CVE-2026-108726: Missing Authorization

GLPI through 12.0.0 contains a missing authorization vulnerability in ajax/map.php that allows authenticated low-privileged users to search itemtypes they cannot view by omitting the canView check. Attackers can submit crafted itemtype and search criteria for types like Contact, Supplier, Contrac...

CVE-2026-108712: Missing Authorization

SuiteCRM through 7.15.2 and 8.10.2 contains a missing authorization vulnerability in the DetailUserRole entry point that allows authenticated non-admin users to view other users' ACL data. Attackers can supply another non-admin user's id in the record parameter to read that user's assigned roles...

PT-2026-110193

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the saveDatarule handler of the SysDepartRoleController. This issue allows authenticated users with low privileges to modify department role data rules by sending...

PT-2026-110133

Name of the Vulnerable Software and Affected Versions Raven versions 2.0.0 through 3.0.0 Description Missing authorization in legacy methods within raven/api/raven message.py allows authenticated non-members to bypass workspace membership checks. By using predictable channel IDs, an attacker can...

PT-2026-109999

Wukong HRM through commit 186115e contains a missing authorization vulnerability because EmployeeAspect assigns every caller the HR administrator role and EmployeeUtil data-scope checks return all employees. Any authenticated low-privileged employee can read payslips, salary records, bank cards a...

PT-2026-109997

Name of the Vulnerable Software and Affected Versions eladmin versions prior to commit 55fbf70 Description A missing authorization issue exists in the downloadS3Storage handler. This allows any authenticated user to retrieve stored object URLs even if they lack the necessary storage permissions. ...

PT-2026-110198

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the putCancelQuit handler of SysUserController. This issue allows any authenticated user to cancel user resignations. Low-privileged attackers can restore ended,...

PT-2026-110134

Name of the Vulnerable Software and Affected Versions Raven versions 2.0.0 through 3.0.0 Description Authenticated users with the Raven User role can bypass the can only join via invite setting to join invite-only Public workspaces. This is achieved by calling the join workspace method, allowing...

CVE-2026-108697: Missing Authorization

CoreShop through 2026.2.2 contains a missing authorization vulnerability that allows low-privileged backend users to list permission-restricted resources because ResourceController listAction skips the isGrantedOr403 check. Authenticated Pimcore users lacking resource permissions can request the...

PT-2026-110120

🚨 CVE-2026-108717 Combodo iTop 3.1.0 through 3.3.0 contains a missing authorization vulnerability in LinkSetController.php that allows authenticated console users to bypass profile grants by supplying arbitrary class and key parameters. Attackers can invoke the linkset delete, detach and...

PT-2026-109982

Name of the Vulnerable Software and Affected Versions Eladmin versions prior to 2.8 Description Low-privileged authenticated users can bypass the storage:add permission due to missing authorization in the uploadPicture handler of the LocalStorageController. By sending POST requests containing fil...

PT-2026-110130

🚨 CVE-2026-108727 EdgeEver through 1.108.0 contains a missing authorization vulnerability in the Hono API memo-template routes that allows holders of scoped API tokens to bypass token scope restrictions because template handlers never call requireScopes. Attackers with a token lacking write:memos...

CVE-2026-108703: Missing Authorization

CordysCRM through 1.9.3 contains a missing authorization vulnerability in POST /approval-resource/push that allows authenticated users to submit any resource for approval without ownership checks. Low-privileged attackers can supply arbitrary resourceId values for contracts, invoices, quotations ...

PT-2026-109992

Name of the Vulnerable Software and Affected Versions 1Panel-dev CordysCRM versions prior to 1.9.2 Description An authorization flaw exists in the sortModule handler within the ContractController. The endpoint 'POST /contract/sort' lacks necessary permission annotations, allowing authenticated...

PT-2026-110191

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description Low-privileged authenticated users can send forged system announcements to any user via WebSocket, WeCom, DingTalk, and Feishu. This is possible by calling the POST '/sys/api/sendSysAnnouncement'...

PT-2026-110051

Name of the Vulnerable Software and Affected Versions KeyWord Collector versions prior to 1.5 Description Lack of authorization and nonce checks when saving settings allows unauthenticated attackers to perform a stored Cross-Site Scripting XSS attack. This occurs because the plugin fails to escap...

PT-2026-110208

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the queryChildrenByUsername handler within the 'SysUserController'. This issue allows any authenticated user to retrieve account records of other users. By providing...

PT-2026-110205

🚨 CVE-2026-108883 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the editThirdAppConfig handler that allows any authenticated user to modify third-party application configurations. Low-privileged attackers can replace client id, client secret, agent id and corp id of...

PT-2026-110158

Name of the Vulnerable Software and Affected Versions Abilityai Trinity versions prior to 0.9.6 Description A missing authorization issue exists in the Telegram router. This allows agent-scoped MCP API keys to execute binding operations that should be restricted to humans. An attacker who gains...

PT-2026-110165

Name of the Vulnerable Software and Affected Versions CoreShop versions prior to 2026.2.3 Description Low-privileged backend users can list permission-restricted resources due to a missing authorization check in the listAction function of the ResourceController. Authenticated Pimcore users withou...