CVE-2026-87046: Incorrect Authorization

Tanium addressed an improper access controls vulnerability in Comply...

CVE-2026-87036: Missing Authorization

Tanium addressed an improper access controls vulnerability in Comply...

CVE-2026-87033: Authorization Bypass Through User-Controlled Key

Tanium addressed an improper access controls vulnerability in Comply...

CVE-2026-87019: Authorization Bypass Through User-Controlled Key

Tanium addressed an improper access controls vulnerability in Comply...

CVE-2026-14892: Incorrect Authorization

Tanium addressed an improper access controls vulnerability in Tanium Server...

PT-2026-88765

Tanium addressed an improper access controls vulnerability in Tanium Server...

PT-2026-88775

Tanium addressed an improper access controls vulnerability in Comply...

PT-2026-88780

Tanium addressed an improper access controls vulnerability in Comply...

PT-2026-88783

Tanium addressed an improper access controls vulnerability in Comply...

PT-2026-88769

Tanium addressed an improper access controls vulnerability in Comply...

PT-2026-88782

Tanium addressed an improper access controls vulnerability in Comply...

PT-2026-88785

Tanium addressed an improper access controls vulnerability in Comply...

PT-2026-88779

Tanium addressed an improper access controls vulnerability in Comply...

CVE-2026-21105: Improper Access Control

Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 allows local attackers to access sensitive information...

CVE-2026-86774: Improper Access Control

Snipe-IT versions before 8.7.0 contain a broken access control vulnerability in AssetModelPolicy where the files method cascades from assets.files permission, allowing authenticated users to upload and delete file attachments on Asset Model records without the required models.files permission...

SAML SSO - Service Provider - Critical - Improper access control - SA-CONTRIB-2026-141

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The miniorangesaml module does not correctly restrict access to certain functionality intended for administrative use. This could allow...

PT-2026-88781

Tanium addressed an improper access controls vulnerability in Comply...

CVE-2026-87072: Missing Authorization

Tanium addressed an improper access controls vulnerability in Comply...

GHSA-4MVJ-M6J5-PMF7 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-75998

ColdFusion is affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction...