62004 matches found
EUVD-2026-62119
Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 3.2.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. While the vulnerability is in...
CVE-2026-24183
The Initial Description provides concrete technical details: the affected product is NVIDIA Cumulus Linux, the vulnerable component is the user management module, the root cause is improper privilege management, and the impact is local privilege escalation (CVSS 7.8 HIGH). No fix version or explo...
CVE-2026-72532
Joomla! Core - 20260806 - Improper ACL checks for category webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to create categories via webservices endpoints...
EUVD-2026-61031
Joomla! Core - 20260809 - Improper ACL checks when injection schema.org contact data in Joomla 5.1.0-5.4.7 and 6.0.0-6.1.2 - An improper access check injects contact information for unaccessible contact items into schema.org snippets...
CVE-2026-71574
Joomla! Core - 20260803 - Inconsistent ACL checks for mutating webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to perform mutation actions in webservice endpoints, where the same mutation was restricted in the backend UI...
Adobe ColdFusion - Arbitrary File Read
ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access to sensitive files and perform arbitrary...
Adobe Connect < 12.1.5 - Local File Disclosure
Adobe Connect versions 11.4.5 and earlier, 12.1.5 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature. Exploitation of this issue does not...
VMware vRealize Log Insight - Improper Access Control to RCE
The vRealize Log Insight contains a broken access control vulnerability. An unauthenticated malicious actor can remotely inject code into sensitive files of an impacted appliance which can result in remote code execution. id: CVE-2022-31704 info: name: VMware vRealize Log Insight - Improper Acces...
EUVD-2026-59808
A vulnerability has been found in SpaceX Starlink Router Gen 3 2025.11.14.mr64708.3. This affects the function getstatus of the component gRPC Management Interface. The manipulation leads to improper access controls. The attack can only be initiated within the local network. The exploit has been...
CVE-2026-19918
A vulnerability has been found in SpaceX Starlink Router Gen 3 2025.11.14.mr64708.3. This affects the function getstatus of the component gRPC Management Interface. The manipulation leads to improper access controls. The attack can only be initiated within the local network. The exploit has been...
PT-2026-73074
A vulnerability was determined in OpenBoxes up to 0.9.7. This affects the function needManager of the file grails-app/controllers/org/pih/warehouse/RoleInterceptor.groovy of the component Role Interceptor. Executing a manipulation can lead to improper privilege management. The attack may be...
CVE-2026-19918
SpaceX Starlink Router Gen 3 (version 2025.11.14.mr64708.3) contains a vulnerability in the gRPC Management Interface get_status function. The issue is improper access controls, allowing an adjacent-network attacker to exploit it with no user interaction. Exploit maturity is listed as Proof-of-Co...
CVE-2026-19918
A vulnerability has been found in SpaceX Starlink Router Gen 3 2025.11.14.mr64708.3. This affects the function getstatus of the component gRPC Management Interface. The manipulation leads to improper access controls. The attack can only be initiated within the local network. The exploit has been...
CVE-2026-19918 SpaceX Starlink Router Gen 3 gRPC Management get_status access control
A vulnerability has been found in SpaceX Starlink Router Gen 3 2025.11.14.mr64708.3. This affects the function getstatus of the component gRPC Management Interface. The manipulation leads to improper access controls. The attack can only be initiated within the local network. The exploit has been...
Security Bulletin: Improper Access Control Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-7362)
Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway could allow an authenticated user to obtain sensitive information that should only be available to a privileged user. Vulnerability Details CVEID:CVE-2026-7362 DESCRIPTION: IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.12, and...
CVE-2026-19639
An improper access control vulnerability exists where an authenticated non-administrative application user could potentially view settings outside of their assigned scope...
CVE-2026-19639
CVE-2026-19639 is an Improper Access Control vulnerability affecting Tenable Security Center. The issue allows an authenticated non-administrative application user to view settings outside their assigned scope. Tenable’s advisory (TENABLE:20EF43...) indicates the fix is delivered with Security Ce...
EUVD-2026-58738
An improper access control vulnerability exists where an authenticated non-administrative application user could potentially view settings outside of their assigned scope...
