CVE-2026-15219 | Medium | 6.5 | 2026-10-16 | Authorization bypass through User-Controlled key vulnerability in SFM Software Technologies Inc. Costifier allows Exploitation of Trusted Identifiers.
This is… |
CVE-2026-103525 | High | 7.5 | 2026-10-16 | The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up… |
CVE-2026-89280 | Medium | 4.3 | 2026-10-16 | The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Insecure Direct Ob… |
CVE-2026-111368 | Medium | 6.4 | 2026-10-15 | ClassroomIO through 1.0.0 contains an insecure direct object reference vulnerability in the Hono API course submission routes that allows course tutors or admi… |
CVE-2026-111366 | High | 7.2 | 2026-10-15 | cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows department-limited admins to manage users outside their departments… |
CVE-2026-111365 | Medium | 6.0 | 2026-10-15 | cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows non-superadmin admins to read, modify, or delete other admins' roles… |
CVE-2026-111364 | Medium | 6.5 | 2026-10-15 | MinDoc through 2.2-beta.2 contains an insecure direct object reference vulnerability in DocumentController.Content that allows authenticated users to read docu… |
CVE-2026-111363 | Medium | 6.5 | 2026-10-15 | BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to read other users' pars… |
CVE-2026-111359 | High | 7.1 | 2026-10-15 | CRMEB 5.6.1 through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated storefront users to read and claim other users'… |
CVE-2026-111358 | Medium | 5.4 | 2026-10-15 | SendPortal sendportal-core through 4.0.1 contains an authorization bypass vulnerability that allows authenticated workspace members to attach subscribers to ot… |
CVE-2026-111355 | Medium | 6.3 | 2026-10-15 | zhontai Admin.Core through 10.1.0 contains an authorization bypass vulnerability that allows authenticated users to ignore department DataScope restrictions by… |
CVE-2026-111354 | Low | 3.1 | 2026-10-15 | crmeb_java through 3.1 contains an authorization bypass vulnerability that allows authenticated members to read other members' orders by supplying their order… |
CVE-2026-111351 | Medium | 4.2 | 2026-10-15 | metasfresh through 5.175 contains a missing record-level authorization vulnerability in BoardRestController that allows authenticated low-privilege users to by… |
CVE-2026-111348 | Medium | 5.4 | 2026-10-15 | Likeshop through 3.5.1 contains an insecure direct object reference vulnerability in AfterSale.php and AfterSaleLogic.php that lets authenticated users access… |
CVE-2026-111346 | Medium | 5.4 | 2026-10-15 | ZenTao PMS through 22.6 contains an authorization bypass vulnerability in action::editComment that allows authenticated users to read and overwrite other users… |
CVE-2026-111345 | Medium | 4.3 | 2026-10-15 | Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to read private conversations by supplying another con… |
CVE-2026-111344 | Medium | 4.3 | 2026-10-15 | APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows authenticated users to read node descriptions from other spaces by supp… |
CVE-2026-111331 | Medium | 6.3 | 2026-10-15 | Dokploy through 0.30.8 contains a cross-organization authorization bypass in the port tRPC router that allows authenticated owners or admins of any organizatio… |
CVE-2026-111324 | Medium | 5.3 | 2026-10-15 | rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwrite existing peer records by supplying o… |
CVE-2026-105040 | High | 8.8 | 2026-10-15 | The EnergizeLab Eilik NestJS auth service accepts a user-controlled user ID in account update requests (mass assignment). A registered user can set another acc… |
CVE-2026-111169 | Low | 3.1 | 2026-10-15 | La Suite Docs through 6.0.0 contains an authorization bypass vulnerability that allows authenticated users to write comments into threads of documents they can… |
CVE-2026-108126 | | | 2026-10-15 | temporal-proxy 0.2.0 through 0.8.0 does not bind encrypted payloads to the namespace they were encrypted for. When payload encryption is enabled, the proxy cho… |
CVE-2026-103083 | Medium | 5.4 | 2026-10-15 | Authorization Bypass Through User-Controlled Key vulnerability in ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes elex-bulk-edit… |
CVE-2026-54683 | Medium | 6.5 | 2026-10-15 | NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizatio… |
CVE-2026-110381 | Medium | 6.3 | 2026-10-15 | Authorization Bypass Through User-Controlled Key vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrec… |
