CVE-2026-102139 | Medium | 6.5 | 2026-09-30 | An authorization check in the large file exchange feature of Kiteworks Email Protection Gateway did not correctly establish that the requesting user was a part… |
CVE-2026-102122 | Medium | 4.3 | 2026-09-30 | Kiteworks did not correctly enforce which roles a shared folder's manager was permitted to assign. In a default configuration, an authenticated user holding th… |
CVE-2026-103547 | | | 2026-09-30 | In ldapd in OpenBSD 7.8 before errata 057 and 7.9 before errata 021, delegated BSD authentication results are correlated only by the LDAP child process client… |
CVE-2026-101880 | High | 8.8 | 2026-09-30 | OpenClaw Windows Node before 2026.7.1 contains an incorrect authorization vulnerability in the system.run exec-approval policy where ExecShellWrapperParser fai… |
CVE-2026-55176 | Critical | 9.0 | 2026-09-30 | Soft Machine is a Virtual Machine–based agentic development environment / Cloud OS. In versions 0.2.247 and prior, two authentication helpers in /app/server.js… |
CVE-2026-47591 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could bypass read-only memory protection due t… |
CVE-2026-47571 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Windows contains a vulnerability in kernel-mode escape handling where an attacker with local access could bypass an authorization… |
CVE-2026-100278 | Medium | 4.9 | 2026-09-30 | In JetBrains YouTrack before 2026.2.19197 users with restricted permission could edit and hide other users' comments |
CVE-2026-100277 | High | 8.9 | 2026-09-30 | In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature |
CVE-2026-100276 | Medium | 5.9 | 2026-09-30 | In JetBrains YouTrack before 2026.2.19197 guest users could remove a workflow action's visibility restriction and run the action |
CVE-2026-100273 | High | 8.2 | 2026-09-30 | In JetBrains YouTrack before 2026.2.19197 authorisation bypass in the scripts debugger allowed arbitrary code execution |
CVE-2026-100270 | Low | 3.3 | 2026-09-30 | In JetBrains YouTrack before 2026.2.19197 low-level Admin Read permission users could disclose integration credentials via import configurations |
CVE-2026-100262 | High | 7.6 | 2026-09-30 | In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users with read-only project access to overwrite project notification templates |
CVE-2026-100259 | Medium | 4.3 | 2026-09-30 | In JetBrains YouTrack before 2026.2.18991 improper access control on Gantt chart allowed edits by users with view-only access |
CVE-2026-103396 | Medium | 4.3 | 2026-09-30 | bbs-go through 4.4.6 contains a permission bypass vulnerability in the AdminMiddleware authorization logic where the read-only dashboard.user.view permission r… |
CVE-2026-13719 | Medium | 4.3 | 2026-09-30 | An authenticated user can list alert rules stored in folders they are not allowed to read through the alert rules API list endpoint. When the set of folders th… |
CVE-2026-103105 | High | 8.8 | 2026-09-30 | Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper access control on a product-internal API which allows an attacker with local acce… |
CVE-2026-86101 | | | 2026-09-30 | An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SAML user with access only to the Access… |
CVE-2026-81842 | Medium | 4.3 | 2026-09-29 | An authenticated user with edit permission on one folder can move a library panel into another folder where they only have view permission, through the library… |
CVE-2026-61519 | High | 8.8 | 2026-09-29 | Liberu CRM 0.9.1 before 10.0.0 contains a broken access control vulnerability that allows any user holding a pending team invitation to invite additional attac… |
CVE-2026-102330 | Medium | 6.5 | 2026-09-29 | Incorrect authorization in SiteIsolation in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass w… |
CVE-2026-102327 | High | 7.5 | 2026-09-29 | Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to… |
CVE-2026-95375 | Medium | 6.3 | 2026-09-29 | Incorrect authorization in BrowserTag in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web… |
CVE-2026-95374 | | | 2026-09-29 | Incorrect authorization in Network in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chro… |
CVE-2026-95368 | Medium | 4.3 | 2026-09-29 | Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially obtain cross… |
CVE-2026-95358 | Medium | 4.4 | 2026-09-29 | Incorrect authorization in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to bypass system access restrictions into a pr… |
CVE-2026-95355 | High | 8.3 | 2026-09-29 | Incorrect authorization in Navigation in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to p… |
