CWE-566 · Authorization Bypass Through User-Controlled SQL Primary Key

9 CVEs classified under CWE-566 (Authorization Bypass Through User-Controlled SQL Primary Key). Browse by severity and year.

Top CVEs for CWE-566
CVESeverityScorePublishedSummary
CVE-2025-9953Critical9.82026-02-19Authorization Bypass Through User-Controlled SQL Primary Key vulnerability in DATABASE Software Training Consulting Ltd. Databank Accreditation Software allows…
CVE-2014-0808Critical9.12014-01-22Authorization bypass through user-controlled key issue exists in EC-CUBE 2.11.0 through 2.12.2 and EC-Orange systems deployed before June 29th, 2015. If this v…
CVE-2026-84650High8.82026-09-02In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient fields cannot be excluded from deserialization, allowing attackers able to submit configuratio…
CVE-2025-61781High7.12026-01-05OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.8.1, the GraphQL mutation "WorkspacePop…
CVE-2026-21886Medium6.52026-03-17OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.9.1, the GraphQL mutations "IndividualD…
CVE-2025-56556Low3.82025-09-11An issue was discovered in Subrion CMS 4.2.1, allowing authenticated adminitrators or moderators with access to the built-in Run SQL Query feature under the SQ…
CVE-2025-30369Low2.72025-03-31Zulip is an open-source team collaboration tool. The API for deleting an organization custom profile field is supposed to be restricted to organization adminis…
CVE-2025-30368Low2.72025-03-31Zulip is an open-source team collaboration tool. The API for deleting an organization export is supposed to be restricted to organization administrators, but i…
CVE-2024-22261Low2.72024-06-11SQL-Injection in Harbor allows priviledge users to leak the task IDs
All CVEs classified under CWE-566 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-84650High8.82026-09-02In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient fields cannot be excluded from deserialization, allowing attackers able to submit configuratio…
CVE-2026-21886Medium6.52026-03-17OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.9.1, the GraphQL mutations "IndividualD…
CVE-2025-9953Critical9.82026-02-19Authorization Bypass Through User-Controlled SQL Primary Key vulnerability in DATABASE Software Training Consulting Ltd. Databank Accreditation Software allows…
CVE-2025-61781High7.12026-01-05OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.8.1, the GraphQL mutation "WorkspacePop…
CVE-2025-56556Low3.82025-09-11An issue was discovered in Subrion CMS 4.2.1, allowing authenticated adminitrators or moderators with access to the built-in Run SQL Query feature under the SQ…
CVE-2025-30369Low2.72025-03-31Zulip is an open-source team collaboration tool. The API for deleting an organization custom profile field is supposed to be restricted to organization adminis…
CVE-2025-30368Low2.72025-03-31Zulip is an open-source team collaboration tool. The API for deleting an organization export is supposed to be restricted to organization administrators, but i…
CVE-2024-22261Low2.72024-06-11SQL-Injection in Harbor allows priviledge users to leak the task IDs
CVE-2014-0808Critical9.12014-01-22Authorization bypass through user-controlled key issue exists in EC-CUBE 2.11.0 through 2.12.2 and EC-Orange systems deployed before June 29th, 2015. If this v…