CVE-2026-27676: Missing Authorization

Due to missing authorization checks in the SAP S/4HANA OData Service Manage Technical Object Structures, an attacker could update and delete child entities via exposed OData services without proper authorization. This vulnerability results in a low impact on integrity, while confidentiality and...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the API endpoints responsible for updating and deleting inventory item attachments. An attacker can access or modify attachments belonging to other users by sending crafted requests as an authenticated user...

Keystone 安全漏洞

Keystone is a powerful OpenStack open source CMS. used to help you build and scale faster than any other Cms or application framework. A security vulnerability exists in Keystone versions prior to 6.5.0 that stems from the ability to bypass the isFilterable access control in the update and delete...