CVE-2026-61838 | | | 2026-10-15 | Lychee is a free, open-source photo-management tool. Prior to 7.6.3, GET /api/v2/Zip authorizes album and photo archives through AlbumPolicy::canDownload() and… |
CVE-2026-77460 | Medium | 6.5 | 2026-10-15 | EspoCRM is an open source customer relationship management application. Prior to 10.0.3, a user with email-template edit access and mass-email sending access c… |
CVE-2026-46708 | Medium | 4.3 | 2026-10-15 | EspoCRM is an open source customer relationship management application. Prior to 9.3.7, a low-privileged user who can access a shared TargetList can invoke opt… |
CVE-2026-110724 | | | 2026-10-15 | In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from the leftmost element… |
CVE-2026-107416 | High | 7.5 | 2026-10-15 | Authorization Bypass Through User-Controlled Key vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Acces… |
CVE-2026-44084 | | | 2026-10-15 | An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow remote… |
CVE-2026-108092 | Medium | 4.3 | 2026-10-15 | The Blog2Social – Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and includin… |
CVE-2026-110853 | | | 2026-10-14 | n8n before 1.123.83 contains an authorization bypass vulnerability that allows authenticated members to spoof workflow identity by supplying a trusted identifi… |
CVE-2026-110851 | | | 2026-10-14 | n8n before 2.41.4 and 2.42.x before 2.42.1 contains an authorization bypass in the Agents create endpoint, which accepts a caller-supplied Agent ID, checks per… |
CVE-2026-110841 | | | 2026-10-14 | n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the request body without v… |
CVE-2026-102298 | | | 2026-10-14 | In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required permission check. An authenticated user can supply a caller-controll… |
CVE-2026-71854 | High | 8.2 | 2026-10-14 | OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests. Prior to version 2.26062… |
CVE-2026-103988 | Medium | 5.4 | 2026-10-14 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise /api/folder/renameFolder.php… |
CVE-2026-55387 | | | 2026-10-14 | InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. In version 2.3.3 and earlie… |
CVE-2026-55382 | High | 7.6 | 2026-10-14 | InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, Inv… |
CVE-2026-55381 | High | 7.1 | 2026-10-14 | InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, POS… |
CVE-2026-102986 | High | 8.1 | 2026-10-14 | Plane is an open-source project management tool. In 1.3.1 and earlier, EntityAssetEndpoint at the public project asset endpoint /api/public/assets/v2/anchor/{a… |
CVE-2026-102980 | Medium | 6.5 | 2026-10-14 | Plane is an open-source project management tool. Prior to 1.4.0, PageVersionEndpoint in apps/api/plane/app/views/page/version.py scopes page-version lookups by… |
CVE-2026-110775 | Medium | 6.5 | 2026-10-14 | Nexent through 2.7.0 contains a missing authorization vulnerability in check_file_access that allows authenticated users to read other tenants' knowledge-base… |
CVE-2026-110774 | Medium | 5.3 | 2026-10-14 | Blinko through 1.8.8 contains a broken access control vulnerability in the /api/file route that allows authenticated users to read other users' private attachm… |
CVE-2026-110771 | Medium | 4.3 | 2026-10-14 | Shopizer through 3.2.5 contains an authorization bypass vulnerability that allows authenticated customers to post reviews as other customers by supplying a cus… |
CVE-2026-110764 | Medium | 5.3 | 2026-10-14 | AstronRPA through 1.1.6 contains an insecure direct object reference vulnerability in the resource-service /file/download endpoint that allows authenticated us… |
CVE-2026-110763 | Medium | 4.3 | 2026-10-14 | lamp-boot 4.16.0-java17 through 4.21.2-java17 contains an insecure direct object reference vulnerability in the oauth module's /anyone/findDeptByCompany endpoi… |
CVE-2026-79957 | High | 8.1 | 2026-10-14 | ServiceNext contains an insecure direct object reference (IDOR) in the /api/Usuario/GetUsuarios endpoint, which accepts a user-controlled numeric ID in the req… |
CVE-2026-78433 | | | 2026-10-14 | Gitea's web attachment handler skips its cross-repository ownership check for attachments created before 16 January 2026 and checks permissions against the rep… |
CVE-2026-110620 | Medium | 6.8 | 2026-10-14 | Formbricks before 4.9.0 contains an authorization bypass vulnerability in server actions like resetSurveyAction and updateSegmentAction that fail to verify res… |
