CVE-2026-52826: Improper Authorization

Kimai is an open-source time tracking application. Prior to 2.57.0, GET or POST requests to /en/admin/project/id/rate/rate, /en/admin/customer/id/rate/rate, and /en/admin/activity/id/rate/rate independently resolve the authorized parent identifier and the attacker-selected child rate identifier...

CVE-2026-55775: Improper Authorization

OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao users granted capabilities on /sys/namespaces/root within a non-root namespace could exploit special handling of the literal root path in namespace canonicalization. The /sys/namespaces/ endpoint family ca...

CVE-2026-49446: Improper Authorization

Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. Prior to 0.22.19, tokenMiddleware in src/proxy/routerGen.go can return through the Constellation tunnel bypass before removing x-cosmos-user, x-cosmos-role,...

CVE-2026-88620

SmartAdmin API Java17 SpringBoot3 version 3.30.0 contains an improper authorization vulnerability in the /employee/queryAll endpoint. The endpoint does not enforce the required function-level permission or data-scope authorization, allowing an authenticated low-privileged employee to retrieve...

CVE-2026-88620

The SmartAdmin API running on Java17 SpringBoot3 version 3.30.0 is affected by an improper authorization vulnerability in the /employee/queryAll endpoint. The root cause is a failure to enforce necessary function-level permissions or data-scope authorization . Consequently, an authenticated low-p...

EUVD-2026-78812

SmartAdmin API Java17 SpringBoot3 version 3.30.0 contains an improper authorization vulnerability in the /employee/queryAll endpoint. The endpoint does not enforce the required function-level permission or data-scope authorization, allowing an authenticated low-privileged employee to retrieve...

CVE-2026-21586: Improper Authorization

This High severity Improper Authorization vulnerability was introduced in versions 7.4.0, 7.13.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.1, allows an...

CVE-2026-88620: Missing Authorization

SmartAdmin API Java17 SpringBoot3 version 3.30.0 contains an improper authorization vulnerability in the /employee/queryAll endpoint. The endpoint does not enforce the required function-level permission or data-scope authorization, allowing an authenticated low-privileged employee to retrieve...

PT-2026-92135

Name of the Vulnerable Software and Affected Versions Confluence Data Center version 7.4.0 Confluence Data Center version 7.13.0 Confluence Data Center version 8.5.0 Confluence Data Center version 8.9.0 Confluence Data Center version 9.0.1 Confluence Data Center version 9.1.0 Confluence Data Cent...

PT-2026-92136

Name of the Vulnerable Software and Affected Versions Jira Service Management Data Center versions 11.3.0 through 11.3.10 Description An improper authorization issue allows an authenticated attacker to gain unintended access to resources or functionality. This could lead to the exposure of...

CVE-2026-21587: Improper Authorization

This High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira Service Management Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.1, allows an authenticated attacker to gain unintended access and can lead to the exposure of resource...

PT-2026-92113

Name of the Vulnerable Software and Affected Versions SmartAdmin API Java17 SpringBoot3 version 3.30.0 Description An improper authorization issue exists in the '/employee/queryAll' endpoint. The system fails to enforce necessary function-level permissions or data-scope authorization, which enabl...

PT-2026-92375

Concrete CMS below 9.5.3 conversation attachment uploaded endpoint imported files into the file manager before evaluating the "Add Message Attachments" permission, which was only checked after the file had been stored. A user denied that permission, or an unauthenticated visitor on a guest-postin...

CVE-2026-48717: Improper Authorization

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, AuthorizationCodeGrantTypeHandler requires a codeverifier only when the realm-wide codeVerifierEnforced setting is enabled, even when an authorization code stores a codechallenge. Because that setting is disabled by...

VulnCheck KEV: CVE-2026-58704

Google Pixel devices contain an improper authorization vulnerability in the cellular modem. A logic error may allow an attacker to bypass permission checks and escalate privileges...

PT-2026-92183

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 10.1.0 through 19.1.7 GitLab CE/EE versions 19.2 through 19.2.5 GitLab CE/EE versions 19.3 through 19.3.1 Description Improper authorization checks on internal data emission endpoints could allow an authenticated user to...

CVE-2026-52822: Improper Authorization

Kimai is an open-source time tracking application. Prior to 2.58.0, PATCH /api/timesheets/id/restart, PATCH /api/timesheets/id/duplicate, and the web duplicate workflow can derive a new record from an owned historical timesheet after the user's access to its project or activity has been revoked...

CVE-2026-88620

SmartAdmin API Java17 SpringBoot3 version 3.30.0 contains an improper authorization vulnerability in the /employee/queryAll endpoint. The endpoint does not enforce the required function-level permission or data-scope authorization, allowing an authenticated low-privileged employee to retrieve...

CVE-2026-90810

A security flaw has been discovered in cosmicstack-labs mercury-agent up to 1.1.13. The impacted element is the function PermissionManager.checkShellCommand of the file mercury-agent/src/capabilities/permissions.ts of the component Shell Command Permission Check. Performing a manipulation results...

CVE-2026-90810

An improper authorization flaw was identified in cosmicstack-labs mercury-agent (up to version 1.1.13), specifically in the function PermissionManager.checkShellCommand within the file mercury-agent/src/capabilities/permissions.ts (component: Shell Command Permission Check). A remote attacker wit...