PT-2026-104067

Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications...

Security Bulletin: Vulnerability in bcprov-jdk18on bundled with IBM Fusion and IBM Fusion HCI.

Summary IBM Fusion and IBM Fusion HCI include the bcprov-jdk18on library, which is affected by multiple vulnerabilities, including improper certificate validation, improper validation of integrity check value, and denial of service vulnerabilities. CVE-2026-12185, CVE-2026-12803, CVE-2026-12816,...

tomcat: Apache Tomcat: Improper Authorization allows bypass of declarative role constraints

A flaw was found in Apache Tomcat. This improper authorization vulnerability occurs because security-role-ref definitions are incorrectly used as role aliases within the Realm, in addition to their correct usage with Request.isUserInRole. This misconfiguration allows for a bypass of declarative...

tomcat: Apache Tomcat: Improper Authentication due to principal lookup failure

A flaw was found in Apache Tomcat. This improper authentication vulnerability allows a remote attacker to be authenticated even if their user account does not exist in the DataSourceRealm, under specific circumstances such as CLIENT-CERT or SPNEGO authentication. This can lead to unauthorized...

tomcat: Apache Tomcat: Security constraint bypass due to improper access control

A flaw was found in Apache Tomcat. This improper access control and incorrect authorization vulnerability allows an attacker to bypass security constraints. This occurs when a security constraint for a longer path is specified before a more restrictive constraint for a shorter sub-path, potential...

CVE-2026-51896

infiniflow ragflow 0.25.3 contains improper access control in resume api/apps/connectorapp.py. Depending on the exposed entry, an attacker can perform unauthorized cross-session or privilege-crossing operations...

CVE-2026-51895

Ragflow 0.24.0 and prior contains improper access control in updatemetadatasetting api/apps/kbapp.py. Depending on the exposed entry, an attacker can perform unauthorized cross-session or privilege-crossing operations...

zeroheight-account-verification-bypass-CVE-2025-65925

CVE-2025-65925 — Control de Acceso Incorrecto en el Flujo de Creación de Cuentas de Zeroheight Fecha de divulgación: 2025-06-11 Fecha de corrección del proveedor según el proveedor: 2025-06-13 Fecha de validación del investigador: 2025-06-26 Descubierto por: Sneden Rebello Resumen Una ruta API...

Security Bulletin: IBM i is Affected by an Improper Validation Vulnerability in zlib [CVE-2026-27171]

Summary Zlib for IBM i is vulnerable to increased CPU consumption when using functions crc32combine64 and crc32combine64gen64 CVE-2026-27171 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-27171 DESCRIPTION: zlib before 1.3.2 allows CPU consumption via...

K000163494: PostgreSQL vulnerability CVE-2026-6469

Security Advisory Description Incorrect ownership assignment in PostgreSQL ALTER TABLE ALTER TYPE command reassigns ownership of dependent statistics objects to the current user. This wrongly allows the table owner to run DROP STATISTICS and ALTER STATISTICS via this improper ownership. It wrongl...

CVE-2026-0848

CVE-2026-0848 — NLTK StanfordSegmenter: Arbitrary Code Execution via Untrusted JAR Loading -red?style=for-the-badge -brightgreen?style=for-the-badge Overview Field| Details ---|--- CVE ID| CVE-2026-0848 Package| nltk Natural Language Toolkit Registry| PyPI Affected Versions| = 3.9.2 Vulnerability...

CVE-2026-11387-WooCommerce-SMS-OTP

CVE-2026-11387 SMS Alert ≤ 3.9.5 — unauthenticated privilege escalation via arbitrary password reset A critical improper-authentication flaw in the WordPress plugin SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery. When OTP verification is enabled for password...

CVE-2026-9055

CVE-2026-9055 — Amelia Booking Plugin Unauthenticated Privilege Escalation Research writeup by Sentinel AI Defense. Defensive analysis only — no working exploit or PoC is published here for this vulnerability. An unauthenticated privilege escalation vulnerability in the Amelia Premium WordPress...

CVE-2026-27872

Improper Privilege Management vulnerability in Johnson Controls Easy IO FG allows Brute Force. This issue affects Easy IO FG: before 2.0b52...

CVE-2026-15911

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation...

forticlient_ems_cve_2026_35616_poc.py

CVE-2026-35616 - FortiClient EMS API Authentication Bypass Detector ⚠️ CRITICAL SECURITY VULNERABILITY ⚠️ CVSS Score: 9.1 | CWE-284: Improper Access Control FortiClient EMS versions 7.4.5 through 7.4.6 📋 Description This detector identifies whether a FortiClient EMS server is vulnerable to...

CVE-2026-23498

CVE-2026-23498: Shopware의 Twig 렌더링 뷰에서 코드 생성 제어 미흡 개요 필드| 세부 정보 ---|--- CVE ID| CVE-2026-23498 심각도| HIGH 보안 권고| 보안 권고 보기 발견자| Lukasz Rybak 영향을 받는 제품 shopware/shopware 버전: = 6.7.0.0, = 6.7.0.0, 6.7.6.1 CWE 분류 CWE-94: 코드 생성 제어 불량 '코드 인젝션' 세부 정보 영향 CVE-2023-2017에서 Twig 필터가 허용된 함수로만 실행되도록 수정했습니다. 그러나...

EUVD-2026-91041

Improper Privilege Management vulnerability in Johnson Controls Easy IO FG allows Brute Force. This issue affects Easy IO FG: before 2.0b52...

CVE-2026-27872 EasyIO FG

Improper Privilege Management vulnerability in Johnson Controls Easy IO FG allows Brute Force. This issue affects Easy IO FG: before 2.0b52...

CVE-2026-27872

Johnson Controls Easy IO FG is affected by an Improper Privilege Management vulnerability (CWE-269) that allows for Brute Force attacks. This issue specifically impacts versions before 2.0b52 . While the vulnerability is documented, the provided documents do not specify the exact root cause, prac...