CVE-2026-114475 Missing Authorization in hMailServer

Missing authorization in the REST role-management routes of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a remote authenticated user whose credential is confined to named domains to modify a custom role that accounts in other domains hold, and to create custom roles and delete any tha...

CVE-2026-114475

Progressive Robot hMailServer versions 6.3.4 through 6.3.6 are vulnerable to missing authorization in the REST role-management routes. The root cause is an authorization gate failure that allows a remote authenticated user with a credential confined to specific named domains to access routes requ...

CVE-2026-104948

WarehousePG WHPG 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability CWE-862 in the built-in cluster expansion functions gpexpandlockcatalog and gpexpandbumpversion. Any authenticated database role can run them, and neither checks privileges. A...

CVE-2026-104949

WarehousePG WHPG 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability CWE-862 in gpaddcoordinatorstandby. The function is named gpaddmasterstandby in WHPG 6, and WHPG 7 keeps that name as an alias. Unlike the other segment add and remove functions, i...

CVE-2026-104947

WarehousePG WHPG 7.2.1 through 7.6.0 is affected by a missing authorization vulnerability CWE-862 in the built-in function gplogbackendmemorycontexts. Any authenticated database role can run this function without a GRANT. It also gets around the superuser restriction that PostgreSQL places on the...

EUVD-2026-107280

Missing Authorization vulnerability in bjorntech BjornTech Swish for WooCommerce woo-swish-e-commerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BjornTech Swish for WooCommerce: from n/a through 3.7.8...

CVE-2026-104949

WarehousePG WHPG 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability CWE-862 in gpaddcoordinatorstandby. The function is named gpaddmasterstandby in WHPG 6, and WHPG 7 keeps that name as an alias. Unlike the other segment add and remove functions, i...

CVE-2026-104949

WarehousePG (WHPG) versions 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are susceptible to a missing authorization vulnerability (CWE-862 ) in the gp_add_coordinator_standby() function (known as gp_add_master_standby() in WHPG 6). The root cause is the lack of superuser privilege requirements f...

EUVD-2026-107264

WarehousePG WHPG 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability CWE-862 in gpaddcoordinatorstandby. The function is named gpaddmasterstandby in WHPG 6, and WHPG 7 keeps that name as an alias. Unlike the other segment add and remove functions, i...

CVE-2026-104948

WarehousePG (WHPG) versions 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in the built-in cluster expansion functions gp_expand_lock_catalog() and gp_expand_bump_version(). Because these functions do not check privileges, any authent...

EUVD-2026-107263

WarehousePG WHPG 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability CWE-862 in the built-in cluster expansion functions gpexpandlockcatalog and gpexpandbumpversion. Any authenticated database role can run them, and neither checks privileges. A...

CVE-2026-104948

WarehousePG WHPG 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability CWE-862 in the built-in cluster expansion functions gpexpandlockcatalog and gpexpandbumpversion. Any authenticated database role can run them, and neither checks privileges. A...

EUVD-2026-107262

WarehousePG WHPG 7.2.1 through 7.6.0 is affected by a missing authorization vulnerability CWE-862 in the built-in function gplogbackendmemorycontexts. Any authenticated database role can run this function without a GRANT. It also gets around the superuser restriction that PostgreSQL places on the...

CVE-2026-104947

WarehousePG WHPG 7.2.1 through 7.6.0 is affected by a missing authorization vulnerability CWE-862 in the built-in function gplogbackendmemorycontexts. Any authenticated database role can run this function without a GRANT. It also gets around the superuser restriction that PostgreSQL places on the...

CVE-2026-104947

WarehousePG (WHPG) versions 7.2.1 through 7.6.0 are vulnerable to a missing authorization vulnerability (CWE-862 ) in the built-in function gp_log_backend_memory_contexts(). Any authenticated database role can execute this function without a GRANT , bypassing the superuser restrictions imposed by...

CVE-2026-114389

Chamilo LMS from 2.0.0-alpha.4 before 2.0.0-RC.3 contains a missing authorization vulnerability in AiController::openAnswerGrade that allows any authenticated user to obtain AI grading of other students' exam attempts. Attackers can enumerate exeId and questionId values sent to the openanswergrad...

CVE-2026-114390

Chamilo LMS from 2.0.0-alpha.1 before 2.0.0-RC.3 contains a missing authorization vulnerability in legacy AJAX handlers under public/main/inc/ajax/ that exposes user names and certificates. Unauthenticated or low-privileged users can call actions like getusersbygroupcourse, userbyallroles, and...

CVE-2026-114387

Shopper from 2.0.0 before 2.6.0 contains a missing authorization vulnerability that allows admin-panel users holding only accessdashboard to create administrators and grant permissions. Attackers can call CreateTeamMember::store or Permissions::togglePermission directly over /livewire/update to...

CVE-2026-111849

Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.5...

CVE-2026-114120

SchedulePress before 5.3.5 contains a missing authorization vulnerability that allows authenticated Contributor-level users to change any post's status and publish date via the wpspeleditorform AJAX action. Attackers can reuse the wpsp-el-editor nonce from the Elementor modal to unpublish or...