CVE-2026-21962

🚨 CVE-2026-21962 - Vulnerabilidad Crítica de Omisión de Autenticación 🧾 Resumen 🔥 Una vulnerabilidad de severidad máxima 10.0 que permite acceso remoto sin autenticación a sistemas middleware de Oracle. CVE ID : CVE-2026-21962 Severity : CRITICAL Published : 2026-01-20 Category : Authentication...

CVE-2023-51119

CVE-2023-51119 Control de acceso inadecuado en el router D-Link DIR-605L Explicación de la explotación: Debido a un control de acceso incorrecto, es posible tomar el control de la cuenta de administrador sin ningún tipo de autenticación enviando una solicitud bajo circunstancias especiales solo...

CVE-2026-48907-

CVE-2026-48907 — Escáner y Exploit de RCE No Autenticado para JCE Editor de Joomla CVSS 10.0 | CWE-284 | CISA KEV | EPSS 80% Una herramienta de escaneo y explotación de vulnerabilidades basada en Python para CVE-2026-48907 , una vulnerabilidad crítica de ejecución remota de código no autenticada ...

CiscoSpill

CiscoSpill Solo una herramienta PoC para extraer contraseñas usando CVE-2019-1653. CVE-2019-1653 Una vulnerabilidad en la interfaz de administración basada en web de los routers VPN Cisco Small Business RV320 y RV325 Dual Gigabit WAN podría permitir que un atacante remoto no autenticado recupere...

CVE-2020-10551

CVEID : CVE-2020-10551 Nombre del productos afectados y versiónes : QQBrowser todas las versiones anteriores a 10.5.3870.400 Tipo de problema : CWE-284: Control de Acceso Inadecuado Resumen QQBrowser es un navegador web desarrollado por Tencent. Es uno de los navegadores web más populares...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Jul 2026 - Includes Oracle July 2026 CPU plus four additional vulnerabilities for Rational Software Architect Designer

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition,Versions 8 , Java 17 and Java 21 that are used by Rational Software Architect Designer and Rational Software Architect Designer for Websphere Software. These issues were disclosed as part of the IBM SDK, Java Technolo...

Blackash-CVE-2025-33073

✨ CVE-2025-33073: Vulnerabilidad de RCE en Windows SMB 🚨 🔥 Ejecución remota de código autenticada de alta gravedad 🔥 Control de acceso inadecuado en el cliente SMB de Windows CWE-284 🛡️ Detalles clave de un vistazo Aspecto| Detalles ---|--- Puntuación CVSS v3.1| 8.8 Alta 🔥 Sistemas afectados|...

CVE-2026-76142 Genians, Inc. Genian NAC/ZTNA Improper Access Control on the Internal Interface

Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions...

CVE-2026-76142 Genians, Inc. Genian NAC/ZTNA Improper Access Control on the Internal Interface

Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions...

CVE-2026-76142

The Genian NAC/ZTNA policy server is vulnerable to improper access control due to insufficient authentication on its internal-only IPC SOAP endpoint . An unauthenticated attacker can exploit this flaw to invoke internal functions, potentially leading to high impact on integrity and availability ....

CVE-2026-103534

A vulnerability was determined in David-Crty databasement up to 1.7.1. Affected is the function SnapshotPolicy.viewAny/SnapshotPolicy.view of the file /api/v1/snapshots of the component Snapshot Model. This manipulation causes improper access controls. Remote exploitation of the attack is possibl...

EUVD-2026-90467

A vulnerability was determined in David-Crty databasement up to 1.7.1. Affected is the function SnapshotPolicy.viewAny/SnapshotPolicy.view of the file /api/v1/snapshots of the component Snapshot Model. This manipulation causes improper access controls. Remote exploitation of the attack is possibl...

CVE-2026-103534 David-Crty databasement Snapshot Model snapshots SnapshotPolicy.view access control

A vulnerability was determined in David-Crty databasement up to 1.7.1. Affected is the function SnapshotPolicy.viewAny/SnapshotPolicy.view of the file /api/v1/snapshots of the component Snapshot Model. This manipulation causes improper access controls. Remote exploitation of the attack is possibl...

CVE-2026-103534

The David-Crty databasement software (versions up to 1.7.1 ) contains a vulnerability in the Snapshot Model component. Specifically, the SnapshotPolicy.viewAny/SnapshotPolicy.view functions within the /api/v1/snapshots file suffer from improper access controls . This flaw allows for remote exploi...

CVE-2026-51896

The infiniflow ragflow version 0.25.3 is vulnerable to improper access control within the resume functionality located at api/apps/connector_app.py. This flaw allows an attacker to perform unauthorized cross-session or privilege-crossing operations , depending on the exposed entry point. No speci...

CVE-2026-51895

Ragflow versions 0.24.0 and prior are affected by an improper access control vulnerability within the update_metadata_setting function located in api/apps/kb_app.py. This flaw allows an attacker to perform unauthorized cross-session or privilege-crossing operations, depending on the specific expo...

CVE-2026-51895

Ragflow 0.24.0 and prior contains improper access control in updatemetadatasetting api/apps/kbapp.py. Depending on the exposed entry, an attacker can perform unauthorized cross-session or privilege-crossing operations...

AlmaLinux 9.2 [TuxCare] Security Update: systemd / systemd-boot-unsigned / systemd-container / systemd-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1776099155)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1776099155 advisory. - systemd, a system and service manager, as PID 1 hits an assert and freezes execution when an unprivileged IPC API call is made wit...

Linux Distros Unpatched Vulnerability : CVE-2026-47492

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an attacker can cause improper access control. A...

CVE-2026-102132 Kiteworks Core Privilege Escalation through Improper Access Control

An administrative import function in Kiteworks Core did not verify that the requesting administrator was entitled to create the privileged integration credential being imported. A delegated administrator holding a single narrowly scoped administrative permission could therefore obtain full system...