CVE-2026-88021

Consul and Consul Enterprise contain an authorization bypass in the Connect service mesh . When generating Envoy RBAC rules to enforce Connect intentions, Consul failed to correctly escape certain characters in service names , namespaces , and partitions , causing the resulting authorization rule...

CVE-2026-88861

Capgo Cap-go/capgo.app contains an authentication bypass affecting all versions no patched version available at time of publication. The Edge authorization path allows a password-only Supabase aal1 session to exercise privileged RBAC permissions even when the account has a verified MFA factor tha...

CVE-2026-88862

Capgo capgo.app backend through 12.242.4 does not validate parent-child delegation when processing the x-limited-key-id header. checkKeyByIdPg in supabase/functions/backend/utils/honomiddleware.ts resolves the attacker-supplied numeric API key ID using only the key ID, its expiration state, and t...

EUVD-2026-75412

Capgo capgo.app backend through 12.242.4 does not validate parent-child delegation when processing the x-limited-key-id header. checkKeyByIdPg in supabase/functions/backend/utils/honomiddleware.ts resolves the attacker-supplied numeric API key ID using only the key ID, its expiration state, and t...

CVE-2026-88862

Capgo (capgo.app) backend through version 12.242.4 contains an authentication bypass in the API key manager via the x-limited-key-id header. The root cause is insufficient parent-child delegation validation in checkKeyByIdPg() within supabase/functions/_backend/utils/hono_middleware.ts. An authen...

CVE-2026-88862 Capgo API Key Manager Authentication Bypass via x-limited-key-id

Capgo capgo.app backend through 12.242.4 does not validate parent-child delegation when processing the x-limited-key-id header. checkKeyByIdPg in supabase/functions/backend/utils/honomiddleware.ts resolves the attacker-supplied numeric API key ID using only the key ID, its expiration state, and t...

EUVD-2026-75411

Capgo Cap-go/capgo.app contains an authentication bypass affecting all versions no patched version available at time of publication. The Edge authorization path allows a password-only Supabase aal1 session to exercise privileged RBAC permissions even when the account has a verified MFA factor tha...

CVE-2026-88861

Capgo (Cap-go/capgo.app), a continuous deployment platform, has an authentication bypass in all versions with no patched release available. The root cause is in the Edge authorization path: the JWT middleware (findJWT() in hono_middleware.ts) accepts tokens without validating their assurance leve...

EUVD-2026-75410

Capgo fails to clean up channel permission overrides when a user's last organization role binding is deleted, leaving stale overrides active. Attackers can retain channel-specific permissions after their base RBAC access has been revoked to perform unauthorized actions like changing production OT...

CVE-2026-26416

CVE-2026-26416 授权绕过漏洞导致权限提升 漏洞概述 在 塔塔咨询服务公司（TCS）– Cognix Recon Client v3.0 中发现了一个权限提升漏洞。 该问题允许已认证用户通过构造恶意 API 请求，跨越既定角色边界提升权限。 该漏洞源于基于角色的访问控制（RBAC）逻辑中强制措施不足，使得可预测的对象标识符能够绕过授权验证机制。 技术分类（CWE） CWE-269 – 权限管理不当 CWE-863 – 授权不正确 CWE-639 – 通过用户控制的密钥绕过授权 受影响端点...

PT-2026-89373

Capgo capgo.app backend through 12.242.4 does not validate parent-child delegation when processing the x-limited-key-id header. checkKeyByIdPg in supabase/functions/ backend/utils/hono middleware.ts resolves the attacker-supplied numeric API key ID using only the key ID, its expiration state, and...

PT-2026-89372

Capgo Cap-go/capgo.app contains an authentication bypass affecting all versions no patched version available at time of publication. The Edge authorization path allows a password-only Supabase aal1 session to exercise privileged RBAC permissions even when the account has a verified MFA factor tha...

CVE-2018-1002105

CMPT733-Group110x90 CVE-2018-1002105 成员 : Abhishek Rungta, Shubham Saini, Siddhant Sood 环境搭建 一台 Linux 虚拟机（例如 Ubuntu 20.04） Minikube 用于本地部署 Kubernetes 以下任一旧版本（1.0.x—1.9.x, 1.10.0—1.10.10, 1.11.0—1.11.4, 1.12.0—1.12.2） 运行漏洞利用 我们提供了一个 VirtualBox 镜像文件（.ova 文件） 下载它并从中创建一个虚拟机。 提供的 ova 已预配置了 docker v18....

EUVD-2026-69419

gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion...

CVE-2026-86732 Craft CMS before 5.10.12 Remote Code Execution via element-index

Craft CMS versions before 5.10.12 contain a remote code execution vulnerability in the element-index endpoint that allows authenticated content editors to instantiate arbitrary classes through the criteria parameter. Attackers can inject a malicious class via criteriawithTransforms0class that...

CVE-2026-77968 Hawtio-operator: hawtio-operator: cluster-wide secrets read/write granted to operator serviceaccount

A flaw was found in hawtio-operator. The operator's ClusterRole grants secrets: create, get, list, update, watch across all namespaces. While the operator uses a controller-runtime label-selector cache as a memory optimization, the ServiceAccount token authorizes read access to every Secret in th...

CVE-2026-78234

A flaw was found in hawtio-operator. The operator reads the OpenShift Service CA private signing key from the openshift-service-ca namespace and uses it to mint client certificates with a Subject Common Name CN supplied by the author of a namespaced Hawtio custom resource. Because the operator...

CVE-2026-62650

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. Server-side authorization checks in the web-based management interface are not properly enforced, allowing role-based access control RBAC restrictions to be bypassed through manipulation of request data. This could allow an...

CVE-2026-62650

Reyrolle 7SR5 (all versions prior to V2.70 ) contains a server-side authorization flaw in its web-based management interface . Role-based access control (RBAC) restrictions can be bypassed by manipulating request data, enabling an authenticated, low-privileged remote attacker to escalate to an ad...

CVE-2026-62650

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. Server-side authorization checks in the web-based management interface are not properly enforced, allowing role-based access control RBAC restrictions to be bypassed through manipulation of request data. This could allow an...