PT-2026-69300

Name of the Vulnerable Software and Affected Versions nxp-auto-goldvip gvip versions prior to 1.13.0 Description Improper access controls exist within the Lambda Function Handler component, specifically affecting the SitewiseCustomFunction function. This issue stems from an IAM permission...

CVE-2026-16948: Improper Access Control

The Solace Extra WordPress plugin before 1.6.1 does not perform capability checks in several of its AJAX actions and exposes the nonce that protects them on admin pages reachable by low-privileged users, allowing users with a role as low as Subscriber to modify site-wide presentation settings and...

CVE-2026-19244

A vulnerability was detected in HKUDS nanobot up to 0.2.1. The affected element is the function connectmcpservers of the file nanobot/agent/tools/mcp.py of the component MCP enabledTools Scope Handler. Performing a manipulation results in improper access controls. The attack is possible to be...

CVE-2026-19244 HKUDS nanobot MCP enabledTools Scope mcp.py connect_mcp_servers access control

A vulnerability was detected in HKUDS nanobot up to 0.2.1. The affected element is the function connectmcpservers of the file nanobot/agent/tools/mcp.py of the component MCP enabledTools Scope Handler. Performing a manipulation results in improper access controls. The attack is possible to be...

CVE-2026-19244

A vulnerability was detected in HKUDS nanobot up to 0.2.1. The affected element is the function connectmcpservers of the file nanobot/agent/tools/mcp.py of the component MCP enabledTools Scope Handler. Performing a manipulation results in improper access controls. The attack is possible to be...

CVE-2026-19244

The CVE affects HKUDS nanobot

CVE-2026-12261

The CVE concerns nltk.downloader in nltk/nltk ≤ 3.9.4. The downloader extracts package archives into shared namespaces (corpora/ and taggers/) instead of package-isolated roots and validates integrity only after extraction. This design flaw enables one package to overwrite another package’s trust...

CVE-2026-12261 Improper Access Control in nltk/nltk

A vulnerability in nltk.downloader in nltk/nltk versions = 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package archives into shared namespaces such as corpora/ and taggers/ instead of package-isolated roots, and validates package integrity only after the...

CVE-2026-12261 Improper Access Control in nltk/nltk

A vulnerability in nltk.downloader in nltk/nltk versions = 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package archives into shared namespaces such as corpora/ and taggers/ instead of package-isolated roots, and validates package integrity only after the...

CVE-2026-19193

A flaw has been found in Jiangmin Antivirus 21. Impacted is the function MessageNotifyCallback in the library kvcore.sys of the component Minifilter Port. Executing a manipulation can lead to improper access controls. The attack needs to be launched locally. The exploit has been published and may...

CVE-2026-19192

A vulnerability was detected in DeepCool DisplayService 1.2.12. This issue affects some unknown processing of the file C:\DeepCool\resources\service\x64\DeepCoolDisplayService.exe. Performing a manipulation results in improper access controls. The attack must be initiated from a local position. T...

CVE-2026-19195

A vulnerability has been found in V-Secure Jingyun Antivirus 2.4.2.39. The affected element is an unknown function in the library ZyArk.sys of the component Kernel Driver. The manipulation leads to improper access controls. The attack needs to be performed locally. The exploit has been disclosed ...

CVE-2026-19195 V-Secure Jingyun Antivirus Kernel Driver ZyArk.sys access control

A vulnerability has been found in V-Secure Jingyun Antivirus 2.4.2.39. The affected element is an unknown function in the library ZyArk.sys of the component Kernel Driver. The manipulation leads to improper access controls. The attack needs to be performed locally. The exploit has been disclosed ...

CVE-2026-19195

A vulnerability has been found in V-Secure Jingyun Antivirus 2.4.2.39. The affected element is an unknown function in the library ZyArk.sys of the component Kernel Driver. The manipulation leads to improper access controls. The attack needs to be performed locally. The exploit has been disclosed ...

EUVD-2026-54359

A flaw has been found in Jiangmin Antivirus 21. Impacted is the function MessageNotifyCallback in the library kvcore.sys of the component Minifilter Port. Executing a manipulation can lead to improper access controls. The attack needs to be launched locally. The exploit has been published and may...

EUVD-2026-54313

Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network...

EUVD-2026-54320

Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network...

PT-2026-68848

Name of the Vulnerable Software and Affected Versions Jiangmin Antivirus 21 Description A flaw in the Minifilter Port component within the kvcore.sys library allows for improper access controls. This issue occurs in the MessageNotifyCallback function and requires local access to be exploited...

PT-2026-69139

Name of the Vulnerable Software and Affected Versions HKUDS nanobot versions prior to 0.3.0 Description Improper access controls exist within the MCP enabledTools Scope Handler component. The issue resides in the connect mcp servers function located in the nanobot/agent/tools/mcp.py file. This fl...

CVE-2026-19193: Improper Access Control

A flaw has been found in Jiangmin Antivirus 21. Impacted is the function MessageNotifyCallback in the library kvcore.sys of the component Minifilter Port. Executing a manipulation can lead to improper access controls. The attack needs to be launched locally. The exploit has been published and may...