CVE-2026-92754

PatrowlManager through 1.8.4 contains an improper access control vulnerability in the user listing API endpoint , where the authorization decorator is commented out. This allows authenticated attackers with low-privilege accounts to enumerate all users and their privilege flags, including superus...

CVE-2026-92754 PatrowlManager through 1.8.4 Improper Access Control via users API

PatrowlManager through 1.8.4 contains an improper access control vulnerability in the user listing API endpoint where the authorization decorator is commented out. Authenticated attackers with low-privilege accounts can enumerate all users and their privilege flags including superuser and staff...

EUVD-2026-81026

PatrowlManager through 1.8.4 contains an improper access control vulnerability in the user listing API endpoint where the authorization decorator is commented out. Authenticated attackers with low-privilege accounts can enumerate all users and their privilege flags including superuser and staff...

CVE-2026-92754 PatrowlManager through 1.8.4 Improper Access Control via users API

PatrowlManager through 1.8.4 contains an improper access control vulnerability in the user listing API endpoint where the authorization decorator is commented out. Authenticated attackers with low-privilege accounts can enumerate all users and their privilege flags including superuser and staff...

CVE-2026-20322

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

EUVD-2026-81130

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal securi...

CVE-2026-20332 Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Access Control Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal securi...

EUVD-2026-81104

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release...

CVE-2026-20192

CVE-2026-20192 affects Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) , stemming from improper access control issues (CWE-284) identified during an internal security review. The CVSS 3.1 base score is 10.0 (Critical) , with a network attack vector, low com...

CVE-2026-20322 Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Improper Access Control

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

CVE-2026-20322

Cisco Nexus Dashboard is affected by improper access control vulnerabilities (CWE-284) discovered during an internal security review by Cisco's engineering team. The issues are addressed in a software hardening release (specific fixed version not provided in the available documents). The assigned...

EUVD-2026-81096

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

CVE-2026-35616-detector.py

CVE-2026-35616 - FortiClient EMS 脆弱性検出ツール 説明 このツールは、FortiClient EMS サーバーが CVE-2026-35616 に対して脆弱かどうかを検出します。これは、バージョン 7.4.5 から 7.4.6 に影響する重大な不適切なアクセス制御の脆弱性です。 CVSS スコア: 9.1（緊急） CWE: CWE-284（不適切なアクセス制御） ステータス: 実環境で活発に悪用されています citation:3citation:7 この脆弱性により、認証されていない攻撃者 が保護された API...

CVE-2026-92601

Guns through version 8.3.5 , a Java-based enterprise admin framework, contains an improper access control flaw in SysNoticeController . The underlying cause is that the requiredPermission flag defaults to false and is never overridden by any action method, effectively bypassing permission checks....

EUVD-2026-80859

Guns through 8.3.5 contains an improper access control vulnerability in SysNoticeController where requiredPermission defaults to false and is not overridden by any action methods. Authenticated users without assigned roles can exploit this to create, edit, delete, publish and retract system-wide...

CVE-2026-40856

WNC T-Mobile 5G Box IDU router is vulnerable to improper access control. The vulnerability exists in the wncmaccheck.cgi endpoint, which is accessible without authentication. It allows a remote attacker to retrieve sensitive configuration data, including the administrator web password, WiFi...

CVE-2023-51119

CVE-2023-51119 D-Link DIR-605L ルーターにおける不適切なアクセス制御 悪用の説明: 不適切なアクセス制御により、特別な状況下でリクエストを送信するだけで、いかなる認証もなしに管理者アカウントを乗っ取ることができます（正規の管理者がログインしているだけで十分です） 実際には、Web設定パネル上でルーターに対して実行可能なあらゆる操作（管理者パスワードの変更を含む）を実行でき、それが乗っ取りにつながります このエクスプロイトは、ルーター上の管理者ユーザーに任意のパスワードを設定するプロセス全体を自動化します ハッピーハッキング : 開示のタイムライン:...

AZL-101223 CVE-2026-89839 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: f2fs: use the mount idmap for the owner check in f2fsxattradviseset f2fsxattradviseset calls inodeownerorcapable with &nopmntidmap before allowing the "system.advise" xattr to be set, instead of the idmap that the VFS passes to t...

CVE-2026-84408

QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to execute arbitrary commands with SYSTEM privileges...

EUVD-2026-80249

GitLab has remediated an issue in GitLab EE affecting all versions from 17.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an authenticated user with Owner or Maintainer permissions could have silently disabled protected environment deployment approval...