CVE-2026-103504

In Gitea , a vulnerability exists where updating an organization team's permission via the API using only the permission field fails to rebuild per-unit access. Consequently, the requested permission level is not applied as a cap, allowing members of a demoted team (e.g., from admin to read) to r...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the LFS object reuse process. An attacker can gain unauthorized access to private source objects by leveraging repository access without having the required Code-unit permissions...

PT-2025-44511

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2024R1.4.2 Description Nagios XI versions prior to 2024R1.4.2 configure certain systemd unit files with overly permissive permissions. Specifically, the nagios.service unit possesses unnecessary executable...