

Gitea does not properly validate project ownership in organization project operations. A user with project write access in one organization may be able to modify projects belonging to a different organization...

PT-2026-4288

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description The software does not properly validate project ownership when handling organization project operations. This allows a user with project write access in one organization to potentially modify...