CVE-2026-105097 | Medium | 4.3 | 2026-10-04 | A vulnerability was identified in Omega Solution CoinEx Crypto 2025. This impacts an unknown function of the file /customer-currency/ of the component Customer… |
CVE-2026-105096 | Medium | 6.3 | 2026-10-04 | A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown function of the file /customer/ of the component Customer Profile… |
CVE-2026-96451 | High | 8.8 | 2026-10-03 | Authorization Bypass Through User-Controlled Key vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affect… |
CVE-2026-11399 | Medium | 4.3 | 2026-10-03 | The Helpdesk Support Ticket System for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including… |
CVE-2026-105029 | Medium | 4.3 | 2026-10-03 | UVdesk support-center-bundle before 1.1.3.3 contains an insecure direct object reference vulnerability in the rateTicket action of Controller/Ticket.php that a… |
CVE-2026-39444 | Medium | 5.4 | 2026-10-02 | Authorization Bypass Through User-Controlled Key vulnerability in PublishPress PublishPress Series organize-series allows Exploiting Incorrectly Configured Acc… |
CVE-2026-104449 | Medium | 6.5 | 2026-10-02 | YesWiki before 4.6.7 contains an access control vulnerability allowing unauthenticated attackers to overwrite any existing wiki page, including pages whose wri… |
CVE-2026-104444 | High | 7.1 | 2026-10-02 | YesWiki before 4.6.7 contains an authorization bypass vulnerability in the comments API editComment route that allows authenticated low-privilege users to over… |
CVE-2026-94405 | Medium | 5.3 | 2026-10-02 | Authorization Bypass Through User-Controlled Key vulnerability in Shahjada Download Manager allows Retrieve Embedded Sensitive Data.
This issue affects Downlo… |
CVE-2026-94180 | Medium | 4.3 | 2026-10-02 | Authorization Bypass Through User-Controlled Key vulnerability in Monetizemore Advanced Ads allows Retrieve Embedded Sensitive Data.
This issue affects Advanc… |
CVE-2026-104403 | Medium | 5.3 | 2026-10-02 | Authorization Bypass Through User-Controlled Key vulnerability in ThimPress LearnPress allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2026-94432 | Medium | 5.3 | 2026-10-02 | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in vers… |
CVE-2026-97269 | Medium | 6.5 | 2026-10-01 | Unauthenticated Insecure Direct Object References (IDOR) in WPFunnels <= 3.13.1 versions. |
CVE-2026-97251 | Medium | 6.5 | 2026-10-01 | Unauthenticated Insecure Direct Object References (IDOR) in Bus Ticket Booking with Seat Reservation <= 5.9.3 versions. |
CVE-2026-100517 | High | 7.5 | 2026-10-01 | Unauthenticated Insecure Direct Object References (IDOR) in Photo Reviews for WooCommerce <= 1.2.30 versions. |
CVE-2026-100514 | High | 7.5 | 2026-10-01 | Unauthenticated Insecure Direct Object References (IDOR) in REST API Log <= 1.7.2 versions. |
CVE-2026-62061 | Medium | 5.3 | 2026-10-01 | Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Exploiting Inco… |
CVE-2026-102382 | Medium | 4.3 | 2026-10-01 | Authorization Bypass Through User-Controlled Key vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Contr… |
CVE-2026-103288 | Medium | 6.5 | 2026-10-01 | Ghost, an open-source publishing platform, contains an input validation flaw in its comment like feature in versions from 5.9.0 before 6.44.1. An authenticated… |
CVE-2026-103252 | High | 7.7 | 2026-10-01 | n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an authorization bypass vulnerability in the credential test endp… |
CVE-2026-103247 | High | 8.5 | 2026-10-01 | n8n versions before 1.123.80 contain a credential tampering vulnerability where duplicate node IDs bypass the workflow credential tamper guard. Attackers with… |
CVE-2026-103246 | High | 7.7 | 2026-10-01 | n8n versions before 2.39.6 and 2.40.0 before 2.40.1 fail to validate credential ownership during inline agent node-tool introspection. Attackers can reference… |
CVE-2026-64948 | | | 2026-10-01 | Missing authorization in module data retrieval allows unauthorized cross-group access to module history. Affects Pandora FMS from 777 onwards. |
CVE-2026-103496 | Medium | 5.4 | 2026-10-01 | In JetBrains YouTrack before 2026.2.19422 iDOR in inbox threads allowed reading other users' notifications |
CVE-2026-103491 | Medium | 6.5 | 2026-10-01 | In JetBrains YouTrack before 2026.2.19422 iDOR in the issue activities API allowed reading restricted issues |
CVE-2026-93882 | High | 7.5 | 2026-10-01 | The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up… |
CVE-2026-96173 | Medium | 5.3 | 2026-10-01 | The Payments for Hubtel WordPress plugin before 1.0.2 does not verify that the requester is authorized to view an order before redirecting a public payment-cal… |
CVE-2026-91109 | Medium | 6.5 | 2026-10-01 | The Simply Schedule Appointments plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.6.12.31 via the… |
CVE-2026-102139 | Medium | 6.5 | 2026-09-30 | An authorization check in the large file exchange feature of Kiteworks Email Protection Gateway did not correctly establish that the requesting user was a part… |
CVE-2026-102107 | Medium | 4.6 | 2026-09-30 | Kiteworks Core contains a business logic flaw in a Kiteworks file-request feature allowed an authenticated user to send a request that appeared to originate fr… |
CVE-2026-103476 | Medium | 5.3 | 2026-09-30 | yii2-starter-kit through 4.2.0 fails to validate article publication status in the attachment-download endpoint, allowing unauthenticated attackers to download… |
CVE-2026-103446 | | | 2026-09-30 | Authorization bypass through User-Controlled key vulnerability in The Wikimedia Foundation MediaWiki WikiLambda extension allows Authentication Bypass.
