299575 matches found
CVE-2026-94217: Missing Authorization
A flaw was found in the User-Managed Access UMA implementation of Keycloak. The issue occurs in the authorization token endpoint when processing permission tickets. If two different users own resources with the same name, the system incorrectly merges the permissions from both resources when one...
CVE-2026-55060: Incorrect Authorization
GoCD is a continuous deliver server. From 13.1.0 until 26.1.0, the /go/api/support/processlist endpoint does not enforce its intended administrator-only authorization. An authenticated internal user can query the endpoint while source control child processes are running and view command-line...
CVE-2026-52743: Authorization Bypass Through User-Controlled Key
GoCD is a continuous deliver server. Prior to 26.1.0, the internal GoCD UI /jobStatus.json API does not validate that a requested server-assigned job ID belongs to the pipeline and stage named in the request. An authenticated user can guess job IDs and retrieve status for jobs in pipelines the us...
CVE-2026-94404: Cross-Site Request Forgery (CSRF)
MISP has a security issue that could let an attacker change threat-intelligence data through a logged-in user’s browser without that user knowingly approving the change. The affected function did not properly enforce MISP’s usual protection against forged requests. Because of this, an attacker...
CVE-2026-94382: Authorization Bypass Through User-Controlled Key
Beszel before 0.19.0 contains an insecure direct object reference vulnerability in the POST and DELETE /api/beszel/user-alerts handlers that allows any authenticated user to create or delete alerts on systems they cannot access. Attackers can supply arbitrary system IDs in the request body to...
CVE-2026-88756
Pagekit CMS = 1.0.18 allows an unauthenticated attacker to perform SQL injection through the credentials array submitted to the public login endpoint POST /user/authenticate...
PT-2026-96203
Name of the Vulnerable Software and Affected Versions jshERP version 3.6 Description An issue exists that allows authenticated users to perform privilege escalation. By sending a POST request to the 'updateOneValueByKeyIdAndType' endpoint with the type parameter set to 'UserRole', along with thei...
PT-2026-96204
Name of the Vulnerable Software and Affected Versions jshERP versions prior to 3.7 Description An authorization bypass exists in the 'POST /user/resetPwd' endpoint. This flaw allows authenticated users to reset the password of any other user, including administrators, by submitting a request with...
PT-2026-96211
Name of the Vulnerable Software and Affected Versions jshERP versions prior to 3.7 Description An authorization bypass exists in the userBusiness CRUD endpoints. This issue allows authenticated users to create, modify, or delete authorization-relation rows because the system fails to perform...
CVE-2026-88756: Improper Neutralization of Special Elements used in an SQL Command
Pagekit CMS = 1.0.18 allows an unauthenticated attacker to perform SQL injection through the credentials array submitted to the public login endpoint POST /user/authenticate...
PT-2026-96153
Name of the Vulnerable Software and Affected Versions ntopng versions prior to 6.7.260718 Description Authenticated non-administrator users can list and download system-configuration backups due to a missing administrator check in the endpoints 'scripts/lua/rest/v2/get/system/configurations/list...
CVE-2026-88756
Pagekit CMS versions
CVE-2026-94152: Authorization Bypass Through User-Controlled Key
A security vulnerability has been detected in Omega Solution FBP Fulfillment by People 2025. This impacts an unknown function of the file /user/ of the component User Profile API. The manipulation of the argument ID leads to authorization bypass. Remote exploitation of the attack is possible. The...
CVE-2026-77518: Missing Authorization
MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, a normal workspace user who knows another user's active MCP toolid in the same workspace can retrieve the hidden tool through the tool-detail route because it does not apply the per-resource authorization used by the...
CVE-2026-94535: Authorization Bypass Through User-Controlled Key
lamp-cloud through 5.10.0 contains an authorization bypass vulnerability in the deleteMyNotice endpoint that allows authenticated users to delete other users' notifications. Attackers can call the DELETE /anyone/extendNotice/deleteMyNotice endpoint with arbitrary notice IDs to permanently remove...
PT-2026-96133
Name of the Vulnerable Software and Affected Versions GoCD versions 13.1.0 through 26.0.0 Description The /go/api/support/process list endpoint fails to enforce administrator-only authorization. This allows an authenticated internal user to query the endpoint during the execution of source contro...
PT-2026-96055
Name of the Vulnerable Software and Affected Versions Omega Solution FBP Fulfillment by People 2025 Description An authorization bypass exists within the User Profile API component in the /user/ file. Remote exploitation is possible by manipulating the ID argument, allowing an attacker to bypass...
python313-ansi2html-1.9.5-1.1 on GA media (moderate)
python313-ansi2html-1.9.5-1.1 on GA media Announcement ID: openSUSE-SU-2026:11815-1 Rating: moderate Cross-References: CVE-2026-92973 CVSS scores: CVE-2026-92973 SUSE : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2026-92973 SUSE : 5.3...
CVE-2026-94412: Missing Authorization
jshERP through 3.6 contains an authorization bypass vulnerability in the POST /user/resetPwd endpoint that allows authenticated users to reset any other user's password. Attackers can submit a request with an arbitrary target user ID to reset that account's password to a known default value,...
PT-2026-96102
Name of the Vulnerable Software and Affected Versions Beszel versions prior to 0.19.0 Description An insecure direct object reference occurs in the 'POST' and 'DELETE' '/api/beszel/user-alerts' endpoints. This allows authenticated users to create or delete alerts for systems they are not authoriz...