CVE-2026-114475

Missing authorization in the REST role-management routes of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a remote authenticated user whose credential is confined to named domains to modify a custom role that accounts in other domains hold, and to create custom roles and delete any tha...

CVE-2026-114475 Missing Authorization in hMailServer

Missing authorization in the REST role-management routes of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a remote authenticated user whose credential is confined to named domains to modify a custom role that accounts in other domains hold, and to create custom roles and delete any tha...

CVE-2026-114475 Missing Authorization in hMailServer

Missing authorization in the REST role-management routes of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a remote authenticated user whose credential is confined to named domains to modify a custom role that accounts in other domains hold, and to create custom roles and delete any tha...

CVE-2026-114475

Progressive Robot hMailServer versions 6.3.4 through 6.3.6 are vulnerable to missing authorization in the REST role-management routes. The root cause is an authorization gate failure that allows a remote authenticated user with a credential confined to specific named domains to access routes requ...

EUVD-2026-107318

Missing authorization in the REST role-management routes of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a remote authenticated user whose credential is confined to named domains to modify a custom role that accounts in other domains hold, and to create custom roles and delete any tha...

PT-2026-120653

Missing authorization in the REST role-management routes of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a remote authenticated user whose credential is confined to named domains to modify a custom role that accounts in other domains hold, and to create custom roles and delete any tha...

CVE-2026-106705

ELADMIN eladmin-mp up to 2.7 contains an improper access control vulnerability in the role management module. The endpoint PUT /api/roles/menu RoleController.updateRoleMenu authorizes the request only by comparing the target role's level with the caller's minimum level. The application neither...

CVE-2026-106705

ELADMIN eladmin-mp up to 2.7 contains an improper access control vulnerability in the role management module. The endpoint PUT /api/roles/menu RoleController.updateRoleMenu authorizes the request only by comparing the target role's level with the caller's minimum level. The application neither...

EUVD-2026-102904

ELADMIN eladmin-mp up to 2.7 contains an improper access control vulnerability in the role management module. The endpoint PUT /api/roles/menu RoleController.updateRoleMenu authorizes the request only by comparing the target role's level with the caller's minimum level. The application neither...

CVE-2026-106705

The ELADMIN (eladmin-mp) framework, up to version 2.7 , is susceptible to an improper access control vulnerability within the role management module. Specifically, the PUT /api/roles/menu (RoleController.updateRoleMenu) endpoint fails to validate the granted menu set and does not prevent a caller...

CVE-2026-106705: Improper Access Control

ELADMIN eladmin-mp up to 2.7 contains an improper access control vulnerability in the role management module. The endpoint PUT /api/roles/menu RoleController.updateRoleMenu authorizes the request only by comparing the target role's level with the caller's minimum level. The application neither...

CVE-2026-111365

The cool-admin-midway software (through version 8.0.0 ) is vulnerable to an authorization bypass (CWE-639) in its system role endpoints. Attackers with ordinary sys:role permissions can provide arbitrary role IDs to call the /admin/sys/role/info , update , or delete endpoints. This allows them to...

CVE-2026-97712

Sonatype Nexus Repository 3 is vulnerable to a privilege escalation flaw within its role management system. A user possessing create or role update permissions can grant themselves roles and privileges not originally assigned to their account. This vulnerability, categorized as CWE-862 (Missing A...

PT-2026-115008

🚨 CVE-2026-97712 Sonatype Nexus Repository 3 allows a user that holds the role create or role update permission to grant roles and privileges that the account does not hold. This can give the user more access than intended, up to full administrative access. 🎖@cveNotify...

PT-2026-115305

Name of the Vulnerable Software and Affected Versions cool-admin-midway versions prior to 8.0.0 Description An authorization bypass exists that allows administrators without superadmin privileges to read, modify, or delete roles belonging to other administrators. This occurs when users with...

CVE-2026-111365: Authorization Bypass Through User-Controlled Key

cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows non-superadmin admins to read, modify, or delete other admins' roles by supplying arbitrary role ids. Attackers holding ordinary sys:role permissions can call /admin/sys/role/info, update, or delete with...

CVE-2026-110207

Versions of Wukong AICRM through 20260610 are vulnerable to a missing authorization flaw in the user and role management APIs. Due to a lack of administrator checks, any authenticated user can access administration APIs for users, roles, departments, and agents. Specifically, an attacker can send...

CVE-2026-110207 Wukong AICRM through 20260610 Missing Authorization in User and Role Management APIs

Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows any authenticated user to call user, role, department and agent administration APIs because no administrator check exists. Attackers can send POST requests to /managerUser/updateUser to reset the admin...

CVE-2026-110207 Wukong AICRM through 20260610 Missing Authorization in User and Role Management APIs

Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows any authenticated user to call user, role, department and agent administration APIs because no administrator check exists. Attackers can send POST requests to /managerUser/updateUser to reset the admin...

BIT-ELASTICSEARCH-2026-103007 Incorrect Authorization in Elasticsearch Leading to Privilege Escalation

Incorrect Authorization CWE-863 in Elasticsearch can lead to Privilege Escalation via a delegated administrative privilege whose scope is not fully enforced during authorization checks. Elasticsearch contains an incorrect authorization weakness in a configurable, non-default privilege that lets a...