CWE-862 · Missing Authorization (page 2)
Page 2 of 100 — CVEs classified under CWE-862, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-100573 | Low | 3.3 | 2026-09-26 | OpenClaw versions before 2026.8.1 contain a sandbox policy bypass vulnerability in the MCP loopback component that allows sandboxed coding-agent sessions to in… |
CVE-2026-100544 | High | 8.8 | 2026-09-26 | openclaw's @openclaw/voice-call package before 2026.8.1 launches the configured agent for classic inbound voice calls without propagating the caller's identity… |
CVE-2026-100537 | Low | 3.1 | 2026-09-26 | OpenClaw (npm package 'openclaw') before 2026.8.1 fails to apply the originating requester's effective tool policy during Active Memory automatic recall. In de… |
CVE-2026-100532 | High | 8.1 | 2026-09-26 | @openclaw/whatsapp (npm) before 2026.8.1 exposes the WhatsApp login tool through the generic channel-tool path without preserving the originating sender's owne… |
CVE-2026-100526 | Medium | 5.3 | 2026-09-26 | OpenClaw's Discord integration (npm package @openclaw/discord) before version 2026.9.3 could lose the sender-scoped media policy in the emoji and sticker uploa… |
CVE-2026-100525 | Medium | 4.3 | 2026-09-26 | The OpenClaw Prometheus diagnostics plugin (@openclaw/diagnostics-prometheus) before version 2026.9.3 does not enforce the operator.read scope on its authentic… |
CVE-2026-63431 | Medium | 6.5 | 2026-09-25 | Horilla is an HR and CRM software. In 1.5.0-85 and earlier, payroll/views/component_views.py does not consistently authorize access in allowances_deductions_ta… |
CVE-2026-100417 | Low | 3.1 | 2026-09-25 | RustDesk before 1.5.0 on Windows fails to enforce the one-way file transfer option against peer clipboard file requests, allowing authenticated peers to read f… |
CVE-2026-100388 | Medium | 5.4 | 2026-09-25 | RustDesk versions before 1.5.0 fail to properly validate file transfer permissions on incoming file clipboard messages in the Cliprdr message handler on Linux… |
CVE-2026-100378 | | 2026-09-25 | Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - Translate Extension allows Accessing Functionality Not Properly Constrained by ACLs. T… | |
CVE-2026-63205 | | 2026-09-25 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when creating or updating an email signature, Zammad processes inline image… | |
CVE-2026-63204 | | 2026-09-25 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, an authenticated user with agent permissions can supply an arbitrary AI ana… | |
CVE-2026-53627 | | 2026-09-25 | GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, a low-privileged authenticated user can use the new API (v2) to perform upda… | |
CVE-2026-53626 | | 2026-09-25 | GLPI is a free asset and IT management software package. From 11.0.5 until 11.0.8, under certain conditions, permission logic can grant access to a document wi… | |
CVE-2026-53625 | | 2026-09-25 | GLPI is a free asset and IT management software package. From 0.70 until 10.0.26 and 11.0.8, a technician can manipulate the authtype value through the API to… | |
CVE-2026-100305 | Medium | 4.3 | 2026-09-25 | TDuck survey form through 6.0 fails to enforce form fill-in restrictions on the authenticated submission endpoint POST /user/form/data/create. Authenticated at… |
CVE-2026-100303 | Medium | 5.4 | 2026-09-25 | TDuck survey form through 6.0 lacks authorization checks on FormThemeController write endpoints for global form themes and categories. Authenticated non-admin… |
CVE-2026-65828 | | 2026-09-25 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, the legacy destroy_form action on AttachmentsController deletes UploadCache… | |
CVE-2026-56730 | | 2026-09-25 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, an authorization bypass vulnerability was found that allows an authenticate… | |
CVE-2026-56726 | | 2026-09-25 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, this vulnerability breaks normal ticket isolation boundaries between agents… | |
CVE-2026-95835 | | 2026-09-25 | Missing Authorization in the askpass escape code handler in kitty from 0.25.0 before 0.49.0 allows a local user other than the one running the terminal to obta… | |
CVE-2026-93365 | Medium | 6.5 | 2026-09-25 | Bludit CMS through 3.22.0 contains a missing authorization vulnerability that allows authenticated users holding the Author or Editor role to read the full con… |
CVE-2026-93363 | Medium | 4.3 | 2026-09-25 | The @payloadcms/storage-vercel-blob storage adapter for Payload contains an improper access control vulnerability that allows authenticated users to bypass col… |