This i… |
CVE-2026-103233 | Medium | 6.3 | 2026-09-30 | A security vulnerability has been detected in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This impacts an unkno… |
CVE-2026-100272 | Medium | 4.9 | 2026-09-30 | In JetBrains YouTrack before 2026.2.19197 missing authorisation in the notification template preview allowed Project Administrators to read restricted issues |
CVE-2026-100268 | High | 7.7 | 2026-09-30 | In JetBrains YouTrack before 2026.2.19197 project administrators could read comments from other projects via notification templates |
CVE-2026-97259 | | | 2026-09-30 | Authorization Bypass Through User-Controlled Key vulnerability in WP Hosting AS Pay with Vipps for WooCommerce allows Exploiting Incorrectly Configured Access… |
CVE-2026-97282 | Medium | 5.3 | 2026-09-30 | Unauthenticated Insecure Direct Object References (IDOR) in Review Schema <= 3.1.0 versions. |
CVE-2026-97079 | Medium | 4.3 | 2026-09-30 | Subscriber Insecure Direct Object References (IDOR) in Webba Booking <= 6.5.0 versions. |
CVE-2026-97078 | Medium | 5.3 | 2026-09-30 | Unauthenticated Insecure Direct Object References (IDOR) in Client Invoicing by Sprout Invoices <= 20.8.17 versions. |
CVE-2026-97074 | Medium | 4.3 | 2026-09-30 | Subscriber Insecure Direct Object References (IDOR) in Newsletters, Email Marketing, SMS and Popups by Omnisend <= 1.9.0 versions. |
CVE-2026-97066 | Medium | 5.3 | 2026-09-30 | Unauthenticated Insecure Direct Object References (IDOR) in GiveWP <= 4.16.9 versions. |
CVE-2026-96347 | Medium | 6.5 | 2026-09-30 | Subscriber Insecure Direct Object References (IDOR) in Bookly <= 28.2 versions. |
CVE-2026-94673 | Medium | 5.3 | 2026-09-30 | Unauthenticated Insecure Direct Object References (IDOR) in Simply Schedule Appointments <= 1.6.12.31 versions. |
CVE-2026-94672 | Medium | 4.3 | 2026-09-30 | Contributor Insecure Direct Object References (IDOR) in Safe SVG <= 2.5.0 versions. |
CVE-2026-94173 | Medium | 5.4 | 2026-09-30 | Contributor Insecure Direct Object References (IDOR) in Business Directory <= 6.4.27 versions. |
CVE-2026-74865 | | | 2026-09-30 | sogo_yhn configures SOGo with a parameter "SOGoTrustProxyAuthentication=YES". This causes the password to be bypassed during HTTP Basic authentication. An unau… |
CVE-2026-74864 | | | 2026-09-30 | sogo_yhn configures SOGo with a parameter that forces the request with HTTP header "x-webobjects-remote-user" to be treated as sent by a verified user without… |
CVE-2026-62081 | Medium | 5.4 | 2026-09-30 | Contributor Insecure Direct Object References (IDOR) in Flexible PDF Coupons <= 1.14.11 versions. |
CVE-2026-103237 | | | 2026-09-30 | MISP contains an improper input validation vulnerability in its ORM save path. When a user submits data through various endpoints (attribute add/edit, event ed… |
CVE-2026-103235 | | | 2026-09-30 | MISP contains a mass assignment vulnerability in the event delegation feature. When a user with delegation permission submits a delegation request, the applica… |
CVE-2026-102844 | Low | 2.7 | 2026-09-30 | A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This vulnerability affects the function detail… |
CVE-2026-103054 | High | 7.1 | 2026-09-30 | AiSOC versions before 12.0.0 contain an authorization bypass vulnerability in the MSSP module that allows authenticated users to add arbitrary tenants to portf… |
CVE-2026-79537 | Critical | 9.1 | 2026-09-29 | metatool-ai MetaMCP through 2.4.22 contains an insecure direct object reference (IDOR) in the MCP transport session dispatch. The session store (getSession in… |
CVE-2026-79348 | Medium | 4.3 | 2026-09-29 | KitchenAsty through 0.3.0 contains a broken object level authorization (IDOR) vulnerability in the reservations API. The endpoint GET /api/reservations/:id in… |
CVE-2026-102876 | High | 8.1 | 2026-09-29 | SurrealDB before 3.3.0 contains an authorization bypass in HTTP session construction where check_auth() verifies credentials against Surreal-Auth-NS and Surrea… |
CVE-2026-90907 | | | 2026-09-29 | Joomla! Core - [20260902] - Core - Unauthorized user account creation via profile.save controller in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3 - The profile.save control… |
