PT-2026-58397

Name of the Vulnerable Software and Affected Versions Windows System affected versions not specified Description Improper access control allows an unauthorized attacker to locally bypass a security feature, which can affect the system. Recommendations At the moment, there is no information about ...

CVE-2026-50495: Improper Access Control

Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally...

CVE-2026-36035: Improper Access Control

Incorrect access control in the /api/License/deactivateOffline endpoint of CAXPerts UniversalPlantViewer WebServices Server v2.7.6 allows authenticated attackers with low-level privileges to cause a Denial of Service DoS via removing the license from the webserver...

CVE-2026-47301: Improper Access Control

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network...

CVE-2026-50465: Improper Access Control

Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally...

CVE-2026-58617: Improper Access Control

Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-56157: Improper Access Control

Improper access control in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-57088: Improper Access Control

Improper access control in Extensible Storage Engine ESENT allows an authorized attacker to elevate privileges locally...

CVE-2026-50423: Improper Access Control

Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-50342: Improper Access Control

Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-50325: Improper Access Control

Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-50351: Improper Access Control

Improper access control in Windows Audio Compression Manager ACM allows an authorized attacker to elevate privileges locally...

PT-2026-58195

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment, there is...

CVE-2026-58410 ChurchCRM: Improper object-level authorization allows low-privileged users to read and modify other families’ records

ChurchCRM is an open-source church management system. Prior to version 7.4.0, there was an authorization flaw in the family-scoped endpoints which allowed low-privileged users to read and modify other families’ records. An authenticated non-admin user with EditSelf access can supply another...

PYSEC-2026-3401 vantage6 node has an Improper Access Control issue

Impact Malicious algorithms can potentially access other algorithms input and output files. Patches Todo Workarounds Verify and restrict the algorithm containers that are allowed to run on your node. See here on how to do this. References https://docs.vantage6.ai/usage/running-the-node/security F...

vantage6 node has an Improper Access Control issue

ImpactMalicious algorithms can potentially access other algorithms input and output files. PatchesTodo WorkaroundsVerify and restrict the algorithm containers that are allowed to run on your node. See here on how to do this. Referenceshttps://docs.vantage6.ai/usage/running-the-node/security For...

PYSEC-2026-2648 MindsDB has an Improper Access Control Issue

A weakness has been identified in MindsDB up to 26.01. This impacts the function exec of the file mindsdb/integrations/handlers/byomhandler/procwrapper.py of the component Engine Handler. Executing a manipulation can lead to unrestricted upload. The attack can be executed remotely. The exploit ha...

MindsDB has an Improper Access Control Issue

A weakness has been identified in MindsDB up to 26.01. This impacts the function exec of the file mindsdb/integrations/handlers/byomhandler/procwrapper.py of the component Engine Handler. Executing a manipulation can lead to unrestricted upload. The attack can be executed remotely. The exploit ha...

Exploit for Improper Access Control in Microsoft

CVE-2025-33073 — Windows SMB Client NTLM Reflection EoP !CV...

CVE-2026-9492 GIGABYTE｜Gigabyte Control Center - Improper Access Control

The MBStorage DRAM lighting control module within Gigabyte Control Center GCC developed by GIGABYTE Technology has an Improper Access Control vulnerability. Authenticated local attackers can send specific IOCTL commands through the driver MyPortIOx64.sys bundled with the module, thereby arbitrari...