2 matches found
CVE-2026-6863 HTTP Filestore Endpoints Misapply Permissions Across Organizations
Velociraptor versions prior to 0.76.4 contain a cross organization authorization bypass in the HTTP API. A user with only the reader role in the root organization the lowest authenticated role, holding only READRESULTS permission can issue a single authenticated HTTP GET that can read any files...
6.8CVSS5.7AI score0.00236EPSS
SaveExploits0References1
JUNG Smart Visu Server 1.1.1050 Remote Server Shutdown
Summary The Smart Visu Server makes your intelligent building control convenient. With the user-friendly operating concept, you can control both the KNX system and other systems such as Philips Hue or Sonos on your mobile devices. You can likewise connect voice control to your KNX system with...
8.7CVSS5.8AI score0.01853EPSS
SaveExploits5
20