CVE-2026-80432 | | 2026-09-25 | Missing Authorization in the drop handling path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program writing to the terminal to ob… | |
CVE-2026-67421 | | 2026-09-25 | RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, RabbitMQ Management rendered an AMQP authorization-… | |
CVE-2026-67420 | | 2026-09-25 | RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, RabbitMQ OAuth credential refresh retains revoked r… | |
CVE-2026-67412 | | 2026-09-25 | RabbitMQ is a messaging and streaming broker. From 3.13.0 until 4.3.3, 4.2.9 , 4.1.14, 4.0.24, and 3.13.18, Federation upstream in RabbitMQ skips vhost authori… | |
CVE-2026-67407 | | 2026-09-25 | RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3 and 4.2.9 and 4.1.14 and 4.0.23, Incomplete fix for CVE-2026-44838: escaperegexchar/1 does… | |
CVE-2026-67241 | | 2026-09-25 | RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, AMQP 1.0 management exchange.declare skips alternate-exchange permission check… | |
CVE-2026-66078 | | 2026-09-25 | RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.20 and 4.1.11 and 4.2.6, protected tag bypass via bulk-delete. dELETE /api/user… | |
CVE-2026-61837 | | 2026-09-25 | RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3, 4.2.9, 4.1.14, and 4.0.23, AMQP 1.0 management GET /bindings exposes full binding topolog… | |
CVE-2026-56724 | | 2026-09-25 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary An issue with permission checks in the knowledge base management ar… | |
CVE-2026-97898 | | 2026-09-25 | Insecure Direct Object Reference / missing object-level authorization in the Akia keyless entry cloud service. The unlock action is relying on a client-supplie… | |
CVE-2026-92713 | High | 8.1 | 2026-09-25 | The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in… |
CVE-2026-89406 | High | 7.5 | 2026-09-25 | The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to unauthorized disclosure of private gallery contents in versions up… |
CVE-2026-92829 | Medium | 4.3 | 2026-09-25 | The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 9.1.0. Thi… |
CVE-2026-89055 | Critical | 9.1 | 2026-09-25 | The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.120.0. This is due to t… |
CVE-2026-19775 | Medium | 4.3 | 2026-09-25 | The OpenStation — Desktop Windows, Dock & Virtual Desktops for WP Admin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and i… |
CVE-2026-97648 | Medium | 4.3 | 2026-09-25 | A vulnerability was detected in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected is an unknown function. Performin… |
CVE-2026-86860 | | 2026-09-24 | ServiceNow has remediated a missing authorization vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthent… | |
CVE-2026-86857 | | 2026-09-24 | ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if exploited, could en… | |
CVE-2026-77321 | Medium | 4.3 | 2026-09-24 | TREK is a collaborative travel planner. Prior to 3.3.0, the get_trip_summary tool in server/src/mcp/tools/trips.ts is registered for scoped OAuth MCP tokens wi… |
CVE-2026-77293 | High | 7.1 | 2026-09-24 | TREK is a collaborative travel planner. Prior to 3.3.0, the DELETE /api/trips/:tripId/collab/notes/:noteId/files/:fileId endpoint authorizes an authenticated u… |
CVE-2026-52850 | Medium | 4.3 | 2026-09-24 | Docmost is open-source collaborative wiki and documentation software. Prior to 0.90.1, an authenticated workspace member who does not belong to a private space… |
CVE-2026-61604 | | 2026-09-24 | The ixo Blockchain is a Layer 1 blockchain that runs on both Testnet and Mainnet. Prior to version 8.0.0, the x/bonds module moved funds from an address that w… | |
CVE-2026-91160 | High | 8.2 | 2026-09-24 | OpenWA is a free, open source, self-hosted WhatsApp API gateway. Prior to 0.23.5, the /events WebSocket gateway delivers the session.qr event to a VIEWER API k… |
CVE-2026-84302 | Medium | 4.2 | 2026-09-24 | Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, Discourse AI reviewables associated with private messages… |
CVE-2026-79758 | Medium | 5.4 | 2026-09-24 | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.8.0 until 2.5.1, authenticated Termix user… |
CVE-2026-67233 | | 2026-09-24 | RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, The shovel management resource's is_authorized/2 del… | |
CVE-2026-63203 | High | 7.6 | 2026-09-24 | Logto is the modern, open-source auth infrastructure for SaaS and AI apps. From 1.31.0 until 1.42.0, the Account API handlers in packages/core/src/routes/accou… |
