CVE-2026-109431

Camunda versions 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 are vulnerable to a missing authorization check in the engine-rest task sub-resources. The flaw resides in the TaskAttachmentResourceImpl and TaskCommentResourceImpl methods, specifically affecting getAttachment , getAttachmentData ...

mariadb: MariaDB: Unauthorized file access via CONNECT engine functions

A flaw was found in MariaDB. Certain file-access User-Defined Functions UDFs within the CONNECT storage engine do not properly enforce user privileges or directory restrictions when handling file system paths. An authenticated, low-privileged database user can exploit this vulnerability to read...

mariadb: mariadb: Arbitrary code execution via CONNECT engine out-of-bounds write

A flaw was found in MariaDB. An authenticated user with permission to use the CONNECT storage engine can exploit an incorrect boundary check when handling DOS table types to write beyond the allocated stack buffer. This flaw could lead to arbitrary code execution or cause the database server to...

mariadb: MariaDB: Unauthorized file access via CONNECT engine functions

A flaw was found in MariaDB. Certain file-access User-Defined Functions UDFs within the CONNECT storage engine do not properly enforce user privileges or directory restrictions when handling file system paths. An authenticated, low-privileged database user can exploit this vulnerability to read...

CVE-2026-109431: Missing Authorization

Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains a missing authorization check vulnerability in engine-rest task sub-resources that allows authenticated attackers with no permission grants to access task comments and attachments by calling singular read and delete endpoints that...

PT-2026-117447

Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains a missing authorization check vulnerability in engine-rest task sub-resources that allows authenticated attackers with no permission grants to access task comments and attachments by calling singular read and delete endpoints that...

CVE-2026-110976

The AI Engine WordPress plugin before 3.7.9 does not check that the item passed to one of its media actions belongs to the requesting user before converting it to an attachment and permanently deleting it, allowing users with the Editor role and above to delete arbitrary posts of any type,...

CVE-2026-111041

The AI Engine WordPress plugin before 3.7.9 does not verify that the user performing certain AI media management actions owns or is otherwise allowed to edit the targeted object, allowing users with the Editor role or above to modify, or change the type of, arbitrary posts on the site, including...

CVE-2026-110976

The AI Engine WordPress plugin (versions prior to 3.7.9 ) contains a missing authorization vulnerability in its media actions. The plugin fails to verify if an item belongs to the requesting user before converting it to an attachment and permanently deleting it. This flaw allows users with the Ed...

CVE-2026-111041 AI Engine < 3.7.9 - Editor+ Arbitrary Post Modification via update_media_metadata and approve_media

The AI Engine WordPress plugin before 3.7.9 does not verify that the user performing certain AI media management actions owns or is otherwise allowed to edit the targeted object, allowing users with the Editor role or above to modify, or change the type of, arbitrary posts on the site, including...

CVE-2026-111041

The AI Engine WordPress plugin, in versions prior to 3.7.9 , contains an authorization vulnerability in its AI media management functionality. Specifically, the plugin fails to verify if a user owns or is authorized to edit a targeted object during certain actions, such as update_media_metadata a...

CVE-2026-111041 AI Engine < 3.7.9 - Editor+ Arbitrary Post Modification via update_media_metadata and approve_media

The AI Engine WordPress plugin before 3.7.9 does not verify that the user performing certain AI media management actions owns or is otherwise allowed to edit the targeted object, allowing users with the Editor role or above to modify, or change the type of, arbitrary posts on the site, including...

CVE-2026-110976 AI Engine < 3.7.9 - Editor+ Arbitrary Post Deletion via reject_media

The AI Engine WordPress plugin before 3.7.9 does not check that the item passed to one of its media actions belongs to the requesting user before converting it to an attachment and permanently deleting it, allowing users with the Editor role and above to delete arbitrary posts of any type,...

CVE-2026-110976 AI Engine < 3.7.9 - Editor+ Arbitrary Post Deletion via reject_media

The AI Engine WordPress plugin before 3.7.9 does not check that the item passed to one of its media actions belongs to the requesting user before converting it to an attachment and permanently deleting it, allowing users with the Editor role and above to delete arbitrary posts of any type,...

EUVD-2026-103398

The AI Engine WordPress plugin before 3.7.9 does not check that the item passed to one of its media actions belongs to the requesting user before converting it to an attachment and permanently deleting it, allowing users with the Editor role and above to delete arbitrary posts of any type,...

EUVD-2026-103400

The AI Engine WordPress plugin before 3.7.9 does not verify that the user performing certain AI media management actions owns or is otherwise allowed to edit the targeted object, allowing users with the Editor role or above to modify, or change the type of, arbitrary posts on the site, including...

CVE-2026-111041: Missing Authorization

The AI Engine WordPress plugin before 3.7.9 does not verify that the user performing certain AI media management actions owns or is otherwise allowed to edit the targeted object, allowing users with the Editor role or above to modify, or change the type of, arbitrary posts on the site, including...

CVE-2026-110976: Missing Authorization

The AI Engine WordPress plugin before 3.7.9 does not check that the item passed to one of its media actions belongs to the requesting user before converting it to an attachment and permanently deleting it, allowing users with the Editor role and above to delete arbitrary posts of any type,...

CVE-2026-85985

A flaw was found in MariaDB. Certain file-access User-Defined Functions UDFs within the CONNECT storage engine do not properly enforce user privileges or directory restrictions when handling file system paths. An authenticated, low-privileged database user can exploit this vulnerability to read...

DEBIAN-CVE-2026-85985

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine plugin file-access UDFs jsonfile, bsonfile, jfilemake, bfilemake, and jbinfile are affected because each does not enforce FILE privilege or th...