115690 matches found
CVE-2026-100287
Missing authorization in the attachment history API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user to permanently delete or restore vault attachments via a crafted API request...
CVE-2026-100286
The Devolutions Server (version 2026.3.5.0 and earlier) is affected by a missing authorization vulnerability in the data source settings API . This flaw allows an authenticated non-administrative user to disclose integration secrets by sending a crafted API request. Exploitation details are not p...
CVE-2026-100286
Missing authorization in the data source settings API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated non-administrative user to disclose integration secrets via a crafted API request...
CVE-2026-100286
Missing authorization in the data source settings API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated non-administrative user to disclose integration secrets via a crafted API request...
EUVD-2026-89016
Missing authorization in the data source settings API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated non-administrative user to disclose integration secrets via a crafted API request...
CVE-2026-71899
A missing authorization vulnerability exists in the query-dynamic-sub-workflows API of Apache DolphinScheduler. The API does not properly verify whether the authenticated user has permission to access the workflows being queried. An authenticated user who does not have permission to access a...
CVE-2026-71899
Apache DolphinScheduler versions 3.2.0 before 3.4.3 are susceptible to a missing authorization vulnerability in the query-dynamic-sub-workflows API. The root cause is that the API fails to verify if an authenticated user possesses the necessary permissions to access the specific workflows being q...
EUVD-2026-88816
A missing authorization vulnerability exists in the query-dynamic-sub-workflows API of Apache DolphinScheduler. The API does not properly verify whether the authenticated user has permission to access the workflows being queried. An authenticated user who does not have permission to access a...
CVE-2026-71899 Apache DolphinScheduler: Missing Authorization in query-dynamic-sub-workflows API Leads to Information Disclosure
A missing authorization vulnerability exists in the query-dynamic-sub-workflows API of Apache DolphinScheduler. The API does not properly verify whether the authenticated user has permission to access the workflows being queried. An authenticated user who does not have permission to access a...
CVE-2026-71899 Apache DolphinScheduler: Missing Authorization in query-dynamic-sub-workflows API Leads to Information Disclosure
A missing authorization vulnerability exists in the query-dynamic-sub-workflows API of Apache DolphinScheduler. The API does not properly verify whether the authenticated user has permission to access the workflows being queried. An authenticated user who does not have permission to access a...
CVE-2026-87748
Missing Authorization vulnerability in Interprobe Information Technologies Inc. Qorela DC allows Privilege Abuse. This issue affects Qorela DC: from 1.6.1-RC29 before v1.6.2...
CVE-2026-101267 Revenue information leak
A missing permission check allowed low-privileged users with access to an event but without access to the event's orders to extract some specific information. This information includes the number of attendees and the total revenue...
EUVD-2026-88748
A missing permission check allowed low-privileged users with access to an event but without access to the event's orders to extract some specific information. This information includes the number of attendees and the total revenue...
CVE-2026-87748
A Missing Authorization vulnerability exists in Interprobe Information Technologies Inc. Qorela DC affecting versions 1.6.1-RC29 through v1.6.2 . This flaw enables Privilege Abuse , allowing an attacker to escalate permissions. While the technical root cause is not detailed in the provided docume...
CVE-2026-87748 Privilege Escalation via Account Takeover in Interprobe's Qorela DC
Missing Authorization vulnerability in Interprobe Information Technologies Inc. Qorela DC allows Privilege Abuse. This issue affects Qorela DC: from 1.6.1-RC29 before v1.6.2...
EUVD-2026-88744
Missing Authorization vulnerability in Interprobe Information Technologies Inc. Qorela DC allows Privilege Abuse. This issue affects Qorela DC: from 1.6.1-RC29 before v1.6.2...
CVE-2026-87748 Privilege Escalation via Account Takeover in Interprobe's Qorela DC
Missing Authorization vulnerability in Interprobe Information Technologies Inc. Qorela DC allows Privilege Abuse. This issue affects Qorela DC: from 1.6.1-RC29 before v1.6.2...
Exploit for Missing Authentication for Critical Function in Qualcomm Ar9380_Firmware
POCO M7 Plus SM6375 - Jailbreak Root Research Disclaime...
CVE-2026-8937
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to read private child issue contents, including titles and descriptions, from projects...
Ivanti Neurons ITSM CVE-2026-12645 Detect
Detects Ivanti Neurons for ITSM formerly HEAT Service Management instances likely affected by CVE-2026-12645/12646/12647 missing authorization RCE and CVE-2026-12650 deserialization RCE. Fingerprints Login.aspx / AutomationService.svc surfaces and flags releases before 2026.2 when version metadat...