CVE-2026-108734

Frappe CRM versions 1.49.0 through 1.87.0 are affected by a missing authorization vulnerability in the crm.api.doc.get_linked_docs_of_document function. This flaw allows authenticated users to bypass permission checks to read linked documents they are not authorized to access. By specifying names...

CVE-2026-108733

Frappe HR (hrms) versions before 16.11.0 , including all 14.x and 15.x releases through 15.64.3 , are vulnerable to a missing authorization flaw in the whitelisted expire_allocation method. This vulnerability allows authenticated users who lack HR roles to target another employee's Leave Allocati...

CVE-2026-108732

The Frappe HR (hrms) application before version 16.11.0 (including all 14.x and 15.x releases through 15.64.3 ) contains a missing authorization vulnerability. The flaw exists in the whitelisted get_account_and_amount method, which allows authenticated users without HR roles to access sensitive d...

CVE-2026-108731

The software Raven versions 2.0.0 through 3.0.0 is affected by a missing authorization vulnerability (CWE-862). This flaw allows authenticated users with the Raven User role to join invite-only Public workspaces by bypassing the can_only_join_via_invite setting via the join_workspace method. Succ...

CVE-2026-108729

Versions of Corteza up to 2024.9.10 are vulnerable to an incorrect authorization flaw in the compose attachment endpoints . This vulnerability allows unauthenticated attackers to download private attachments by manipulating the URL kind segment to values such as page, icon, or namespace. If an at...

CVE-2026-108730

The Raven application (versions 2.0.0 through 3.0.0 ) contains a missing authorization vulnerability within legacy methods located in raven/api/raven_message.py. The root cause is that these methods skip the required workspace membership check. Consequently, authenticated non-members can exploit ...

CVE-2026-108728

Flyte versions 2.0.1 through 2.0.51 are vulnerable to a cleartext secret exposure vulnerability within the embedded secret manager webhook . The root cause is that the webhook writes base64-encoded FILE-mounted secret values into the SECRETS environment variable . This allows users with Pod read ...

CVE-2026-108726

The GLPI application through version 12.0.0 is vulnerable to a missing authorization vulnerability in the ajax/map.php component. The root cause is the omission of the canView() check, which allows authenticated low-privileged users to search for itemtypes they are not authorized to view. By subm...

CVE-2026-108727

The software EdgeEver (versions through 1.108.0 ) contains a missing authorization vulnerability within the Hono API memo-template routes . The root cause is that template handlers fail to call requireScopes, allowing holders of scoped API tokens to bypass intended scope restrictions. An attacker...

CVE-2026-108725

The Cheshire Cat AI core (versions through 2.0.23 ) contains a stored cross-site scripting (XSS) vulnerability within the uploads plugin . The root cause is a lack of file type restrictions, allowing authenticated users to upload HTML files via POST /uploads. An attacker can then trick a signed-i...

CVE-2026-108724

Versions of Sylius through 2.3.0 are vulnerable to an authorization bypass in the Shop API. The issue stems from the AcceptedExtension filter not being applied to the item operation, allowing unauthenticated attackers to bypass merchant moderation. By enumerating sequential IDs on the GET /api/v2...

CVE-2026-108723

The answer-me-with-html tool (versions through 0.5.0 ) is vulnerable to a link following vulnerability within the am CLI code block src= embedding functionality. The root cause is that the localPath() function validates the path text without resolving symlinks . An attacker can provide a reposito...

CVE-2026-108722

The open-computer-use project (specifically through commit 610bac8) is vulnerable to a stored cross-site scripting (XSS) flaw. The issue resides in the Logger.write_log_file function within os_computer_use/logging.py, which fails to perform HTML escaping when writing transcript text into log.html...

CVE-2026-108721

The Open Computer Use through 1.0.0 application on macOS is vulnerable to an improper case sensitivity handling flaw (CWE-178 ). This vulnerability allows local MCP callers to bypass the password-manager denylist by using case-variant bundle identifiers, such as com.1Password.1Password. A success...

CVE-2026-108720

Versions of phpIPAM through 1.8.3 are vulnerable to a missing authorization flaw (CWE-862). The issue occurs because the customer, location, and NAT pages fail to execute the Subnets::check_permission function. This allows authenticated low-privilege users to access restricted sections by opening...

CVE-2026-108719

LLMGateway through 1.20.0 is vulnerable to a blind server-side request forgery (SSRF) vulnerability in its video-generation callback_url extension. API key holders can exploit this by supplying loopback, private, or cloud-metadata URLs. The vulnerability exists because the application fails to pe...

CVE-2026-108718

The Rill platform (versions 0.77.0 through 0.90.5 ) contains a missing authorization vulnerability within the admin OAuth server . The flaw allows the server to issue authorization codes to dynamically registered clients without requiring explicit user consent. An attacker can register a maliciou...

CVE-2026-108717

Combodo iTop versions 3.1.0 through 3.3.0 are affected by a missing authorization vulnerability in LinkSetController.php. This flaw allows authenticated console users to bypass profile grants by providing arbitrary class and key parameters. Exploitation enables attackers to access the linkset del...

CVE-2026-108716

The mcp-remote library, versions 0.8.0 through 0.14.3 , is vulnerable to a cleartext transmission flaw within the authorizeWithDeviceCode function. The root cause is the failure to enforce HTTPS endpoints when handling device authorization and token endpoints. If these endpoints are non-loopback ...

CVE-2026-108715

LibreNMS versions through 26.9.1.1 are affected by an authorization bypass vulnerability in the includes/html/graphs/smokeping/auth.inc.php component. The root cause is an incorrect authorization check that validates the src probe device instead of the rendered target device . Consequently, restr...