CVE-2026-67975

Incorrect access control in NASA cFS v7.0.1 allows attackers to arbitrarily remove low-index subscriptions and add new streams via sending TOLAB add/remove subscription commands...

PT-2026-67540

Name of the Vulnerable Software and Affected Versions NASA cFS version 7.0.1 Description Incorrect access control allows attackers to arbitrarily remove low-index subscriptions and add new streams by sending TO LAB add/remove subscription commands. Recommendations At the moment, there is no...

CVE-2026-67975

Incorrect access control in NASA cFS v7.0.1 allows attackers to arbitrarily remove low-index subscriptions and add new streams via sending TOLAB add/remove subscription commands...

CVE-2026-67975

NASA cFS v7.0.1 is affected by an incorrect access control vulnerability. This flaw allows an attacker to arbitrarily remove low-index subscriptions and add new streams by sending TO_LAB add/remove subscription commands. Exploitation details and specific remediation steps are not provided in the ...

CVE-2021-36400

In Moodle, insufficient capability checks made it possible to remove other users' calendar URL subscriptions...