114323 matches found
CVE-2026-27434: Missing Authorization
Missing Authorization vulnerability in sc Internet Vivoo WP Rentals wprentals allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Rentals: from n/a through 3.14.2...
CVE-2026-103323: Missing Authorization
The Integration for Epos Now and WooCommerce WordPress plugin before 4.11.2 does not perform an authorization check on one of its REST endpoints, allowing unauthenticated users to retrieve the site's scheduled background tasks and their arguments, which include order identifiers and, when...
CVE-2026-96335: Missing Authorization
Missing Authorization vulnerability in WPMU DEV Forminator allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Forminator: from n/a through 1.57.2...
CVE-2026-104390: Missing Authorization
Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.27...
Linux Distros Unpatched Vulnerability : CVE-2026-106288
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access...
Linux Distros Unpatched Vulnerability : CVE-2026-106388
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in DataTransfer in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain...
Linux Distros Unpatched Vulnerability : CVE-2026-106410
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI...
CVE-2026-106196
Missing authorization in Navigation in Google Chrome on on iOS prior t...
CVE-2026-106365
Missing authorization in Animation in Google Chrome prior to 155.0.805...
PT-2026-107493
Name of the Vulnerable Software and Affected Versions smart proxy dynflow affected versions not specified Description Missing authentication exists in remote-execution task updates within the smart proxy dynflow package. When remote execution is configured in pull or pull-mqtt mode, the progress...
Linux Distros Unpatched Vulnerability : CVE-2026-106418
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via...
Linux Distros Unpatched Vulnerability : CVE-2026-106194
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged...
PT-2026-107564
LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess mode HTTP server that allows remote unauthenticated attackers to access management endpoints listening on all interfaces by default. Attackers can read environment credentials via GET /env and configuration...
CVE-2026-106267
Missing authorization in Network in Google Chrome prior to 155.0.8059...
CVE-2026-62179: Missing Authorization
PraisonAI is a multi-agent teams system. In praisonai-platform prior to version 0.1.9, issue dependency deletion can be authorized against the wrong side of a dependency edge. A workspace member cannot delete a dependency through the owner-created issue endpoint, but can delete the same dependenc...
CVE-2026-106363
Missing authorization in FullScreen in Google Chrome prior to 155.0.80...
CVE-2026-106418
Missing authorization in Network in Google Chrome prior to 155.0.8059...
PT-2026-107563
LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess coordinator that allows remote unauthenticated attackers to access its HTTP fleet control API listening on all interfaces by default. Attackers can register or deregister instances via /instances, overwrite...