PT-2026-97516

Name of the Vulnerable Software and Affected Versions Easy Store versions 1.0.0 through 3.0.0 Description Broken Access Control ACL Bypass exists in the ApiController record editing functionality. The allowEdit function in ApiController.php contains a hardcoded return value of true, which bypasse...

PT-2026-67622

Affected software - Product: Poweradmin web front-end for PowerDNS - Version tested: master, commit 7f28c3a97 also reachable in the 4.x release line — the record-edit code is the same - Component: record editing web UI - Vulnerability type: Broken Access Control / Insecure Direct Object Reference...

CVE-2023-49783

CVE-2023-49783 affects SilverStripe Admin. In 1.x before 1.13.19 and 2.x before 2.1.8, users who lack edit/delete permissions for ModelAdmin records can still edit/delete records via the CSV import form if they have create permissions. The issue can enable unintended record modification, though t...