CVE-2026-58473 Cognee < 1.2.0 Unauthorized LLM Configuration Overwrite via /api/v1/settings

Cognee before 1.2.0 contains an improper access control vulnerability that allows unauthenticated attackers to overwrite the global LLM provider configuration by self-registering an account and calling the settings endpoint, which performs no admin or superuser check. Attackers can redirect all L...

CVE-2026-48955

An improper access check allows unauthorized users to access workflow stage and transition information...

CVE-2026-48957

An improper access check allows unauthorized users to access comprivacy datasets...

CVE-2026-48958

An improper access check allows unauthorized users to create custom fields via webservices endpoints...

CVE-2026-48955

An improper access check allows unauthorized users to access workflow stage and transition information...

CVE-2026-48954

Improper validation leads to a generic XSS vector in the language override feature...

CVE-2026-48954

Improper validation leads to a generic XSS vector in the language override feature...

CVE-2026-48956

An improper access check allows users to display a list of modules in the frontend...

CVE-2026-48957

An improper access check allows unauthorized users to access comprivacy datasets...

CVE-2026-48956

An improper access check allows users to display a list of modules in the frontend...

CVE-2026-48948

An improper access check allows user to download vcard exports of comcontact contacts that are inaccessible...

CVE-2026-48947

An improper access check allows privileged users to overwrite media files without editing permissions...

CVE-2026-48948

An improper access check allows user to download vcard exports of comcontact contacts that are inaccessible...

CVE-2026-48947

An improper access check allows privileged users to overwrite media files without editing permissions...

EUVD-2026-42069

An improper access check allows privileged users to overwrite media files without editing permissions...

CVE-2026-48947 Joomla! Core - [20260701] - Incorrect Access Control in com_media webservice endpoints

An improper access check allows privileged users to overwrite media files without editing permissions...

CVE-2026-48947

An improper access check allows privileged users to overwrite media files without editing permissions...

EUVD-2026-42068

An improper access check allows unauthorized users to create custom fields via webservices endpoints...

CVE-2026-48958 Joomla! Core - [20260712] - Incorrect Access Control in com_fields webservice endpoints

An improper access check allows unauthorized users to create custom fields via webservices endpoints...

CVE-2026-48955

An improper access check allows unauthorized users to access workflow stage and transition information...