CVE-2026-65422 | Medium | 6.5 | 2026-09-24 | A flaw in the authorization mechanism for Media Gateway API in Genetec Security Center may allow a user with no playback privileges to generate video thumbnail… |
CVE-2026-97360 | Critical | 10.0 | 2026-09-24 | HFS2 version 2.4.0 and earlier contains an unauthenticated arbitrary file access vulnerability that allows unauthenticated attackers to read, write, append, an… |
CVE-2026-97061 | Medium | 4.3 | 2026-09-24 | Black Candy through 3.2.1 fails to scope playlist search queries to the authenticated session user, allowing any authenticated user to enumerate all playlists… |
CVE-2026-96515 | | 2026-09-24 | This vulnerability exists in the Netlink ICT HG323RW router due to insufficient authorization and input validation controls in the diagnostic script import fun… | |
CVE-2026-97311 | Medium | 4.3 | 2026-09-24 | A flaw was found in the Admin REST API of Keycloak, an identity and access management solution. The endpoints used to retrieve groups associated with a specifi… |
CVE-2026-4806 | Medium | 6.5 | 2026-09-24 | The Custom Thank You Page for WooCommerce plugin for WordPress is vulnerable to unauthorized access and loss of data due to a missing capability check on the s… |
CVE-2026-3253 | Medium | 4.3 | 2026-09-24 | The MailerLite – Signup forms (official) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the forms… |
CVE-2026-97177 | Medium | 6.6 | 2026-09-24 | A flaw was found in the user update mechanism of the Keycloak Admin REST API. When Fine-Grained Admin Permissions are enabled, the system fails to check for sp… |
CVE-2026-97176 | Medium | 4.2 | 2026-09-24 | A flaw was found in the Level of Authentication enforcement mechanism of Keycloak, an identity and access management solution. The issue occurs when a client s… |
CVE-2026-88847 | Medium | 4.3 | 2026-09-24 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not verify that a user is enrolled in a course before recording lesson completions ag… |
CVE-2026-88846 | Medium | 5.3 | 2026-09-24 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not check whether user registration is enabled on the site before creating an account… |
CVE-2026-88845 | Medium | 4.3 | 2026-09-24 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform any capability or nonce checks on an administrative maintenance action, a… |
CVE-2026-82195 | Medium | 6.5 | 2026-09-24 | The 10Web Booster WordPress plugin before 2.34.0 does not restrict access to the routine which issues the shared secret that authenticates its cloud connectio… |
CVE-2026-80338 | Medium | 6.8 | 2026-09-24 | The CMB2 WordPress plugin before 2.13.0 does not perform any capability check on one of its AJAX actions, allowing users with a role as low as Subscriber to cr… |
CVE-2026-92470 | High | 7.7 | 2026-09-24 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain condi… |
CVE-2026-96680 | Medium | 4.3 | 2026-09-23 | A vulnerability was detected in ByteDance Coze Scraper Extension up to 2.0.2. Affected by this vulnerability is the function chrome.runtime.onMessageExternal.a… |
CVE-2026-96603 | High | 7.3 | 2026-09-23 | A vulnerability has been found in Abdurrab5 online-makeup-store. Affected is the function confirm_logged_in/confirm_user of the file functions.php of the compo… |
CVE-2026-67218 | | 2026-09-23 | RabbitMQ is a messaging and streaming broker. Prior to versions 4.0.22, 4.1.11, 4.2.6, and 4.3.0, accept_content/2 at line 56 calls rabbit_stream_manager:creat… | |
CVE-2026-66075 | | 2026-09-23 | RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, is_authorized/2 for the /federation-links/.../restar… | |
CVE-2026-66069 | | 2026-09-23 | RabbitMQ is a messaging and streaming broker. Prior to versions 4.1.13, 4.2.7, and 4.3.0, is_authorized/2 uses is_authorized_monitor for all methods. DELETE re… | |
CVE-2026-96551 | Medium | 4.3 | 2026-09-23 | A vulnerability was determined in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. Impacted is an unknown function of the file ssm_pro/src/m… |
CVE-2026-84719 | Critical | 9.9 | 2026-09-23 | A flaw was found in the Ansible Automation Platform automation-controller. When a WorkflowJobTemplate is copied, the deep-copy permission sanitizer validates o… |
CVE-2026-66076 | | 2026-09-23 | RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, is_authorized/2 calls rabbit_mgmt_util:is_authorized… | |
CVE-2026-95604 | High | 7.5 | 2026-09-23 | Unauthenticated Broken Access Control in Loops & Logic <= 4.2.4 versions. |