CVE-2026-95352 | Medium | 5.4 | 2026-09-29 | Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy… |
CVE-2026-95340 | Medium | 4.3 | 2026-09-29 | Incorrect authorization in PictureInPicture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origi… |
CVE-2026-95317 | Low | 3.1 | 2026-09-29 | Incorrect authorization in MediaCapture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin… |
CVE-2026-95314 | | | 2026-09-29 | Incorrect authorization in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system acce… |
CVE-2026-95302 | Low | 2.9 | 2026-09-29 | Incorrect authorization in WebAPKs in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to obtain cross-origin data via a co-installe… |
CVE-2026-95292 | Medium | 4.8 | 2026-09-29 | Incorrect authorization in Safebrowsing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via crafted netw… |
CVE-2026-95289 | Medium | 4.3 | 2026-09-29 | Incorrect authorization in Scroll in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin data v… |
CVE-2026-102807 | Medium | 5.3 | 2026-09-29 | OpenClaw before 2026.9.4 contains an incorrect authorization vulnerability in the mcp.app.view method that allows read-scoped operators to execute MCP App tool… |
CVE-2026-102806 | Medium | 6.3 | 2026-09-29 | OpenClaw before 2026.9.5 contains an incorrect authorization vulnerability in the Gateway's local media root allowlist that breaks filesystem isolation between… |
CVE-2026-102697 | High | 7.8 | 2026-09-29 | Ollama versions 0.14.0 before 0.31.2 contain an incorrect authorization vulnerability in the experimental agent mode Bash tool approval mechanism that fails to… |
CVE-2026-102568 | Medium | 5.5 | 2026-09-29 | Pardus Parental Control before 0.7.0 contains an incorrect authorization vulnerability in the polkit policy that allows unprivileged local users to disable par… |
CVE-2026-78214 | Medium | 5.3 | 2026-09-29 | An authentication bypass vulnerability exists in the protection of Actuator endpoints. The application determines whether authentication is required by matchin… |
CVE-2026-71899 | | | 2026-09-29 | A missing authorization vulnerability exists in the `query-dynamic-sub-workflows` API of Apache DolphinScheduler. The API does not properly verify whether the… |
CVE-2026-71898 | Medium | 4.3 | 2026-09-29 | An incorrect authorization check in Apache DolphinScheduler allows an authenticated user with only read permission for a project to modify a workflow instance… |
CVE-2026-71897 | Medium | 4.3 | 2026-09-29 | An improper authorization check in Apache DolphinScheduler allows an authenticated user to use the batch-copy and batch-move endpoints to operate on workflows… |
CVE-2026-10518 | Medium | 4.3 | 2026-09-29 | GitLab has remediated an issue in GitLab EE affecting all versions from 17.9 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain condi… |
CVE-2026-102249 | High | 7.3 | 2026-09-29 | A security flaw has been discovered in REBUILD up to 4.4.11. This vulnerability affects unknown code of the file /commons/file-editor-save. The manipulation of… |
CVE-2026-102335 | High | 7.1 | 2026-09-28 | Nginx Proxy Manager through 2.16.0 fails to restrict the advanced_config field to administrators, allowing non-admin users with manage permissions to inject ar… |
CVE-2026-102297 | Medium | 4.3 | 2026-09-28 | ZoneMinder before 1.38.4 fails to apply per-monitor access restrictions in the FramesController index endpoint. Authenticated users with Events view permission… |
CVE-2026-100392 | | | 2026-09-28 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. In version 1.7.2, Users::form() performs no object-level au… |
CVE-2026-100371 | | | 2026-09-28 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. In version 1.7.2, an authorization guard to Users::change_p… |
CVE-2026-101914 | Medium | 6.5 | 2026-09-28 | @grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.1 and 1.14.1, the exact path (method name) mat… |
CVE-2026-101139 | Low | 2.7 | 2026-09-28 | A vulnerability was detected in Webkul Bagisto up to 2.4.6/2.5.0-beta4. This impacts an unknown function of the file /admin/sales/invoices/mass-update/state of… |
CVE-2026-86102 | | | 2026-09-28 | An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell com… |
CVE-2026-97335 | High | 7.7 | 2026-09-28 | Incorrect authorization in the custom storage volume creation endpoint in Canonical LXD versions 5.0.0 and later (fixed in 5.0.10, 5.21.8 and 6.10) on Linux al… |
CVE-2026-19759 | | | 2026-09-28 | An Incorrect Authorization vulnerability in the task configuration in Google Cloud Application Integration versions prior to 2026-06-17 on Google Cloud Platfor… |