CVE-2026-110613 | Medium | 6.5 | 2026-10-14 | youlai-mall through commit 9f62de8 contains a missing authorization vulnerability that allows authenticated members to view every customer's orders via the app… |
CVE-2026-110611 | Medium | 5.9 | 2026-10-14 | REBUILD through 4.5.0 contains an authorization bypass vulnerability in AiBot2Controller /aibot2 endpoints that act on a caller-supplied chatid without verifyi… |
CVE-2026-110608 | Medium | 5.4 | 2026-10-14 | BizSpring Shop through commit cf22d39daaf1 contains an insecure direct object reference vulnerability in the OrderController cancel and receive handlers that a… |
CVE-2026-103366 | High | 7.5 | 2026-10-14 | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in vers… |
CVE-2026-96900 | Medium | 5.3 | 2026-10-14 | The Cart Abandonment Recovery for WooCommerce WordPress plugin before 2.1.4 does not verify ownership of the email address used to select an abandoned-cart re… |
CVE-2026-94261 | Medium | 5.3 | 2026-10-14 | The Sifalo Pay WordPress plugin before 2.5.3 does not verify that a payment transaction identifier belongs to the order it is confirming, nor that the request… |
CVE-2026-88927 | Medium | 4.3 | 2026-10-14 | The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.7.14 does not verify that a user owns or may write to the album an upload is assign… |
CVE-2026-110467 | Medium | 4.3 | 2026-10-14 | Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify a specific parameter to vie… |
CVE-2026-110465 | Medium | 4.3 | 2026-10-14 | Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify a specific parameter to alt… |
CVE-2026-108066 | Low | 2.7 | 2026-10-14 | The WP 2FA WordPress plugin before 4.2.0 does not perform an object-level capability check before removing a user's two-factor authentication configuration, a… |
CVE-2026-107319 | Medium | 4.3 | 2026-10-14 | The GamiPress WordPress plugin before 8.0.6 does not perform a capability check or ownership verification on one of its authenticated AJAX actions, allowing a… |
CVE-2026-106166 | Medium | 5.3 | 2026-10-14 | The NEX-Forms WordPress plugin before 9.3.1 does not perform any authorization, ownership or request-validation checks before updating stored form entries, al… |
CVE-2026-97657 | Critical | 9.8 | 2026-10-14 | The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass via Malleable Encryption and Bypassable HMAC in all versions… |
CVE-2026-107652 | Medium | 5.3 | 2026-10-14 | The Database Addon for Contact Form 7 – CFDB7 plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 1.4.1. This is du… |
CVE-2026-15468 | | | 2026-10-13 | Authorization bypass through User-Controlled key vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.
This issue affects HYPR Passwordle… |
CVE-2026-63163 | High | 7.5 | 2026-10-13 | Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in the MobileFileDownload route that allows unauthenticated attackers to… |
CVE-2026-63153 | High | 8.1 | 2026-10-13 | Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in setAffectations() that allows authenticated attackers to insert access… |
CVE-2026-85873 | Medium | 6.5 | 2026-10-13 | Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network. |
CVE-2026-70185 | High | 8.8 | 2026-10-13 | Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally. |
CVE-2026-110238 | High | 8.8 | 2026-10-13 | Rapyd Admin from 9.0.0 before 9.20.0 contains an authorization bypass vulnerability that allows authenticated company members with the default customer role to… |
CVE-2026-110226 | Medium | 5.4 | 2026-10-13 | QloApps through 1.7.0 contains a broken access control vulnerability that allows hotel-restricted back-office employees to create room types under unassigned h… |
CVE-2026-110213 | Medium | 4.3 | 2026-10-13 | Stonewuu ai-fusion-video through 1.2.0 contains an insecure direct object reference vulnerability that allows authenticated users to read other users' generati… |
CVE-2026-104875 | High | 7.1 | 2026-10-13 | Ente provides end-to-end encrypted cloud services and security tools. Prior to server image 2026.07.09, the POST /emergency-contacts/approve-recovery endpoint… |
CVE-2026-54641 | High | 7.7 | 2026-10-13 | OpenRemote is an open-source internet-of-things platform. Prior to 1.24.2, the get, getUserClientRoles, and getUserRealmRoles methods in manager/src/main/java/… |