CVE-2026-95527 | Medium | 6.5 | 2026-09-23 | Unauthenticated Broken Access Control in Conekta Payment Gateway <= 6.2.4 versions. |
CVE-2026-95513 | High | 7.5 | 2026-09-23 | Unauthenticated Broken Access Control in Online Booking & Scheduling Calendar for WordPress by vcita <= 4.6.0 versions. |
CVE-2026-94679 | Medium | 5.4 | 2026-09-23 | Subscriber Broken Access Control in Fluent Support <= 2.3.2 versions. |
CVE-2026-94498 | Medium | 6.5 | 2026-09-23 | Unauthenticated Broken Access Control in AppMySite <= 3.15.4 versions. |
CVE-2026-94080 | Medium | 5.3 | 2026-09-23 | Unauthenticated Broken Access Control in MarketKing <= 2.1.70 versions. |
CVE-2026-94079 | Medium | 5.3 | 2026-09-23 | Unauthenticated Broken Access Control in WP User Manager <= 2.9.19 versions. |
CVE-2026-93620 | Medium | 6.5 | 2026-09-23 | Unauthenticated Broken Access Control in PayPlus Payment Gateway <= 8.2.5 versions. |
CVE-2026-93529 | Medium | 6.5 | 2026-09-23 | Contributor Broken Access Control in WSP MCP – AI Agents Connector <= 2.7.0 versions. |
CVE-2026-76648 | High | 8.5 | 2026-09-23 | CopyAPIView (awx/awx/api/generics.py:873) sets permission_classes = (IsAuthenticated,), so DRF's get_object() performs no object-level RBAC. The get() handler… |
CVE-2026-76089 | High | 7.7 | 2026-09-23 | Formie is a Craft CMS plugin for creating forms. Prior to 2.2.23 and 3.1.31, Formie's formie/sent-notifications/get-resend-modal-content control panel action i… |
CVE-2026-76087 | High | 8.2 | 2026-09-23 | Formie is a Craft CMS plugin for creating forms. Prior to 2.2.23 and 3.1.31, Formie's anonymous formie/submissions/submit action in SubmissionsController::acti… |
CVE-2026-76086 | High | 8.5 | 2026-09-23 | Formie is a Craft CMS plugin for creating forms. Prior to 2.2.23 and 3.1.31, Formie's formie/integrations/form-settings control panel action in IntegrationsCon… |
CVE-2026-71460 | Medium | 4.3 | 2026-09-23 | /api/v2/config/ is protected only by IsAuthenticated. license_info (account_number, subscription_id, pool_id, sku, support_level, i… |
CVE-2026-71459 | Medium | 5.0 | 2026-09-23 | JobJobEventsChildrenSummary view has no model/parent_model. ModelAccessPermission.check_get_permissions() falls through (returns Tr… |
CVE-2026-52744 | | 2026-09-23 | GoCD is a continuous deliver server. From 20.2.0 until 26.1.0, the internal GoCD UI fetch-artifact auto-suggestion API at /go/api/internal/pipelines/**/upstrea… | |
CVE-2026-86867 | Medium | 6.5 | 2026-09-23 | Cinnamon's Kotaemon (all versions up to and including v0.12.0) multi-user chat interface contains multiple vulnerabilities due to incorrect authorization and i… |
CVE-2026-95846 | High | 7.5 | 2026-09-23 | Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.publishWill publishes a client's Last-Will message without applying the canWrite author… |
CVE-2026-18179 | Medium | 6.5 | 2026-09-23 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to clear active chat sessions due to improper authorization. |
CVE-2026-18177 | High | 7.1 | 2026-09-23 | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute unauthorized payment actions due to missing authorization… |
CVE-2026-96446 | Medium | 4.2 | 2026-09-23 | A flaw was found in the Pushed Authorization Request PAR implementation of Keycloak. The issue occurs when the silent authentication path prompt=none is used… |
CVE-2026-87848 | Low | 3.7 | 2026-09-23 | The MPCX Lightbox WordPress plugin 1.2.2 through 1.2.5 does not have any authorisation or authentication on one of its AJAX actions available to unauthenticate… |
CVE-2026-96454 | High | 8.2 | 2026-09-23 | Pake turns a website into a desktop application built on Tauri. Every application it generates inherits two settings from the upstream template, and together t… |
CVE-2026-6831 | Medium | 6.5 | 2026-09-23 | The Advanced Contact form 7 DB plugin for WordPress is vulnerable to missing authorization in all versions up to, and including, 2.0.9. This is due to the plug… |
CVE-2026-93510 | Medium | 4.3 | 2026-09-23 | The Points and Rewards for WooCommerce WordPress plugin before 2.10.4 does not validate the claimed reward amount or restrict who can call its Win Wheel claim… |
CVE-2026-93508 | High | 8.1 | 2026-09-23 | The WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to its field-management AJAX action, allowing authenticated users with S… |
CVE-2026-93507 | Low | 3.3 | 2026-09-23 | The WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to, or verify a nonce for, a post-cloning action, allowing Contributor-l… |