PT-2026-110207

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController delete handler that allows low-privileged authenticated users to delete message records. Attackers can send DELETE requests with arbitrary id values to remove any sys sms row, erasing records of sen...

PT-2026-110206

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageTemplateController delete handler that allows any authenticated user to delete message templates. Low-privileged attackers can obtain template ids from the unguarded list endpoint and delete shipped notificati...

PT-2026-110208

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the queryChildrenByUsername handler within the 'SysUserController'. This issue allows any authenticated user to retrieve account records of other users. By providing...

PT-2026-110174

UnicomAI Wanwu through 0.6.5 contains a missing authorization vulnerability that allows any authenticated enabled user to revoke other users' AppKeys for arbitrary apps via the unpublish endpoint. Attackers can supply a target appId and appType from the exploration marketplace to delete other...

PT-2026-110195

🚨 CVE-2026-108873 JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to modify any department by calling PUT /sys/user/doUpdateDepartInfo. Attackers can supply a department id to rename or re-parent it and replace or remove its...

PT-2026-110191

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description Low-privileged authenticated users can send forged system announcements to any user via WebSocket, WeCom, DingTalk, and Feishu. This is possible by calling the POST '/sys/api/sendSysAnnouncement'...

PT-2026-110188

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description Authenticated users can read permissions for any account due to missing authorization in the queryUserAuths handler. Low-privileged attackers can provide an arbitrary userId parameter to retrieve t...

PT-2026-110165

Name of the Vulnerable Software and Affected Versions CoreShop versions prior to 2026.2.3 Description Low-privileged backend users can list permission-restricted resources due to a missing authorization check in the listAction function of the ResourceController. Authenticated Pimcore users withou...

PT-2026-110200

🚨 CVE-2026-108878 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController queryById handler that allows low-privileged authenticated users to read any AI application configuration. Attackers can enumerate application ids via the unguarded /airag/app/listDi...

PT-2026-110182

🚨 CVE-2026-108863 Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attackers to access the Envoy admin interface, which is bound to all host interfaces on port 9901. Attackers can request the /config dump endpoint to read configured...

PT-2026-110209

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCommentController exportXls handler that allows any authenticated user to export all comments. Low-privileged attackers can request /sys/comment/exportXls to download every sys comment row, including comment text and...

PT-2026-110211

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController getUserDetailByUserId handler that allows any authenticated user to read other users' details. Low-privileged attackers can supply arbitrary userId values to retrieve real names, usernames, emails, pho...

PT-2026-110210

🚨 CVE-2026-108888 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartRoleController exportXls handler that allows any authenticated user to export department roles. Low-privileged attackers holding only the default minimal role can call...

PT-2026-110190

🚨 CVE-2026-108868 JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to publish templated system announcements via POST /sys/api/sendBusTemplateAnnouncement. Low-privileged attackers can supply templateCode, toUser, and a forged fromUser to...

PT-2026-110120

🚨 CVE-2026-108717 Combodo iTop 3.1.0 through 3.3.0 contains a missing authorization vulnerability in LinkSetController.php that allows authenticated console users to bypass profile grants by supplying arbitrary class and key parameters. Attackers can invoke the linkset delete, detach and...

PT-2026-110136

Name of the Vulnerable Software and Affected Versions Frappe HR hrms versions 14.x through 15.64.3 Frappe HR hrms versions prior to 16.11.0 Description An authorization flaw exists in the whitelisted expire allocation method. This allows authenticated users who do not possess HR roles to expire a...

PT-2026-110135

🚨 CVE-2026-108732 Frappe HR hrms before 16.11.0, including all 14.x and 15.x releases through 15.64.3, contains a missing authorization vulnerability in the whitelisted get account and amount method that lets authenticated users read payroll amounts. Attackers without HR roles can call the method...

PT-2026-110147

Name of the Vulnerable Software and Affected Versions CloudBeaver versions prior to 25.3.6 Description A missing authorization issue exists in the WebSQLResultServlet endpoint. This allows any user with a valid web session to access LOB Large Object export files belonging to other users stored in...

PT-2026-110115

SuiteCRM through 7.15.2 and 8.10.2 contains a missing authorization vulnerability in the DetailUserRole entry point that allows authenticated non-admin users to view other users' ACL data. Attackers can supply another non-admin user's id in the record parameter to read that user's assigned roles...

PT-2026-110145

🚨 CVE-2026-108742 CloudBeaver through 25.3.5 contains a missing authorization vulnerability in the initConnection GraphQL mutation that lets view-only shared-project members persist credentials without datasource-edit permission. Attackers can set saveCredentials and sharedCredentials flags with...