CVE-2026-126157

An improper authentication vulnerability exists in Fortinet FortiMail versions 8.0.0 through 8.0.1 , 7.6.0 through 7.6.6 , 7.4.0 through 7.4.8 , and all versions of 7.2 . The root cause is a missing authentication for a critical function [CWE-306], which may allow an unauthenticated attacker to g...

CVE-2026-126157

A improper authentication vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated attacker to gain access to other users' secure email accounts via crafted HTTP requests...

CVE-2026-126496

1Panel-dev CordysCRM before 1.9.6 contains an authorization bypass vulnerability in CustomerContactController.get that allows authenticated users to read other users' contacts because no organization, owner or data-scope check is applied. Attackers holding ordinary contact or customer read...

CVE-2026-126496

1Panel-dev CordysCRM versions prior to 1.9.6 are vulnerable to an authorization bypass in the CustomerContactController.get function. The vulnerability exists because the application fails to perform necessary organization, owner, or data-scope checks. This allows authenticated users with basic c...

CVE-2026-126496 1Panel-dev CordysCRM before 1.9.6 Authorization Bypass via /account/contact/get/{id}

1Panel-dev CordysCRM before 1.9.6 contains an authorization bypass vulnerability in CustomerContactController.get that allows authenticated users to read other users' contacts because no organization, owner or data-scope check is applied. Attackers holding ordinary contact or customer read...

PT-2026-144915

1Panel-dev CordysCRM before 1.9.6 contains an authorization bypass vulnerability in CustomerContactController.get that allows authenticated users to read other users' contacts because no organization, owner or data-scope check is applied. Attackers holding ordinary contact or customer read...

CVE-2026-126496: 1Panel-dev CordysCRM: 1Panel-dev CordysCRM before 1.9.6 contains an authorization bypass vulnerability in CustomerContactController.get that…

1Panel-dev CordysCRM before 1.9.6 contains an authorization bypass vulnerability in CustomerContactController.get that allows authenticated users to read other users' contacts because no organization, owner or data-scope check is applied. Attackers holding ordinary contact or customer read...

Missing authentication for critical function

A missing authentication for critical function vulnerability CWE-306 in FortiMail may allow an unauthenticated attacker to gain access to other users' secure email accounts via crafted HTTP requests...

WordPress Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin < 8.11 - Subscriber+ Payment Retry on Other Users' Orders vulnerability

Subscriber+ Payment Retry on Other Users' Orders vulnerability discovered by ilqar rahimli in WordPress Plugin Directorist versions 8.11...

WordPress Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin < 8.11 - Subscriber+ Other Users' Pending Listing Publication vulnerability

Subscriber+ Other Users' Pending Listing Publication vulnerability discovered by GivMeInJ in WordPress Plugin Directorist versions 8.11...

CVE-2026-119649

Orchard CMS 1.10.3 through 1.11 contains an improper authorization vulnerability in MediaLibraryService.CheckMediaFolderPermission that allows authenticated Authors and Contributors to access other users' media. Attackers can display, clone, and delete other users' media items by content id and...

EUVD-2026-114065

Orchard CMS 1.10.3 through 1.11 contains an improper authorization vulnerability in MediaLibraryService.CheckMediaFolderPermission that allows authenticated Authors and Contributors to access other users' media. Attackers can display, clone, and delete other users' media items by content id and...

CVE-2026-119649 Orchard CMS 1.10.3 through 1.11 Improper Authorization via Media Library Folder Permission Check

Orchard CMS 1.10.3 through 1.11 contains an improper authorization vulnerability in MediaLibraryService.CheckMediaFolderPermission that allows authenticated Authors and Contributors to access other users' media. Attackers can display, clone, and delete other users' media items by content id and...

CVE-2026-119649

Orchard CMS versions 1.10.3 through 1.11 are vulnerable to an improper authorization flaw within the MediaLibraryService.CheckMediaFolderPermission() method. This vulnerability allows authenticated users with Author or Contributor roles to bypass permission checks and access media belonging to ot...

CVE-2026-119649 Orchard CMS 1.10.3 through 1.11 Improper Authorization via Media Library Folder Permission Check

Orchard CMS 1.10.3 through 1.11 contains an improper authorization vulnerability in MediaLibraryService.CheckMediaFolderPermission that allows authenticated Authors and Contributors to access other users' media. Attackers can display, clone, and delete other users' media items by content id and...

CVE-2026-119649: OrchardCMS Orchard: Orchard CMS 1.10.3 through 1.11 contains an improper authorization vulnerability in…

Orchard CMS 1.10.3 through 1.11 contains an improper authorization vulnerability in MediaLibraryService.CheckMediaFolderPermission that allows authenticated Authors and Contributors to access other users' media. Attackers can display, clone, and delete other users' media items by content id and...

PT-2026-133579

Orchard CMS 1.10.3 through 1.11 contains an improper authorization vulnerability in MediaLibraryService.CheckMediaFolderPermission that allows authenticated Authors and Contributors to access other users' media. Attackers can display, clone, and delete other users' media items by content id and...

Jonas Kalderstam NoNonsense Notes Security Vulnerabilities

Jonas Kalderstam’s NoNonsense Notes has a security vulnerability stemming from insecure permissions in the NotificationHelper component. Unauthorized attackers can exploit this flaw by providing a note ID and writing to other users’ notes...

CVE-2026-116017 Xiaozhi-esp32-server before 0.9.8 IDOR via device address-book endpoint

Xiaozhi-esp32-server before 0.9.8 contains an insecure direct object reference vulnerability in the manager-api DeviceController.getAddressBook handler that allows authenticated users to read other users' device address books. Attackers with a normal or self-registered account can request...

CVE-2026-113606 Stirling-PDF 3.0.0 through 3.2.0 Authorization Bypass via Processing Folders

Stirling-PDF 3.0.0 through 3.2.0 contains an authorization bypass vulnerability that allows authenticated users to access other users' stored files by pointing a processing folder at the server storage directory. Attackers can create a folder via POST /api/v1/processing-folders targeting storage/...