845 matches found
CVE-2026-94036
A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component routerd. The manipulation of the argument passwdset results in improper access controls. The attack must originate from...
EUVD-2026-83752
A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component routerd. The manipulation of the argument passwdset results in improper access controls. The attack must originate from...
CVE-2026-93504
A vulnerability has been found in SveltyCMS 0.0.6. This affects an unknown part of the file src/routes/api/...path/+server.ts of the component User Attribute Update Endpoint. Such manipulation leads to improper access controls. It is possible to launch the attack remotely. The name of the patch i...
EUVD-2026-82904
A vulnerability has been found in SveltyCMS 0.0.6. This affects an unknown part of the file src/routes/api/...path/+server.ts of the component User Attribute Update Endpoint. Such manipulation leads to improper access controls. It is possible to launch the attack remotely. The name of the patch i...
CVE-2026-93504
SveltyCMS 0.0.6 is affected by an improper access control flaw in the User Attribute Update Endpoint (file src/routes/api/[...path]/+server.ts). The vulnerability is exploitable over the network with low privileges and no user interaction, resulting in low impact to confidentiality, integrity, an...
CVE-2026-21848 HCL BigFix Service Management is affected by multiple security vulnerabilities.
HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access controls, enabling the unauthorized viewing of restricted data elements across tenant boundaries...
CVE-2026-21848
HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability stemming from improper access controls. An authenticated attacker with low privileges can exploit this to view restricted data elements across tenant boundaries , indicating a cross-tenant information disclosur...
EUVD-2026-82773
HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access controls, enabling the unauthorized viewing of restricted data elements across tenant boundaries...
CVE-2026-87113
Tanium addressed an improper access controls vulnerability in Threat Response...
EUVD-2026-81086
Tanium addressed an improper access controls vulnerability in Threat Response...
CVE-2026-87026
Tanium Threat Response is affected by an improper access controls vulnerability. The CNA-assigned CVSS v3.1 score is 3.8 (LOW) with a network vector, low attack complexity, and high privileges required , resulting in limited impact on confidentiality and integrity with no availability impact. The...
CVE-2026-87026 Tanium addressed an improper access controls vulnerability in Threat Response.
Tanium addressed an improper access controls vulnerability in Threat Response...
CVE-2026-87113 Tanium addressed an improper access controls vulnerability in Threat Response.
Tanium addressed an improper access controls vulnerability in Threat Response...
EUVD-2026-81085
Tanium addressed an improper access controls vulnerability in Threat Response...
CVE-2026-87113
Tanium Threat Response contains an improper access controls vulnerability, assigned a CVSS v3.1 score of 6.3 (MEDIUM) with a network-based attack vector requiring only low privileges and no user interaction. The flaw impacts confidentiality, integrity, and availability at a low level each, with u...
EUVD-2026-77039
A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is an unknown function of the file dashboard.php. Performing a manipulation of the argument userid results in improper access controls. It is possible to initiate t...
EUVD-2026-76980
A vulnerability was identified in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. Affected is the function getsurgesubscription of the file services/subscription.py of the component Subscription Handler. Such manipulation of the argument key leads to improper access...
CVE-2026-90493
A vulnerability was detected in Tonec Internet Download Manager up to 6.42 Build 63 on Windows. The impacted element is an unknown function of the file idmwfp.sys of the component Kernel Driver. The manipulation results in improper access controls. Attacking locally is a requirement. Internet...
PT-2026-90783
A high-severity vulnerability in the Tonec Internet Download Manager kernel driver enables local privilege escalation on Windows systems, with a public exploit already available and no vendor patch released. Key Points: CVE-2026-90493 is a high-severity improper access control flaw in the...