Lucene search
+L

11511 matches found

Cvelist
Cvelist
added 2026/09/03 6:00 p.m.38 views

CVE-2026-82023 LearnPress WordPress Plugin < 4.4.6 Broken Object-Level Authorization via Quiz Answer Insert

LearnPress WordPress Plugin before 4.4.6 contains a broken object-level authorization vulnerability that allows authenticated attackers with the Instructor role to add answers to quiz questions owned by other instructors by exploiting a missing ownership check on the question answer insert path...

5.3CVSS0.00177EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/03 5:17 p.m.10 views

CVE-2026-84814

Subscriber Privilege Escalation in Bricksforge = 3.1.8.8 versions...

9.8CVSS0.00365EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/03 4:31 p.m.31 views

CVE-2026-84814 WordPress Bricksforge plugin <= 3.1.8.8 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in Bricksforge = 3.1.8.8 versions...

9.8CVSS0.00365EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/03 4:31 p.m.8 views

EUVD-2026-70571

Subscriber Broken Access Control in Agentimus – AI SEO, llms.txt & MCP for AI Agents = 1.51.0 versions...

8.1CVSS5.9AI score0.00264EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/03 4:31 p.m.41 views

CVE-2026-84779 WordPress Agentimus – AI SEO, llms.txt & MCP for AI Agents plugin <= 1.51.0 - Broken Access Control vulnerability

Subscriber Broken Access Control in Agentimus – AI SEO, llms.txt & MCP for AI Agents = 1.51.0 versions...

8.1CVSS0.00264EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/03 4:31 p.m.13 views

CVE-2026-84756

CVE-2026-84756 is a privilege escalation vulnerability affecting the WCFM Membership WordPress plugin in versions 2.11.11 and below . The flaw allows a user with Subscriber privileges to escalate their access level. The vulnerability is rated HIGH (CVSS 3.1: 7.1) , with a network attack vector, l...

7.1CVSS5.9AI score0.00213EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/03 3:17 p.m.7 views

CVE-2026-85210

Oppia's AdminRoleHandler GET endpoint in core/controllers/admin.py is decorated with openaccess, allowing any registered user to enumerate privileged accounts and roles. Attackers can query the endpoint with filtercriterion parameters to retrieve usernames holding specific roles, banned flags, an...

5.3CVSS0.00199EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/03 3:17 p.m.6 views

CVE-2026-85212

CRMEB contains an authentication bypass vulnerability in the verifyAuth method of SystemRoleServices.php that returns true from both conditional branches. Sub-administrators and accounts with no roles can access restricted admin endpoints by exploiting the inert role check that always permits...

8.7CVSS0.00326EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/03 3:17 p.m.8 views

CVE-2026-71403

A flaw was found in Rancher Manager. The /v3/users update path did not enforce immutability of a User resource's username and principalIds fields. A user holding the update verb on users.management.cattle.io could inject a foreign identity provider principal into any account, so that the next log...

6.1CVSS0.00197EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/03 2:45 p.m.33 views

CVE-2026-71403 Rancher: Identity-field mutation in /v3/users allows account hijack via principal rebind

A flaw was found in Rancher Manager. The /v3/users update path did not enforce immutability of a User resource's username and principalIds fields. A user holding the update verb on users.management.cattle.io could inject a foreign identity provider principal into any account, so that the next log...

6.1CVSS0.00197EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/03 2:12 p.m.33 views

CVE-2026-85212 CRMEB through 6.0.0 Missing Authorization via Inert verifyAuth Role Check

CRMEB contains an authentication bypass vulnerability in the verifyAuth method of SystemRoleServices.php that returns true from both conditional branches. Sub-administrators and accounts with no roles can access restricted admin endpoints by exploiting the inert role check that always permits...

8.7CVSS0.00326EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/03 2:12 p.m.9 views

EUVD-2026-70490

CRMEB contains an authentication bypass vulnerability in the verifyAuth method of SystemRoleServices.php that returns true from both conditional branches. Sub-administrators and accounts with no roles can access restricted admin endpoints by exploiting the inert role check that always permits...

8.7CVSS5.9AI score0.00326EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/03 2:12 p.m.10 views

CVE-2026-85212

CRMEB (through version 6.0.0 ) contains an authentication bypass in the verifyAuth() method of SystemRoleServices.php. The root cause is that the method returns true from both conditional branches, rendering the role check inert and always permitting requests. As a result, sub-administrators and ...

8.7CVSS5.9AI score0.00326EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/03 2:12 p.m.6 views

CVE-2026-85212 CRMEB through 6.0.0 Missing Authorization via Inert verifyAuth Role Check

CRMEB contains an authentication bypass vulnerability in the verifyAuth method of SystemRoleServices.php that returns true from both conditional branches. Sub-administrators and accounts with no roles can access restricted admin endpoints by exploiting the inert role check that always permits...

8.7CVSS5.5AI score
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/03 2:12 p.m.35 views

CVE-2026-85210 Oppia through 3.5.2 Missing Authorization on AdminRoleHandler GET

Oppia's AdminRoleHandler GET endpoint in core/controllers/admin.py is decorated with openaccess, allowing any registered user to enumerate privileged accounts and roles. Attackers can query the endpoint with filtercriterion parameters to retrieve usernames holding specific roles, banned flags, an...

5.3CVSS0.00199EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/09/03 1:12 p.m.7 views

grafana: Grafana: Stored Cross-Site Scripting via malicious dashboard field name

A flaw in Grafana allows authenticated 'Editor' users to inject malicious scripts into a table panel's field names. Viewing the compromised dashboard executes the script in the victim's browser, risking data theft or client-side attacks...

6.8CVSS0.0024EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/03 1:06 p.m.6 views

AZL-99062 CVE-2026-80726 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid when deriving a child shadow page's role from its parent to harden against bugs elsewhere in KVM, as violating KVM's...

9.3CVSS5.6AI score0.00177EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/03 1:06 p.m.11 views

CVE-2026-80726

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid when deriving a child shadow page's role from its parent to harden against bugs elsewhere in KVM, as violating KVM's...

9.3CVSS0.00177EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/09/03 9:43 a.m.13 views

tomcat: Apache Tomcat: Improper Authorization allows bypass of declarative role constraints

A flaw was found in Apache Tomcat. This improper authorization vulnerability occurs because security-role-ref definitions are incorrectly used as role aliases within the Realm, in addition to their correct usage with Request.isUserInRole. This misconfiguration allows for a bypass of declarative...

8.1CVSS5.8AI score0.00574EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/03 8:21 a.m.21 views

CVE-2026-80726 KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid when deriving a child shadow page's role from its parent to harden against bugs elsewhere in KVM, as violating KVM's...

9.3CVSS5.8AI score
SaveExploits0References9
Rows per page
Query Builder