CVE-2026-57996

phpMyFAQ prior to 4.1.5 contains a privilege-escalation flaw in the admin/user-add endpoint. A delegated administrator with USER_ADD/EDIT/DELETE can call POST /admin/api/user/add using isSuperAdmin: true and attacker-chosen credentials to create a SuperAdmin account, enabling full instance takeov...

CVE-2026-59235

Missing Authorization CWE-862 in BankAccountListController app/Http/Controllers/Api/BankAccount/BankAccountListController.php, exposed at GET /api/bank-account, in Prospero Flow CRM companyid-get, performing only company scoping and no role or permission check before returning the data. This...

MINI-5954-HWXH-7CRJ

Bulletin has no description...

MINI-J7RX-6RC8-PP28

Bulletin has no description...

MINI-JP83-53VC-CQG2

Bulletin has no description...

MINI-5R5Q-Q4CC-53GW

Bulletin has no description...

MINI-9PJG-P2WW-X9J4

Bulletin has no description...

MINI-5QJM-2587-CX3M

Bulletin has no description...

MINI-2Q5G-WRHH-GG4H

Bulletin has no description...

MINI-78Q8-5RQ9-4J2X

Bulletin has no description...

MINI-QHXC-R6FX-W59V

Bulletin has no description...

MINI-6MWJ-9WF9-W4MR

Bulletin has no description...

MINI-2G86-HXJ8-M39W

Bulletin has no description...

MINI-MJFR-GHVH-6VP2

Bulletin has no description...

MINI-VQRG-6WMR-3WVV

Bulletin has no description...

MINI-FGVJ-Q799-P9V3

Bulletin has no description...

MINI-JH4C-7G9R-GPJG

Bulletin has no description...

MINI-H7VP-5RRQ-5JV7

Bulletin has no description...

MINI-WM5C-967M-JH65

Bulletin has no description...

MINI-85JM-GH4P-4GRW

Bulletin has no description...