CWE-863 · Incorrect Authorization

3520 CVEs classified under CWE-863 (Incorrect Authorization). Browse by severity and year.

Top CVEs for CWE-863
CVESeverityScorePublishedSummary
CVE-2026-71398Critical10.02026-08-11Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the curren…
CVE-2026-27302Critical10.02026-08-11Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the curren…
CVE-2026-48449Critical10.02026-07-30Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the curren…
CVE-2026-48286Critical10.02026-06-30Adobe Campaign Classic (ACC) versions 7.4.3 build 9396 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code…
CVE-2026-48772Critical10.02026-06-19ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. In versions 2.0.0 through 3.0.8, the ProxySQL MySQL frontend accepts the `PROXY UNKNOWN <ad…
CVE-2026-48303Critical10.02026-06-09Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code…
CVE-2026-44330Critical10.02026-05-27free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the nnef-pfdmanagement route group without inbound OAuth2…
CVE-2026-46595Critical10.02026-05-22Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key…
CVE-2026-33105Critical10.02026-04-03Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-32213Critical10.02026-04-03Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.
CVE-2025-54253Critical10.02025-08-05Adobe Experience Manager versions 6.5.23 and earlier are affected by a Misconfiguration vulnerability that could result in arbitrary code execution. An attacke…
CVE-2025-26853Critical10.02025-03-20DESCOR INFOCAD 3.5.1 and before and fixed in v.3.5.2.0 has a broken authorization schema.
CVE-2023-4617Critical10.02024-12-19Incorrect authorization vulnerability in HTTP POST method in Govee Home application on Android and iOS allows remote attacker to control devices owned by other…
CVE-2023-23924Critical10.02023-02-01Dompdf is an HTML to PDF converter. The URI validation on dompdf 2.0.1 can be bypassed on SVG parsing by passing `<image>` tags with uppercase letters. This ma…
CVE-2022-24783Critical10.02022-03-25Deno is a runtime for JavaScript and TypeScript. The versions of Deno between release 1.18.0 and 1.20.2 (inclusive) are vulnerable to an attack where a malicio…
CVE-2022-21141Critical10.02022-02-18MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not perfo…
CVE-2021-38503Critical10.02021-12-08The iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass restrictions such as executing scripts or navigating the…
CVE-2021-37705Critical10.02021-08-13OneFuzz is an open source self-hosted Fuzzing-As-A-Service platform. Starting with OneFuzz 2.12.0 or greater, an incomplete authorization check allows an authe…
CVE-2020-11844Critical10.02020-05-29Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management. Versions 2018.05 to…
CVE-2018-18815Critical10.02019-03-07The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for Active…
All CVEs classified under CWE-863 — newest first (page 1 of 36)
CVESeverityScorePublishedSummary
CVE-2026-73059Medium6.52026-08-16stoatchat before 0.15.0 contains a permission bypass vulnerability in the message_fetch route that checks only ViewChannel permission instead of requiring Read…
CVE-2026-19598Critical9.82026-08-15The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization Bypass in all versions up to, and inclu…
CVE-2026-74248Medium4.32026-08-14OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By associating another project's QoS policy with an amphora, an auth…
CVE-2026-19629High8.12026-08-14A privilege escalation vulnerability exists in Tenable Security Center that allows a user with "Security Manager" role and "manage user" permission on a single…
CVE-2026-499892026-08-14CrateDB is a distributed SQL database. Prior to versions 6.2.8 and 6.3.2, any authenticated user can read or delete any blob whose SHA-1 digest they know, and…
CVE-2026-73049Medium5.82026-08-14SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getAttributeViewBacklinks endpoint that consults the forbidden access list…
CVE-2026-72859High7.72026-08-14Budibase versions 3.39.4 before 3.40.0 contain an authorization regression in the S3 attachment upload endpoint that allows BASIC users to obtain S3 PutObject…
CVE-2026-72831High8.82026-08-14The Flex Objects plugin (through 1.4.6, tested with Grav 2.0.11) contains an incorrect authorization vulnerability in its Flex Objects API. FlexApiController…
CVE-2026-73841High8.82026-08-13OpenChoreo is a complete, open-source developer platform for Kubernetes. From 1.2.0-rc.1 until 1.2.0, internal/openchoreo-api/api/handlers/exec.go and internal…
CVE-2026-73305High8.82026-08-13Budibase is an open-source low-code platform. Prior to 3.39.24, POST /api/public/v1/roles/assign called validateGlobalRoleUpdate without checking appBuilder.ap…
CVE-2026-72673Medium5.42026-08-13Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized deletion of Synthetics private locations via Accessing Functionality Not Properly Constrai…
