PT-2026-98192

Name of the Vulnerable Software and Affected Versions ixo Blockchain versions prior to 8.0.0 Description Improper authorization in the x/bonds module allows the movement of funds from an address resolved from a DID verification method without verifying if the address belongs to the transaction...

PT-2026-97813

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 15.11 through 19.2.6 GitLab CE/EE versions 19.3 through 19.3.2 GitLab CE/EE versions 19.4 through 19.4.0 Description Improper authorization enforcement in the GraphQL API allows an unauthenticated user to read CI/CD job...

CVE-2026-92529 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to bypass admin-configured AI tool governance controls for...

CVE-2026-92529 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to bypass admin-configured AI tool governance controls for...

CVE-2026-92529

An improper authorization check in GitLab EE allows an authenticated user with developer-role permissions to bypass admin-configured AI tool governance controls . This vulnerability specifically affects workflows in namespaces that the user does not control. The issue is present in versions 19.1 ...

CVE-2026-92874 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user with an MCP-scoped token to perform actions beyond the intended scope of that token due ...

CVE-2026-92874

GitLab CE/EE is impacted by a vulnerability in versions 18.3 before 19.2.7 , 19.3 before 19.3.3 , and 19.4 before 19.4.1 . Due to improper authorization checks , an authenticated user possessing an MCP-scoped token could perform actions exceeding the token's intended scope under certain condition...

CVE-2026-96556

A flaw has been found in Neethuharii CafeManagement. Affected by this vulnerability is the function addcashier of the file AddCashierCode.php. Executing a manipulation of the argument uname/pass/role/status can lead to improper authorization. The attack may be performed from remote. The exploit h...

CVE-2026-96556 Neethuharii CafeManagement AddCashierCode.php addcashier improper authorization

A flaw has been found in Neethuharii CafeManagement. Affected by this vulnerability is the function addcashier of the file AddCashierCode.php. Executing a manipulation of the argument uname/pass/role/status can lead to improper authorization. The attack may be performed from remote. The exploit h...

EUVD-2026-85635

A flaw has been found in Neethuharii CafeManagement. Affected by this vulnerability is the function addcashier of the file AddCashierCode.php. Executing a manipulation of the argument uname/pass/role/status can lead to improper authorization. The attack may be performed from remote. The exploit h...

CVE-2026-96556

A flaw exists in Neethuharii CafeManagement within the addcashier function of the AddCashierCode.php file. By manipulating the uname , pass , role , or status arguments, an attacker can achieve improper authorization . This vulnerability is exploitable via remote attacks. An exploit has been publ...

CVE-2026-96556 Neethuharii CafeManagement AddCashierCode.php addcashier improper authorization

A flaw has been found in Neethuharii CafeManagement. Affected by this vulnerability is the function addcashier of the file AddCashierCode.php. Executing a manipulation of the argument uname/pass/role/status can lead to improper authorization. The attack may be performed from remote. The exploit h...

CVE-2026-86867 Cinnamon's kotaemon contains improper authorization checks in multi‑user chat handlers

Cinnamon's Kotaemon all versions up to and including v0.12.0 multi-user chat interface contains multiple vulnerabilities due to incorrect authorization and improper access controls. There are four handler methods in libs/ktem/ktem/pages/chat/control.py that load a Conversation record by its ID...

CVE-2026-86867 Cinnamon's kotaemon contains improper authorization checks in multi‑user chat handlers

Cinnamon's Kotaemon all versions up to and including v0.12.0 multi-user chat interface contains multiple vulnerabilities due to incorrect authorization and improper access controls. There are four handler methods in libs/ktem/ktem/pages/chat/control.py that load a Conversation record by its ID...

CVE-2026-18179

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to clear active chat sessions due to improper authorization...

CVE-2026-18179

The IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to an issue where a remote attacker can clear active chat sessions. This is caused by improper authorization (CWE-862). The vulnerability impacts versions 4.0.6.0 - 4.0.6.0 iFix6 Refresh (Operator 4.4.6+20260807.081800...

CVE-2026-18179 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to clear active chat sessions due to improper authorization...

CVE-2026-18179 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to clear active chat sessions due to improper authorization...

EUVD-2026-85325

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to clear active chat sessions due to improper authorization...

vulnerabilities in Adobe Experience Manager Forms JEE

Adobe has identified 6 vulnerabilities in Adobe Experience Manager AEM Forms for Java Enterprise Edition JEE, including AEM 6.5 Forms and AEM 6.5 LTS Forms. These vulnerabilities concern various security issues, such as improper authorization, inadequate input validation, Server-Side Request...