CVE-2026-109356

LibreNMS versions before 26.9.0 are susceptible to a missing authorization vulnerability in the PortsController::purge function. This flaw allows users with global-read (read-only) accounts to bypass necessary delete privileges by sending DELETE requests to the /ports/purge endpoint. By utilizing...

CVE-2026-109356 LibreNMS before 26.9.0 Missing Authorization in Port Purge via PortsController

LibreNMS before 26.9.0 contains a missing authorization vulnerability in PortsController::purge that allows global-read users to physically delete ports without delete privileges. Attackers with read-only accounts can send DELETE requests to /ports/purge, using purge=all to irreversibly erase eve...

EUVD-2026-97625

Grav Star Ratings 2.0.1 through 2.0.3 contains a missing authorization vulnerability that allows unauthenticated visitors to vote by bypassing client-only voteaccess and readonly enforcement. Attackers can use the anonymous nonce emitted by getData to submit votes directly to addVote, manipulatin...

CVE-2026-109323 Grav Star Ratings 2.0.1 through 2.0.3 Missing Server-Side vote_access Authorization

Grav Star Ratings 2.0.1 through 2.0.3 contains a missing authorization vulnerability that allows unauthenticated visitors to vote by bypassing client-only voteaccess and readonly enforcement. Attackers can use the anonymous nonce emitted by getData to submit votes directly to addVote, manipulatin...

CVE-2026-109323 Grav Star Ratings 2.0.1 through 2.0.3 Missing Server-Side vote_access Authorization

Grav Star Ratings 2.0.1 through 2.0.3 contains a missing authorization vulnerability that allows unauthenticated visitors to vote by bypassing client-only voteaccess and readonly enforcement. Attackers can use the anonymous nonce emitted by getData to submit votes directly to addVote, manipulatin...

CVE-2026-109323

The Grav Star Ratings plugin (versions 2.0.1 through 2.0.3 ) contains a missing server-side authorization vulnerability (CWE-862). This flaw allows unauthenticated visitors to bypass client-side vote_access and readonly enforcement. By utilizing an anonymous nonce obtained from the getData() func...

CVE-2026-109319 Grav Guestbook Plugin 0.5.0 and 0.5.1 Missing Authorization and CSRF in Moderation

Grav Guestbook plugin 0.5.0 and 0.5.1 contains missing authorization and cross-site request forgery vulnerabilities in Admin moderation actions delete, approve, and approveAll. Authenticated Admin users lacking the admin.guestbook permission, or external sites abusing a moderator's session via...

CVE-2026-109319 Grav Guestbook Plugin 0.5.0 and 0.5.1 Missing Authorization and CSRF in Moderation

Grav Guestbook plugin 0.5.0 and 0.5.1 contains missing authorization and cross-site request forgery vulnerabilities in Admin moderation actions delete, approve, and approveAll. Authenticated Admin users lacking the admin.guestbook permission, or external sites abusing a moderator's session via...

CVE-2026-109319

The Grav Guestbook plugin versions 0.5.0 and 0.5.1 are vulnerable to missing authorization and cross-site request forgery (CSRF) within the Admin moderation actions, specifically for delete , approve , and approveAll . The root cause allows authenticated Admin users without the admin.guestbook pe...

EUVD-2026-97621

Grav Guestbook plugin 0.5.0 and 0.5.1 contains missing authorization and cross-site request forgery vulnerabilities in Admin moderation actions delete, approve, and approveAll. Authenticated Admin users lacking the admin.guestbook permission, or external sites abusing a moderator's session via...

CVE-2026-109316

The Grav Data Manager plugin (versions 1.4.0 through 1.4.5) contains a missing authorization vulnerability. This flaw allows unauthenticated attackers to delete stored data files, such as form submissions, located under user/data/ via the classic Admin integration . Exploitation is possible by se...

CVE-2026-109316 Grav Data Manager 1.4.0 through 1.4.5 Unauthenticated File Deletion via Admin

Grav Data Manager plugin 1.4.0 through 1.4.5 contains a missing authorization vulnerability that allows unauthenticated attackers to delete stored data files via the classic Admin integration. Attackers can send a request with the delete parameter and known data type and filename to remove files...

CVE-2026-109316 Grav Data Manager 1.4.0 through 1.4.5 Unauthenticated File Deletion via Admin

Grav Data Manager plugin 1.4.0 through 1.4.5 contains a missing authorization vulnerability that allows unauthenticated attackers to delete stored data files via the classic Admin integration. Attackers can send a request with the delete parameter and known data type and filename to remove files...

EUVD-2026-97618

Grav Data Manager plugin 1.4.0 through 1.4.5 contains a missing authorization vulnerability that allows unauthenticated attackers to delete stored data files via the classic Admin integration. Attackers can send a request with the delete parameter and known data type and filename to remove files...

CVE-2026-109306

Craft CMS versions 5.0.0 before 5.10.14 are vulnerable to a missing authorization flaw in the AppController::actionSwitchToLicensedEdition() function. This flaw allows any authenticated user to modify the installed edition of the software. Specifically, low-privileged front-end users can trigger ...

CVE-2026-109306 Craft CMS 5.0.0 before 5.10.14 Missing Authorization via app/switch-to-licensed-edition

Craft CMS from 5.0.0 before 5.10.14 contains a missing authorization vulnerability in AppController::actionSwitchToLicensedEdition that lets any authenticated user change the installed edition. Low-privileged front-end users can call the action route when the licensed edition mismatches to...

EUVD-2026-97608

Craft CMS from 5.0.0 before 5.10.14 contains a missing authorization vulnerability in AppController::actionSwitchToLicensedEdition that lets any authenticated user change the installed edition. Low-privileged front-end users can call the action route when the licensed edition mismatches to...

CVE-2026-109306 Craft CMS 5.0.0 before 5.10.14 Missing Authorization via app/switch-to-licensed-edition

Craft CMS from 5.0.0 before 5.10.14 contains a missing authorization vulnerability in AppController::actionSwitchToLicensedEdition that lets any authenticated user change the installed edition. Low-privileged front-end users can call the action route when the licensed edition mismatches to...

CVE-2026-109296

Open WebUI versions prior to 0.11.4 are vulnerable to a missing authorization flaw (CWE-639) in the model routes. This vulnerability allows authenticated users to access disabled model provider backends by providing an explicit backend index as a path segment or query parameter on Ollama and Open...

CVE-2026-109296 Open WebUI before 0.11.4 Missing Authorization via Backend Index on Model Routes

Open WebUI before 0.11.4 contains a missing authorization vulnerability that allows authenticated users to reach disabled model provider backends by supplying an explicit backend index. Attackers can pass the index as a path segment or query parameter on Ollama and OpenAI-compatible listing route...