72566 matches found
CVE-2026-87047: Authorization Bypass Through User-Controlled Key
Tanium addressed an improper access controls vulnerability in Comply...
CVE-2026-87037: Missing Authorization
Tanium addressed an improper access controls vulnerability in Comply...
PT-2026-88778
Tanium addressed an improper access controls vulnerability in Comply...
PT-2026-88839
Name of the Vulnerable Software and Affected Versions Collection versions prior to 1.0.1.14 in Android 15 Collection versions prior to 2.0.02.7 in Android 16 Description Improper access control allows local attackers to access sensitive information. Recommendations Update Collection to version...
PT-2026-88772
Tanium addressed an improper access controls vulnerability in Comply...
PT-2026-88843
Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information...
PT-2026-88834
Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity...
PT-2026-88832
Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction...
PT-2026-89149
alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. An Improper Access Control issue in versions prior to 2.0-M5-2605 allows an organization owner to read system-level configuration secrets through organization/event scoped "single configuratio...
CVE-2026-71807: Improper Access Control
In RuoYi-Cloud-Plus = 2.6.2 in the ruoyi-workflow module, multiple core task APIs in FlwTaskController lack permission annotations, and the Service layer does not verify whether the current user is the task handler/related user. Authenticated low-privileged remote attackers can read sensitive...
CVE-2026-50165: Improper Access Control
alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. An Improper Access Control issue in versions prior to 2.0-M5-2605 allows an organization owner to read system-level configuration secrets through organization/event scoped "single configuratio...
CVE-2026-73789: Improper Access Control
A vulnerability in the web-based management interface of CPPM guest account management services could allow an unauthenticated remote attacker to manipulate account settings. Successful exploitation could allow an attacker to extend network access beyond policy limits, leading to unauthorized...
CVE-2026-13144: Improper Access Control
The WP Travel WordPress plugin before 12.0.2 does not properly verify that the requester is authorized to modify the targeted booking on one branch of its bank-deposit handler, allowing an unauthenticated attacker who knows the target customer's email address to reset that customer's booking...
CVE-2026-21109: Improper Access Control
Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information...
CVE-2026-21100: Improper Access Control
Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity...
CVE-2026-21099: Improper Handling of Insufficient Permissions or Privileges
Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information...
CVE-2026-21098: Improper Access Control
Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction...
CVE-2026-87075: Incorrect Authorization
Tanium addressed an improper access controls vulnerability in Comply...