PT-2026-86988

Missing Authorization vulnerability in Viszt Péter Csomagpontok és szállítási címkék WooCommerce-hez allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Csomagpontok és szállítási címkék WooCommerce-hez: from n/a before 4.2.8...

PT-2026-86997

Missing Authorization vulnerability in Unbounce Unbounce Landing Pages unbounce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Unbounce Landing Pages: from n/a through 1.1.4...

PT-2026-87086

Name of the Vulnerable Software and Affected Versions Ivanti Neurons for ITSM versions prior to 2026.2 Description A missing authorization issue allows a remote authenticated attacker to execute arbitrary code on the server. Recommendations At the moment, there is no information about a newer...

PT-2026-87084

Name of the Vulnerable Software and Affected Versions Ivanti Neurons for ITSM versions prior to 2026.2 Description A missing authorization issue allows a remote authenticated attacker to execute arbitrary code on the server. Recommendations At the moment, there is no information about a newer...

PT-2026-87105

A vulnerability was identified in aircheng-org iWebShop-5 up to 5.15. This issue affects the function Update::index of the file controllers/update.php. The manipulation leads to missing authorization. Remote exploitation of the attack is possible. The exploit is publicly available and might be...

PT-2026-87085

Name of the Vulnerable Software and Affected Versions Ivanti Neurons for ITSM versions prior to 2026.2 Description A missing authorization issue allows a remote authenticated attacker to execute arbitrary code on the server. Recommendations At the moment, there is no information about a newer...

PT-2026-87092

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager Mobile versions prior to 12.10.0.0 Ivanti Endpoint Manager Mobile versions prior to 12.9.0.2 Ivanti Endpoint Manager Mobile versions prior to 12.8.0.4 Description A missing authorization issue allows a remote...

PT-2026-87122

AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerability in the SocialMediaPublisher plugin's add.json.php endpoint that allows authenticated users to modify other users' OAuth token records. Attackers can supply arbitrary row IDs to overwrite another...

PT-2026-87142

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could abuse missing authorization. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service...

WordPress Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce plugin <= 4.1.22 - Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation vulnerability

Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation vulnerability discovered by Wordfence PRISM in WordPress Plugin WP Event Solution versions = 4.1.22...

PT-2026-87923

Name of the Vulnerable Software and Affected Versions Data Sharing Service Client affected versions not specified Description Missing authorization in the Data Sharing Service Client allows an authorized attacker to elevate privileges locally, which can lead to unauthorized system impact...

PT-2026-88108

Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally...

PT-2026-88107

Name of the Vulnerable Software and Affected Versions Microsoft Azure Entra ID affected versions not specified Description Missing authorization in the Microsoft Azure Entra ID compatibility package allows an authorized attacker to elevate privileges over a network. Recommendations At the moment,...

PT-2026-87682

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

PT-2026-87637

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description Missing authorization allows an authorized attacker to elevate privileges over a network, which enables them to affect the system. Recommendations At the moment, there is no...

PT-2026-87415

Name of the Vulnerable Software and Affected Versions Windows Modern Device Management MDM affected versions not specified Description Missing authorization in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is...

PT-2026-87418

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description Missing authorization allows an authorized attacker to elevate privileges over a network, which enables them to affect the system. Recommendations At the moment, there is no...

PT-2026-87438

Name of the Vulnerable Software and Affected Versions Windows SMB Server affected versions not specified Description Missing authorization in the Windows SMB Server allows an authorized attacker to disclose sensitive information locally, which can subsequently affect the system. Recommendations A...

PT-2026-87491

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

PT-2026-87480

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description Missing authorization in the Microsoft Windows Search Component allows an authorized attacker to perform local tampering, which can affect the system. Recommendatio...