72968 matches found
CVE-2026-62314: Improper Access Control
Anubis is a Web AI Firewall Utility that challenges users' connections in order to protect upstream resources from scraper bots. From 1.22.0 until 1.26.0-pre1, lib/policy/checker.go PathChecker.Check trusted the client-controlled X-Original-URI header before matching r.URL.Path, allowing an HTTP...
[20260805] - Core - Improper ACL checks for category webservice endpoints
An improper access check allows unauthorized users to create categories for inaccessible components...
EUVD-2026-44352
Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network...
CVE-2026-47301
Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network...
EUVD-2026-44091
Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally...
EUVD-2026-43923
Improper access control in Windows System allows an unauthorized attacker to bypass a security feature locally...
EUVD-2026-43908
Improper access control in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
EUVD-2026-43897
Improper access control in Windows Operating Systems allows an authorized attacker to elevate privileges locally...
EUVD-2026-43829
Improper access control in Windows Audio Compression Manager ACM allows an authorized attacker to elevate privileges locally...
EUVD-2026-43839
Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally...
EUVD-2026-43818
Improper access control in Windows Server allows an authorized attacker to elevate privileges locally...
EUVD-2026-43838
Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-58617
Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-58545
Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature locally...
CVE-2026-57088
Improper access control in Extensible Storage Engine ESENT allows an authorized attacker to elevate privileges locally...
CVE-2026-56157
Improper access control in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-50465
Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally...
CVE-2026-50418
Improper access control in Windows System allows an unauthorized attacker to bypass a security feature locally...