CVE-2026-82378 | Critical | 9.0 | 2026-09-28 | Incorrect Authorization in the OAuth 1.0a authorization endpoint of Apache Roller 6.1.5 allows an unauthenticated remote attacker who learns an outstanding req… |
CVE-2026-101006 | Medium | 4.3 | 2026-09-28 | A flaw has been found in Frappe HR up to 16.15.0. This vulnerability affects the function get_expense_claims/get_shift_requests/get_attendance_requests of the… |
CVE-2026-101000 | Critical | 10.0 | 2026-09-28 | A vulnerability was determined in Netcore NBR100V2 1.3.240614.030928. This affects the function uci.apply of the file /usr/share/rpcd/acl.d/unauthenticated.jso… |
CVE-2026-101062 | High | 8.8 | 2026-09-27 | Obot before v0.23.0 (affected versions <= v0.22.1) running with OBOT_SERVER_ENABLE_AUTHENTICATION=true exposes OAuth dynamic client registration without authen… |
CVE-2026-100879 | Medium | 4.3 | 2026-09-27 | A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1. This affects the function checkRoleAllowed of the file SysRoleServiceImpl.java of t… |
CVE-2026-101056 | Medium | 5.3 | 2026-09-27 | Cloudreve before 4.16.1 fails to revalidate share access when restoring cached navigator state from a context_hint UUID. Attackers who previously had valid sha… |
CVE-2026-101048 | Medium | 5.4 | 2026-09-27 | Cloudreve before 4.17.0 registers the administrative node test endpoints (POST /api/v4/admin/node/test and POST /api/v4/admin/node/test/downloader) without req… |
CVE-2026-100869 | Medium | 5.9 | 2026-09-27 | Sylius versions before 2.1.16 and 2.2.9 fail to restrict payment request actions in the Shop API endpoint, allowing customers to trigger refunds on completed o… |
CVE-2026-100744 | High | 7.3 | 2026-09-27 | A flaw has been found in coollabsio Coolify up to 4.1.2. The affected element is an unknown function of the file app/Http/Middleware/CanUpdateResource.php of t… |
CVE-2026-100721 | Critical | 9.0 | 2026-09-27 | vm2 before 3.12.2 contains an authorization bypass in the NodeVM external-module resolver. When an embedder configures `require.external` with a custom resolve… |
CVE-2026-100704 | High | 7.7 | 2026-09-26 | Kyverno is a policy engine for Kubernetes. In versions 1.14.0 through 1.19.0, the ImageValidatingPolicy (policies.kyverno.io/v1beta1) evaluator never reads the… |
CVE-2026-100685 | High | 7.7 | 2026-09-26 | Budibase before 3.45.0 fails to properly scope the GET /api/chat-links endpoint by workspace, allowing builders to enumerate chat identity link records across… |
CVE-2026-100633 | Medium | 6.5 | 2026-09-26 | SiYuan is a self-hosted personal knowledge management system. In versions 3.8.0 through 3.8.3, the MCP file tool's sensitive-path guard (util.IsForbiddenAbsPat… |
CVE-2026-100629 | Medium | 5.5 | 2026-09-26 | Capgo (capgo.app backend) before 12.127.5 contains an authorization flaw in the PATCH /private/role_bindings/:binding_id endpoint. The handler verifies that th… |
CVE-2026-100628 | Medium | 4.3 | 2026-09-26 | capgo.app before 12.128.12 fails to enforce an organization's API key expiration policy when creating app-scoped API keys. In the POST /apikey endpoint, reques… |
CVE-2026-100623 | High | 8.8 | 2026-09-26 | Capgo (capgo.app) exposes the legacy membership table public.org_users directly through Supabase PostgREST. The table's row-level security policies "Allow org… |
CVE-2026-100616 | Medium | 5.5 | 2026-09-26 | capgo.app is an over-the-air update platform for Capacitor apps. In all versions prior to a fix, the row-level security UPDATE policy on the public.orgs table… |
CVE-2026-100613 | Medium | 5.3 | 2026-09-26 | capgo.app is an over-the-air (OTA) update platform for Capacitor apps. In all versions up to and including the current release (no patch available at time of p… |
CVE-2026-100604 | Medium | 5.4 | 2026-09-26 | ClawHub (openclaw/clawhub) contains an incorrect authorization vulnerability in the ClawHub application/backend: an organization-owned skill retains the ownerU… |
CVE-2026-100590 | Medium | 4.3 | 2026-09-26 | OpenClaw before 2026.7.1 contains an authorization bypass vulnerability in the /voice set command that allows non-owner external-channel senders to persist Gat… |
CVE-2026-100589 | High | 8.3 | 2026-09-26 | OpenClaw versions before 2026.7.1 contain a sandbox bypass vulnerability in the browser tool that allows sandboxed sessions to access paired node browser actio… |
CVE-2026-100588 | High | 8.3 | 2026-09-26 | OpenClaw (npm package 'openclaw') before 2026.7.1 does not enforce the administrator scope requirement on browser control when it is reached through the node.i… |
CVE-2026-100566 | Medium | 6.5 | 2026-09-26 | OpenClaw LINE versions before 2026.8.1 contain an access control vulnerability where group allowlist mode silently inherits DM allowFrom values when groupAllow… |