CVE-2026-72672High7.72026-08-13The Elastic Security capability that suggests existing field values while a user authors endpoint policy artifacts queries Elastic Defend event data with Kiban…
CVE-2026-72643High7.12026-08-13Kibana Agent Builder determines whether a caller owns a private agent by comparing a stable user identifier when one is recorded, and falling back to a compari…
CVE-2026-72630High7.12026-08-13Incorrect Authorization (CWE-863) in Kibana Fleet can lead to privilege escalation via Privilege Abuse (CAPEC-122). Fleet restricts some callers to managing in…
CVE-2026-736522026-08-13vantage6 is an open-source infrastructure for privacy preserving analysis. In version 5.0.2 and earlier, the algorithm-store edit permission lacks an ownership…
CVE-2026-58444Medium4.32026-08-13Personal access token scope enforcement bypass on the repository home page (`GET /{owner}/{repo}`) discloses private repository contents
CVE-2026-58443Critical9.12026-08-13Public-only repository tokens can update private PR head branches
CVE-2026-58431Medium4.32026-08-13Public-only API token restriction is not enforced on team API routes
CVE-2026-58427High7.52026-08-13Private org member list leaked via /members API endpoint — incomplete fix for PR #38145
CVE-2026-58425Medium4.32026-08-13OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation)
CVE-2026-58416High7.12026-08-13Fork-PR Actions task can read a third private repository via the collaborative-owner branch (missing fork-PR guard)
CVE-2026-57897Medium6.52026-08-13Cross-Repo Information Disclosure via Org-Level Actions Run/Job APIs
CVE-2026-56443Critical9.62026-08-13Token public-only scope bypassed on Limited-visibility owners (Repository + Package categories) — residual after CVE-2026-25714 / PR #37118
CVE-2026-55987High8.12026-08-13OAuth2 sign-in reactivates an administrator-deactivated account on auth sources without refresh tokens (incomplete fix of #38009)
CVE-2026-24791High8.12026-08-13Public-only tokens bypass private-resource restrictions on `/api/v1/user` self routes
CVE-2026-73571Low3.12026-08-13An authorization bypass vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.17 due to improper authorization validation in delegated email sending f…
CVE-2026-70463High8.12026-08-13rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only tokenization when splitting th…
CVE-2026-70452High7.42026-08-13rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability that allows remote attackers to circumvent hosts deny rules by inducing DNS resolution…
CVE-2026-53786Medium6.52026-08-13rsync before 3.5.0 contains a filter rule bypass vulnerability that allows authenticated clients to override module-level filter restrictions by supplying mali…
CVE-2026-19182Medium4.32026-08-13An incorrect authorization check in the v2 Alarm REST API in OpenNMS Meridian and Horizon allows a low-privileged authenticated user (ROLE_REST) to acknowledge…
CVE-2026-49473High8.82026-08-13@cedar-policy/authorization-for-expressjs is an open-source Express.js middleware that integrates Cedar authorization into Express applications by mapping HTTP…
CVE-2026-71193Critical9.62026-08-12In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped to the target pool onl…
CVE-2026-734992026-08-12etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a user granted READ permission on a si…
CVE-2026-72792Medium5.82026-08-12SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/tag/getTag endpoint that returns tag labels and occurrence counts from passwo…
CVE-2026-72788Medium5.82026-08-12SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the UILayout filter that fails to properly restrict administrator workspace st…
CVE-2026-63297Critical9.92026-08-12An authorization bypass vulnerability in LXD due to a timing flaw during configuration merging allows an authenticated attacker to bypass target project restri…
CVE-2026-63296Critical9.92026-08-12An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project restrictions during instance migration. When migrating a…
CVE-2026-63295Medium4.32026-08-12An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass project-level container isolation restrictions. When a project is confi…
CVE-2026-62420Critical9.92026-08-12An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project security restrictions during cross-project instance migr…
CVE-2026-18433Medium4.32026-08-12GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.4 and 19.2 before 19.2.2 that under certain conditions could have allo…
CVE-2026-8667Medium4.32026-08-12GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain c…
CVE-2026-15423High8.52026-08-12GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain co…
CVE-2026-73290Medium5.32026-08-12RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.12, an anonymous ListObjectVersions request in rustfs/src/storage/access.rs th…