CVE-2026-101112 | | | 2026-09-29 | Joomla Extension - balbooa.com - Unauthorized Deletion of Attachments in Balbooa Forms < 2.4.3.4 - The public removeTmpAttachment action accepts an integer att… |
CVE-2026-102261 | Medium | 5.4 | 2026-09-29 | A flaw has been found in owen2345 Camaleon CMS up to 2.9.2. Impacted is the function crop of the file app/controllers/camaleon_cms/admin/media_controller.rb of… |
CVE-2026-97685 | | | 2026-09-29 | An authenticated LimeSurvey Community Edition 7.3.0 user allowed to create surveys can use their own survey as an authorized context while supplying question o… |
CVE-2026-102373 | Medium | 6.5 | 2026-09-29 | GestSup versions before 3.2.62 fail to validate ticket ownership when loading comments via the threadedit parameter in thread.php. Authenticated attackers can… |
CVE-2026-93538 | High | 7.1 | 2026-09-28 | A cross-tenant authorization issue was discovered in SUSE Rancher Fleet. During agent-initiated cluster registration, cluster labels supplied by the registerin… |
CVE-2026-82323 | High | 8.1 | 2026-09-28 | Authorization bypass through User-Controlled key vulnerability in Enocta Educational Technologies Inc. Enocta Platform allows Exploitation of Trusted Identifie… |
CVE-2026-82348 | High | 7.7 | 2026-09-28 | Authorization Bypass Through User-Controlled Key in Apache Roller 6.1.5 allows an authenticated user with authoring rights on one weblog to read, modify, or de… |
CVE-2026-100897 | Medium | 5.5 | 2026-09-28 | A security vulnerability has been detected in fuzui StudentInfo up to fcc42a639ec7cef620651bfd0f07ebb660529e3f. The impacted element is an unknown function of… |
CVE-2026-100885 | High | 7.3 | 2026-09-27 | A vulnerability was found in Krayin laravel-crm up to 2.2.4. This affects an unknown function of the file packages/Webkul/Installer/src/Http/Middleware/CanInst… |
CVE-2026-101084 | Critical | 9.6 | 2026-09-27 | obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticated user to connect to restricted MCP se… |
CVE-2026-100878 | Medium | 6.3 | 2026-09-27 | A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. Affected by this issue is the function SysUser.isAdmin of the file edu-common/src/main/j… |
CVE-2026-101033 | Medium | 4.3 | 2026-09-27 | KitchenOwl through 0.7.10 fails to verify that category IDs belong to the caller's household in expense and item operations. Authenticated attackers can enumer… |
CVE-2026-92436 | Medium | 5.3 | 2026-09-27 | The Mailchimp for WooCommerce WordPress plugin before 6.3 does not require authentication or verify ownership before loading a saved cart from a request-suppli… |
CVE-2026-86839 | Low | 3.8 | 2026-09-27 | The Online Scheduling and Appointment Booking System WordPress plugin before 28.3 does not verify that appointment and payment records requested through its s… |
CVE-2026-72662 | Medium | 6.3 | 2026-09-26 | Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized disclosure, modification, and deletion of data via Accessing Func… |
CVE-2026-100688 | Medium | 6.5 | 2026-09-26 | Budibase server before 3.45.0 contains a cross-tenant information disclosure vulnerability in the GET /api/applications/:appId/appPackage endpoint that allows… |
CVE-2026-100679 | High | 8.8 | 2026-09-26 | stoatchat before 0.15.5 fails to validate that MFA tickets belong to the authenticated user, allowing attackers to bypass MFA by using their own valid ticket w… |
CVE-2026-100670 | High | 8.8 | 2026-09-26 | Grav CMS 2.0.14 through 2.0.24 contains a privilege escalation vulnerability in the group and account blueprints. The access map is gated by a `security@: admi… |
CVE-2026-100627 | High | 8.1 | 2026-09-26 | Capgo (Cap-go/capgo.app) server backend Supabase functions contain an incorrect authorization flaw in the API-key bundle promotion path. The PUT /bundle endpoi… |
CVE-2026-100626 | Medium | 4.3 | 2026-09-26 | capgo through 12.128.2 contains an insecure direct object reference vulnerability in the PUT /app/:appId endpoint that accepts attacker-controlled icon storage… |
CVE-2026-100618 | High | 8.5 | 2026-09-26 | Capgo (capgo.app) is affected by an authorization flaw in the app icon update path. The PUT /app/:id endpoint accepts a user-controlled `icon` value, normalize… |
