CVE-2026-69453: Missing Authorization

Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...

CVE-2026-76963: Missing Authorization

Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated attacker could gain unauthorized access to sensitive system configuration information. Successful exploitation could result in exposure of security relevant settings and internal...

PT-2026-87050

Cvlaunchd contained a missing authorization issue affecting command execution authorization. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X...

CVE-2026-81904: Missing Authorization

Concrete CMS below 9.5.3 registered view assets for every sub-block of a Stack, Container, or layout area without checking whether the requesting user could view that sub-block. An unauthenticated visitor could recover configuration values emitted by a restricted sub-block's asset registration —...

PT-2026-87491

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-69641: Missing Authorization

Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-72966: Missing Authorization

Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally...

CVE-2026-73014: Missing Authorization

Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally...

CVE-2026-81781: Missing Authorization

Missing Authorization vulnerability in Unbounce Unbounce Landing Pages unbounce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Unbounce Landing Pages: from n/a through 1.1.4...

CVE-2026-73318: Incorrect Authorization

XenForo before 2.3.13 contains a missing authorization vulnerability in the force-agreement controller that allows any ACP administrator to access and submit force-agreement forms regardless of their assigned permissions. Attackers can bypass the option permission declared in the navigation...

CVE-2026-12645: Missing Authorization

A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...

PT-2026-87418

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description Missing authorization allows an authorized attacker to elevate privileges over a network, which enables them to affect the system. Recommendations At the moment, there is no...

PT-2026-87063

Name of the Vulnerable Software and Affected Versions XenForo versions prior to 2.3.13 Description A missing authorization issue exists in the force-agreement controller. This allows any ACP administrator to access and submit force-agreement forms, bypassing the assigned permissions and the optio...

CVE-2026-12646: Missing Authorization

A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...

PT-2026-88611

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Missing authorization in DevTools allows a remote attacker to obtain cross-origin data through the use of a crafted Chrome extension. Recommendations Update Google Chrome to version...

Security Bulletin: Triton Inference Server - September 2026

NVIDIA has released a software update for NVIDIA® Triton Inference Server. To protect your system, clone or update this software to Triton Inference Server r26.07 or later from the NVIDIA Triton Inference Server GitHub repo. Go to NVIDIA Product Security. Details NVIDIA has released a software...

PT-2026-87415

Name of the Vulnerable Software and Affected Versions Windows Modern Device Management MDM affected versions not specified Description Missing authorization in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is...

PT-2026-87085

Name of the Vulnerable Software and Affected Versions Ivanti Neurons for ITSM versions prior to 2026.2 Description A missing authorization issue allows a remote authenticated attacker to execute arbitrary code on the server. Recommendations At the moment, there is no information about a newer...

CVE-2026-86731: Missing Authorization

Craft CMS versions 5.0.0-RC1 through 5.10.11 are missing an admin-target guard in UsersController::actionActivateUser the users/activate-user action. While the action requires the administrateUsers permission, it does not call requireAdmin when the targeted user is an administrator, unlike the...

CVE-2026-12647: Missing Authorization

A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...