CVE-2026-100562 | Medium | 5.4 | 2026-09-26 | OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in the sessions.create endpoint that allows operator.write callers to modify se… |
CVE-2026-100560 | High | 7.5 | 2026-09-26 | OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability where Allow Always approvals for exact commands persist as path-only grants on… |
CVE-2026-100557 | High | 8.3 | 2026-09-26 | OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in skill tool dispatch that fails to carry the sender's owner status. Non-owner… |
CVE-2026-100556 | Medium | 6.3 | 2026-09-26 | OpenClaw (npm package openclaw) versions >= 2026.5.2 and < 2026.8.1 contain an incorrect authorization vulnerability in WhatsApp group handling. A group sender… |
CVE-2026-100553 | Medium | 4.3 | 2026-09-26 | OpenClaw versions >= 2026.6.9 and < 2026.8.1 do not declare the native chatId parameter as a delivery target in the Feishu unpin feature, so unpin requests can… |
CVE-2026-100552 | High | 8.8 | 2026-09-26 | OpenClaw (npm package 'openclaw') before 2026.8.1 does not correctly enforce per-chat tool policies for Codex app-server runtime tools. A conversation-level to… |
CVE-2026-100550 | Medium | 5.4 | 2026-09-26 | OpenClaw (npm package 'openclaw') before 2026.8.1 contains an access-control bypass in the Microsoft Teams integration. When groupPolicy is set to allowlist, a… |
CVE-2026-100545 | Medium | 5.3 | 2026-09-26 | OpenClaw (npm package `openclaw`) before 2026.8.1 incorrectly enforces sender tool policies during session-memory filename generation. In affected versions, fi… |
CVE-2026-100540 | Medium | 6.8 | 2026-09-26 | OpenClaw Feishu before 2026.8.1 fails to validate whether a configured default account is disabled before selecting it for model tool operations. Attackers can… |
CVE-2026-100539 | Low | 2.6 | 2026-09-26 | OpenClaw (npm package 'openclaw') before 2026.8.1 fails to revoke memory tool access when an operator hot-disables memory configuration. Existing memory_search… |
CVE-2026-100538 | Medium | 6.5 | 2026-09-26 | OpenClaw (npm package 'openclaw') before 2026.8.1 does not apply the originating sender's global or per-agent toolsBySender policy when handling outbound attac… |
CVE-2026-100535 | High | 7.5 | 2026-09-26 | OpenClaw (npm package 'openclaw') versions >= 2026.4.5 and < 2026.8.1 can lose the originating requester's restrictions and untrusted provenance when session-d… |
CVE-2026-100530 | High | 7.3 | 2026-09-26 | OpenClaw versions before 2026.8.1 fail to bind working directory context to reusable exec approvals, allowing approved commands to execute in different directo… |
CVE-2026-100529 | Medium | 6.4 | 2026-09-26 | OpenClaw versions before 2026.8.1 contain an authorization scope widening vulnerability in file-transfer allow-always approvals that allows attackers to reuse… |
CVE-2026-57449 | | | 2026-09-25 | Actual is a local-first personal finance tool. Prior to 26.7.0, Actual Sync Server's CORS proxy is intended to let authenticated users fetch resources only fro… |
CVE-2026-88003 | | | 2026-09-25 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane fails to revoke administrative… |
CVE-2026-84464 | | | 2026-09-25 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, zammad's External Data Source feature, used to look up records from an exte… |
CVE-2026-56733 | | | 2026-09-25 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2 and 7.1.0, this issue concerns a lack of discursive validation within the au… |
CVE-2026-89032 | High | 7.7 | 2026-09-25 | BerriAI LiteLLM before 1.101.0-rc.1 contains a tenant isolation bypass vulnerability in the semantic cache layer that allows authenticated users to read other… |
CVE-2026-67411 | | | 2026-09-25 | RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.18, 4.0.23, 4.1.14, 4.2.9, and 4.3.3, native MQTT and MQTT over WebSocket behind a trusted… |
CVE-2026-56723 | | | 2026-09-25 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, a customer who can view a ticket cannot see internal ticket articles throug… |
CVE-2026-93643 | Critical | 9.8 | 2026-09-25 | When OnlyOffice/Document Editing is available, an unauthenticated remote attacker with access to an existing supported public Briefcase document can abuse unsi… |
CVE-2026-88848 | Medium | 4.2 | 2026-09-25 | The MasterStudy LMS WordPress plugin from 1.9 before 3.7.50 does not verify that a course a member asks to enrol in is covered by their membership plan, nor th… |
CVE-2026-97818 | High | 8.6 | 2026-09-25 | phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and id=="all" in api/controllers/User.php. |