CVE-2026-100614 | High | 8.8 | 2026-09-26 | Capgo before 12.244.1 contains a cross-tenant integrity vulnerability in the metadata-cleaning worker that trusts image object keys from mutable database rows… |
CVE-2026-100612 | High | 7.2 | 2026-09-26 | Capgo (capgo.app) through version 12.261.0 contains an incomplete access-control fix for the public.sso_providers table. Migration 20260826100000_sso_providers… |
CVE-2026-100610 | High | 7.5 | 2026-09-26 | Flowise through 3.1.4 exposes GET /api/v1/upsert-history/:id and PATCH /api/v1/upsert-history without route-level permission checks, and the backing service pe… |
CVE-2026-100609 | Medium | 6.8 | 2026-09-26 | Flowise (npm packages `flowise` and `flowise-components`) through 3.1.4 looks up credentials by ID without filtering on the requesting user's workspace (findOn… |
CVE-2026-100579 | High | 7.6 | 2026-09-26 | OpenClaw (npm package 'openclaw') before 2026.7.1 incorrectly trusts requester provenance in message.action. In identity-bearing Gateway deployments (authentic… |
CVE-2026-100534 | Low | 3.1 | 2026-09-26 | OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in webhook TaskFlow cancellation that allows attackers to cancel unrelated sess… |
CVE-2026-100531 | Medium | 6.5 | 2026-09-26 | The @openclaw/slack npm package before 2026.8.1 contains an authorization flaw in its Slack download-file handler: when a file lacks the share metadata used to… |
CVE-2026-97060 | High | 7.2 | 2026-09-25 | X-SpringBoot through 6.0 lacks object-level authorization in user management endpoints, allowing sub-administrators to modify or delete users without ownership… |
CVE-2026-84464 | | | 2026-09-25 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, zammad's External Data Source feature, used to look up records from an exte… |
CVE-2026-84460 | | | 2026-09-25 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, any authenticated user can call the REST endpoint for getting a tag list an… |
CVE-2026-63205 | | | 2026-09-25 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when creating or updating an email signature, Zammad processes inline image… |
CVE-2026-63204 | | | 2026-09-25 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, an authenticated user with agent permissions can supply an arbitrary AI ana… |
CVE-2026-53626 | | | 2026-09-25 | GLPI is a free asset and IT management software package. From 11.0.5 until 11.0.8, under certain conditions, permission logic can grant access to a document wi… |
CVE-2026-93366 | Medium | 5.4 | 2026-09-25 | Bludit CMS through 3.22.0 contains an authorization bypass vulnerability that allows authenticated users with the Author role to enumerate and delete media fil… |
CVE-2026-56728 | | | 2026-09-25 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, a broken access control vulnerability exists in Zammad's GraphQL API. An au… |
CVE-2026-56724 | | | 2026-09-25 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary An issue with permission checks in the knowledge base management ar… |
CVE-2026-85291 | Medium | 6.5 | 2026-09-25 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane's Users::change_password() met… |
CVE-2026-100177 | | | 2026-09-25 | The AIL Framework crawler task creation API (api_add_crawler_task) contained an insufficient authorization check when a user supplied a cookiejar UUID to attac… |
CVE-2026-97898 | | | 2026-09-25 | Insecure Direct Object Reference / missing object-level authorization in the Akia keyless entry cloud service. The unlock action is relying on a client-supplie… |
CVE-2026-86837 | Medium | 5.3 | 2026-09-25 | The Bookly WordPress plugin before 28.3 does not properly verify a customer's identity before updating their stored details, allowing unauthenticated attackers… |
CVE-2026-93399 | Critical | 9.1 | 2026-09-25 | The Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 28.2 via the 'bookly_get_form_id', 'bookly_… |
CVE-2026-97721 | Low | 2.7 | 2026-09-25 | A weakness has been identified in Sanluan PublicCMS up to 6.202506.e. This vulnerability affects the function CmsContentAdminController of the file publiccms-p… |
CVE-2026-97647 | Medium | 5.3 | 2026-09-25 | A security vulnerability has been detected in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. This impacts an unknown func… |