Lucene search
+L

426 matches found

OSV
OSV
added 2026/06/12 3:49 p.m.12 views

CVE-2026-6739 Mattermost: Delegated admins could patch protected default system roles

Mattermost versions 11.6.x = 11.6.1, 11.5.x = 11.5.4, 10.11.x = 10.11.15, 10.11.x = 10.11.16 fail to require system-level permission when patching protected default system roles, which allows authenticated users with delegated user-management permissions to escalate privileges by altering built-i...

6.7CVSS6AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/06/12 12:00 a.m.47 views

PT-2026-48938

Name of the Vulnerable Software and Affected Versions Mattermost versions prior to 11.6.2 Mattermost versions prior to 11.5.5 Mattermost versions prior to 10.11.17 Description Authenticated users with delegated user-management permissions can escalate privileges by altering built-in role...

7.2CVSS5.9AI score0.00257EPSS
SaveExploits0References24
NVD
NVD
added 2026/06/11 6:16 p.m.31 views

CVE-2026-11986

A flaw was found in the admin-ui-ext component of Keycloak, which provides extended administrative user interface capabilities. The issue occurs because certain bulk role-removal endpoints fail to perform granular permission checks when deleting role mappings. This allows a delegated administrato...

4.9CVSS0.00301EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/06/11 4:47 p.m.9 views

CVE-2026-11986

A flaw was found in the admin-ui-ext component of Keycloak, which provides extended administrative user interface capabilities. The issue occurs because certain bulk role-removal endpoints fail to perform granular permission checks when deleting role mappings. This allows a delegated administrato...

4.9CVSS5.4AI score0.00301EPSS
SaveExploits0References5
CVE
CVE
added 2026/06/11 4:47 p.m.66 views

CVE-2026-11986

CVE-2026-11986 involves the Keycloak admin-ui-ext component. The root cause is that certain bulk role-removal endpoints do not perform granular permission checks when deleting role mappings, enabling a delegated administrator with limited permissions to remove highly privileged roles from other u...

4.9CVSS5.4AI score0.00301EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
added 2026/06/11 4:47 p.m.21 views

EUVD-2026-36267

A flaw was found in the admin-ui-ext component of Keycloak, which provides extended administrative user interface capabilities. The issue occurs because certain bulk role-removal endpoints fail to perform granular permission checks when deleting role mappings. This allows a delegated administrato...

4.9CVSS5.4AI score0.00301EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/06/11 4:47 p.m.14 views

CVE-2026-11986

A flaw was found in the admin-ui-ext component of Keycloak, which provides extended administrative user interface capabilities. The issue occurs because certain bulk role-removal endpoints fail to perform granular permission checks when deleting role mappings. This allows a delegated administrato...

4.9CVSS5.1AI score0.00301EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/06/10 5:38 p.m.23 views

keycloak: Keycloak: Information disclosure due to user profile permission bypass

A flaw was found in org.keycloak.services. An administrator with delegated access to read group memberships and users can bypass user profile permissions by accessing the group members endpoint. This allows the administrator to view user attributes that are explicitly configured to be denied,...

2.7CVSS5.3AI score0.00348EPSS
SaveExploits0References4
CVE
CVE
added 2026/06/10 5:15 p.m.48 views

CVE-2026-11596

Affected software: ScreenConnect™ (before version 26.2). The vulnerability concerns input validation in the Host Pass creation flow, where an authenticated user with Host Pass creation privileges could set a delegated access token expiration longer than the intended maximum. Impact, as described,...

4.7CVSS5.5AI score0.00237EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/06/10 5:15 p.m.26 views

EUVD-2026-36079

In ScreenConnect™ versions prior to 26.2, input validation within the Host Pass creation functionality could allow an authenticated user with Host Pass creation privileges the ability to specify a token expiration duration beyond the intended maximum when generating delegated access tokens...

4.7CVSS5.4AI score0.00237EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/10 12:00 a.m.26 views

PT-2026-48490

Name of the Vulnerable Software and Affected Versions ScreenConnect versions prior to 26.2 Description Insufficient input validation within the Host Pass creation functionality allows an authenticated user with Host Pass creation privileges to specify a token expiration duration that exceeds the...

4.7CVSS5.2AI score0.00237EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/06/05 7:17 p.m.18 views

CVE-2026-6968

Incomplete path traversal fixes in awslabs/tough before tough-v0.22.0 allow remote authenticated users with delegated signing authority to write files outside intended output directories via absolute target names in copytarget/linktarget, symlinked parent directories in savetarget, or symlinked...

7.1CVSS5.5AI score0.0052EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:17 p.m.12 views

CVE-2026-6966

Improper verification of cryptographic signature uniqueness in delegated role validation in awslabs/tough before tough-v0.22.0 allows remote authenticated users to bypass the TUF signature threshold requirement by duplicating a valid signature, causing the client to accept forged delegated role...

7CVSS5.5AI score0.00262EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:17 p.m.19 views

CVE-2026-6967

Missing expiration, hash, and length enforcement in delegated metadata validation in awslabs/tough before tough-v0.22.0 allows remote authenticated users with delegated signing authority to bypass TUF specification integrity checks for delegated targets metadata and poison the local metadata cach...

7.1CVSS5.5AI score0.00246EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:16 p.m.14 views

CVE-2026-42810

Apache Polaris accepts literal characters in namespace and table names. When it later builds temporary S3 access policies for delegated table access, those same characters appear to be reused unescaped in S3 IAM resource patterns and s3:prefix conditions. In S3 IAM policy matching, is treated as ...

9.9CVSS5.4AI score0.00425EPSS
SaveExploits0References1
OSV
OSV
added 2026/06/05 9:33 a.m.21 views

GHSA-6G26-7CX5-MRRG Keycloak: Information disclosure due to user profile permission bypass

A flaw was found in org.keycloak.services. An administrator with delegated access to read group memberships and users can bypass user profile permissions by accessing the group members endpoint. This allows the administrator to view user attributes that are explicitly configured to be denied,...

2.7CVSS6AI score0.00348EPSS
SaveExploits0References11
NVD
NVD
added 2026/06/05 8:16 a.m.21 views

CVE-2026-9088

A flaw was found in org.keycloak.services. An administrator with delegated access to read group memberships and users can bypass user profile permissions by accessing the group members endpoint. This allows the administrator to view user attributes that are explicitly configured to be denied,...

2.7CVSS0.00348EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/06/05 7:52 a.m.12 views

CVE-2026-9088 Keycloak: keycloak: information disclosure due to user profile permission bypass

A flaw was found in org.keycloak.services. An administrator with delegated access to read group memberships and users can bypass user profile permissions by accessing the group members endpoint. This allows the administrator to view user attributes that are explicitly configured to be denied,...

2.7CVSS5.4AI score0.00348EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/06/05 7:52 a.m.26 views

EUVD-2026-34790

A flaw was found in org.keycloak.services. An administrator with delegated access to read group memberships and users can bypass user profile permissions by accessing the group members endpoint. This allows the administrator to view user attributes that are explicitly configured to be denied,...

2.7CVSS5.4AI score0.00348EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/06/05 7:52 a.m.10 views

CVE-2026-9088

A flaw was found in org.keycloak.services. An administrator with delegated access to read group memberships and users can bypass user profile permissions by accessing the group members endpoint. This allows the administrator to view user attributes that are explicitly configured to be denied,...

2.7CVSS5.4AI score0.00348EPSS
SaveExploits0References7
Rows per page
Query Builder