CVE-2026-73289High8.12026-08-12RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.12, RustFS evaluates the ForAllValues: and ForAnyValue: set qualifiers with th…
CVE-2026-73286High8.12026-08-12RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.12, RustFS get_condition_values folds attacker-controlled request headers from…
CVE-2026-73285High7.52026-08-12RustFS is a distributed object storage system built in Rust. From 1.0.0-alpha.64 until 1.0.0-rc.1, RustFS external OPA authorization enabled by RUSTFS_POLICY_P…
CVE-2026-73265Medium6.52026-08-12RustFS is a distributed object storage system built in Rust. RustFS authorizes explicit versionId reads in GetObject, CopyObject sources, and UploadPartCopy so…
CVE-2026-68755Medium4.32026-08-12A bundle writer may create misleading release promotion information under specific conditions.
CVE-2026-181712026-08-12Docker Sandboxes (sbx) applies the read-only intent of a runtime host mount to the in-guest container bind only: the underlying virtio-fs host-edge grant is ad…
CVE-2026-47231High8.12026-08-12Admidio is an open-source user management solution. Prior to version 5.0.10, `modules/documents-files.php` gates state-changing modes by checking that the acto…
CVE-2026-47230Medium6.52026-08-12Admidio is an open-source user management solution. Prior to version 5.0.10, `modules/documents-files.php` mode `file_rename_save` shares the same root-cause s…
CVE-2026-47227Medium6.52026-08-12Admidio is an open-source user management solution. `modules/categories.php` checks that the supplied `type` parameter (`ANN`, `EVT`, `ROL`, `USF`, …) correspo…
CVE-2026-64952Medium6.52026-08-12The hunt_delete() VQL function allows deleting hunts.  Velociraptor misapplied the permission check requiring only COLLECT_CLIENT (usually assigned to the "in…
CVE-2026-18046Medium4.32026-08-12The Cookie Consent WordPress plugin before 0.0.10 does not correctly enforce its intended administrator-only capability check on the REST route that stores it…
CVE-2026-15388Medium4.32026-08-12The Cookie Consent WordPress plugin before 0.0.10 does not correctly enforce its intended administrator-only capability check on its consent-settings REST rou…
CVE-2026-63177High7.12026-08-11Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, role-based access control enforced in the Nginx OpenResty Lua layer evaluates the r…
CVE-2026-19550Medium4.32026-08-11A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission on the trust object rather than a trust-administration permissi…
CVE-2026-732212026-08-11CVAT is an open source interactive video and image annotation tool for computer vision. From 2.17.0 until 2.72.0, a user with the Worker role can use predictab…
CVE-2026-18712High8.12026-08-11An issue in MongoDB Server's Queryable Encryption maintenance operations could allow an authenticated user with privileges on one encrypted collection to cause…
CVE-2026-18703Medium4.22026-08-11An issue in MongoDB Server could allow a party with a valid client certificate and a corresponding user account to authenticate using a certificate-based authe…
CVE-2026-18698Medium5.42026-08-11An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that…
CVE-2026-18696Medium6.52026-08-11An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-default privileges to perform certain data-definition operati…
CVE-2026-18690High8.12026-08-11An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that…
CVE-2026-732132026-08-11Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, addr_less_eq() in src/client/ns_turn_ioaddr.c uses a component-wise compa…
CVE-2026-73090Critical9.32026-08-11PeerTube is an ActivityPub-federated video streaming platform. Prior to 8.2.2, processUpdateActivity and processUpdateVideo accept an ActivityPub Update contai…
CVE-2026-71398Critical10.02026-08-11Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the curren…
CVE-2026-71362Critical9.12026-08-11Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability…
CVE-2026-48447High7.72026-08-11Lightroom Classic is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An…
CVE-2026-48416High7.52026-08-11Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerab…
CVE-2026-48415High7.62026-08-11Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage…
CVE-2026-48412Low2.72026-08-11Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker with high privileges could exploi…
CVE-2026-48411Medium6.52026-08-11Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could l…
CVE-2026-27302Critical10.02026-08-11Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the curren…
CVE-2026-71387High8.82026-08-11ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacke…
CVE-2026-71384Critical9.62026-08-11is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass…
CVE-2026-71383High7.32026-08-11is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass…
CVE-2026-69278High7.82026-08-11Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-63512Medium6.52026-08-11Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.