CVE-2026-110129 | Medium | 6.5 | 2026-10-13 | fuintCatering through commit 122c9e6 contains an insecure direct object reference vulnerability in the ClientRefundController refund detail endpoint that lets… |
CVE-2026-110127 | Medium | 4.3 | 2026-10-13 | waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in the mobile CartController that allows authenticated members to modify… |
CVE-2026-110126 | Medium | 5.4 | 2026-10-13 | waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in AddressController that allows authenticated members to modify or dele… |
CVE-2026-110125 | Medium | 6.3 | 2026-10-13 | Waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability that allows authenticated members to access and modify other members' or… |
CVE-2026-110124 | High | 8.1 | 2026-10-13 | FastBee through 2.1.0 contains an insecure direct object reference vulnerability in DeviceController that allows authenticated low-privilege users to read and… |
CVE-2026-110122 | Medium | 4.3 | 2026-10-13 | PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that allows authenticated sellers to change other stores' product frei… |
CVE-2026-110121 | Medium | 6.5 | 2026-10-13 | PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that allows authenticated sellers to overwrite any store's product by… |
CVE-2026-110120 | Medium | 5.4 | 2026-10-13 | Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the after-sales API that allows authenticated members to access other mem… |
CVE-2026-110119 | High | 7.1 | 2026-10-13 | Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the member address API that allows authenticated members to read, overwri… |
CVE-2026-110118 | Medium | 6.5 | 2026-10-13 | WorkFlow-Engine through 9.6.11 contains a missing authorization vulnerability that allows authenticated users to complete or reassign other users' workflow tas… |
CVE-2026-110113 | Medium | 4.3 | 2026-10-13 | PublicCMS through V6.202608.a contains an insecure direct object reference vulnerability in the TradeAddressController tradeAddress/save handler that allows au… |
CVE-2026-110107 | Medium | 4.2 | 2026-10-13 | RuoYi-Cloud-Plus through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' social login b… |
CVE-2026-110106 | Medium | 4.2 | 2026-10-13 | RuoYi-Vue-Plus through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' social login bin… |
CVE-2026-110098 | Medium | 5.4 | 2026-10-13 | Jorani before 1.0.4 contains an insecure direct object reference vulnerability that allows authenticated users to modify, delete, and view other employees' req… |
CVE-2026-102981 | Medium | 6.5 | 2026-10-13 | Plane is an open-source project management tool. Prior to 1.4.0, self-hosted Plane deployments allow unauthenticated GET requests to api/workspaces/{slug}/invi… |
CVE-2024-34323 | Critical | 10.0 | 2026-10-13 | ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an Insecure Direct Object Reference (IDOR) via the usrLogin$hdnPFID parameter. This vulnerability… |
CVE-2026-109963 | Medium | 4.3 | 2026-10-13 | Froxlor before 2.3.14 contains an insecure direct object reference vulnerability in the email template editor (admin_templates.php) because the mail body is fe… |
CVE-2026-109957 | Medium | 4.3 | 2026-10-13 | EspoCRM before 10.0.7 contains an insecure direct object reference vulnerability that allows authenticated users with Import scope access to read other users'… |
CVE-2026-89204 | Medium | 5.4 | 2026-10-13 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to database queries used for… |
CVE-2026-89202 | Medium | 6.5 | 2026-10-13 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform authorization checks for device disco… |
CVE-2026-89199 | High | 8.8 | 2026-10-13 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to sensitive configuration it… |
CVE-2026-109116 | High | 7.3 | 2026-10-13 | A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqli_q… |
CVE-2026-109675 | Medium | 4.3 | 2026-10-12 | Frappe Suite before commit 2697564a9c46da6acc614743eaf9915fe5238f4f contains a broken access control vulnerability in the get_mailboxes and get_quota APIs that… |
CVE-2026-109568 | High | 7.1 | 2026-10-12 | Shaark 1.2.13 through 1.2.44 contains a missing authorization vulnerability in the Link, Story, Chest and Album API controllers that skips ownership checks. Au… |
CVE-2026-109427 | Medium | 6.5 | 2026-10-12 | Telegram-Stremio through 5.1.0 contains a broken object-level authorization vulnerability that allows authenticated token holders to access arbitrary chat mess… |