CVE-2026-62872High8.82026-08-11Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network.
CVE-2026-62775Medium5.52026-08-11Incorrect authorization in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to disclose information locally.
CVE-2026-61925High7.82026-08-11Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-48375Medium6.52026-08-11ColdFusion is affected by an Incorrect Authorization vulnerability that could result in an application denial-of-service. A low-privileged attacker could explo…
CVE-2026-25652High7.82026-08-11is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability t…
CVE-2026-72921High8.12026-08-11SeaweedFS is a distributed storage system. Prior to 4.24, the weed/server/filer_server_handlers.go allowed_prefixes authorization check used strings.HasPrefix…
CVE-2026-18635High7.22026-08-11Velociraptor's VQL has a query() plugin which allows running a VQL query in a different org or user context. To be able to run as a different user, the calling…
CVE-2026-72785Medium4.32026-08-11Craft CMS 5.0.0-RC1 through 5.10.5 contains an incorrect authorization vulnerability. A control-panel user holding only the viewCategories permission (without…
CVE-2026-727712026-08-11n8n versions before 2.32.1 fail to enforce the Allowed HTTP Request Domains allowlist in multiple AI and LLM nodes when user-supplied base or endpoint URLs are…
CVE-2026-137382026-08-11CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations. Software customers upgrade to resolved main…
CVE-2026-137372026-08-11CommServe contained an allowlist bypass vulnerability affecting command execution authorization. Software customers upgrade to resolved maintenance release. U…
CVE-2026-18348Medium4.12026-08-11Missing authorization check in the upload_azure, upload_sftp, and upload_smb VQL plugins allows an authenticated analyst-role user can initiate attacker-contro…
CVE-2025-302382026-08-10In affected TP-Link Aginet devices, insufficient authorization validation allows authenticated low-privileged users to execute higher-privileged operations. …
CVE-2026-72886Critical9.92026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS). From 0.29.2 until 0.29.13, schedule.create and schedule.update in apps/dokploy/server/api/router…
CVE-2026-69118High8.82026-08-10Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows authenticated users to execute arbitrar…
CVE-2026-12624Medium4.32026-08-10Vault’s ACL policy engine did not consistently enforce a wildcard (glob) deny rule against LIST requests made with a trailing slash on the denied path. This ma…
CVE-2026-210772026-08-10Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.
CVE-2026-210762026-08-10Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.
CVE-2026-18934Medium5.52026-08-10The RSS Aggregator by Feedzy WordPress plugin before 5.2.6 does not verify that the requesting user owns or is allowed to edit the import job named in the req…
CVE-2026-15229Medium5.32026-08-10The Pinpoint Booking System WordPress plugin through 2.9.9.7.1 does not validate the booking price on the server side, allowing unauthenticated users to creat…
CVE-2026-19350Medium6.32026-08-09A vulnerability has been found in Dolibarr ERP up to 23.0.3. Affected is the function fail of the file htdocs/takepos/invoice.php of the component TakePOS Modu…
CVE-2026-19345Medium6.52026-08-09A vulnerability was found in code-projects Task Management System 1.0. This affects an unknown part of the file /user/UpdateTaskStatus.php. The manipulation of…