CWE-863 · Incorrect Authorization (page 3)
Page 3 of 42 — CVEs classified under CWE-863, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-55701 | | 2026-09-15 | The OpenTelemetry Collector Contrib repository contains components for the OpenTelemetry Collector. Prior to 0.151.0, the githubreceiver validates the receiver… | |
CVE-2026-55636 | Medium | 5.7 | 2026-09-15 | Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.6, charts/capsule/templates/configuration.yaml configures the vali… |
CVE-2026-54076 | High | 8.1 | 2026-09-15 | ArcadeDB is a Multi-Model DBMS. Prior to 26.6.1, the fix for CVE-2026-44221 added an UPDATE_SCHEMA authorization check only to LocalDocumentType.createProperty… |
CVE-2026-88617 | Critical | 9.8 | 2026-09-15 | SmartAdmin v3.30.0 contains an authorization flaw in the configuration query endpoint. This allows a remote attacker to escalate privileges. |
CVE-2026-88616 | High | 8.8 | 2026-09-15 | An issue in RuoYi-Vue-Plus 6.0.0 allows a remote attacker to execute arbitrary code via the FlwTaskController.java component, and the FlwTaskServiceImpl.comple… |
CVE-2026-16140 | High | 8.8 | 2026-09-15 | OpenBMC's IPMI implementation, phosphor-net-ipmid, is vulnerable to a logic flaw where the authorization context of an existing session can be replaced with a… |
CVE-2026-91998 | Critical | 9.9 | 2026-09-15 | Casdoor through 4.4.0 contains an authorization bypass vulnerability in the /api/mcp endpoint that allows attackers with any application's clientId and clientS… |
CVE-2026-57137 | High | 8.8 | 2026-09-15 | PraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, createAgentLoop() in src/praisonai-ts/src/ai/agent-loop.ts passes executable tools to generate… |
CVE-2026-57136 | High | 8.8 | 2026-09-15 | PraisonAI is a multi-agent teams system. From 1.2.3 until 1.7.2, CommandValidator in src/praisonai-ts/src/cli/features/sandbox-executor.ts validates only the f… |
CVE-2026-57134 | High | 8.2 | 2026-09-15 | PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, MCPSecurity.evaluatePolicy() in src/praisonai-ts/src/mcp/security.ts invokes the configured cr… |
CVE-2026-57133 | High | 8.8 | 2026-09-15 | PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, the shell() helper exported from src/praisonai-ts/src/tools/utility-tools.ts checks only the f… |
CVE-2026-52819 | | 2026-09-15 | Kimai is an open-source time tracking application. Prior to 2.57.0, the GET /api/timesheets list endpoint accepts user and users[] target identifiers from a ca… | |
CVE-2026-91851 | | 2026-09-15 | Affected versions of MISP incorrectly filter dashboard templates that are restricted to a specific permission flag. DashboardsController::listTemplates() all… | |
CVE-2026-91778 | | 2026-09-15 | In affected versions of Octopus Server, users with certain scoped permission sets could execute arbitrary scripts on a worker (including the Octopus Server bui… | |
CVE-2026-91181 | Medium | 6.5 | 2026-09-14 | Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 Fail to sanitize Team objects returned by the data retention team… |
CVE-2026-90820 | Medium | 4.3 | 2026-09-14 | A security vulnerability has been detected in a2aproject a2a-java 1.2.0. The impacted element is the function AuthorizationRequestHandlerDecorator.onListTasks… |
CVE-2026-84628 | Medium | 5.5 | 2026-09-14 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, w… |
CVE-2026-84618 | Medium | 5.5 | 2026-09-14 | A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be ab… |
CVE-2026-84617 | Medium | 5.5 | 2026-09-14 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 2… |
CVE-2026-84612 | Medium | 5.5 | 2026-09-14 | An authorization issue was addressed with improved access control. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27… |
CVE-2026-84601 | Medium | 5.5 | 2026-09-14 | A permissions issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to bypass Apple Intelligence… |
CVE-2026-84589 | Medium | 5.5 | 2026-09-14 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27. An app may be able to modify Privacy preferences. |
CVE-2026-84560 | Medium | 6.1 | 2026-09-14 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, w… |
CVE-2026-84540 | Medium | 5.5 | 2026-09-14 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app… |
CVE-2026-65404 | Medium | 5.5 | 2026-09-14 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden… |
CVE-2026-65393 | Medium | 5.5 | 2026-09-14 | A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An app may be able to access user-sensitive… |
CVE-2026-65380 | Medium | 5.5 | 2026-09-14 | An issue existed in the handling of snapshots. The issue was resolved with improved permissions logic. This issue is fixed in macOS Golden Gate 27. An app may… |
CVE-2026-65378 | High | 7.5 | 2026-09-14 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app… |
CVE-2026-43785 | Medium | 5.5 | 2026-09-14 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Ta… |
CVE-2026-43737 | Medium | 5.5 | 2026-09-14 | An authorization issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, mac… |
CVE-2026-43695 | Medium | 5.5 | 2026-09-14 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, mac… |
CVE-2026-19816 | High | 7.1 | 2026-09-14 | A flaw was found in PackageKit. PackageKit skips the polkit authorization check for transactions carrying the SIMULATE (dry-run) flag. In the dnf5 backend, the… |
CVE-2026-90942 | Critical | 9.6 | 2026-09-14 | Casdoor through 4.4.0 fails to properly mask the instance-wide built-in certificate private key in /api/get-certs and /api/get-cert endpoints, allowing organiz… |
CVE-2026-90806 | Medium | 6.3 | 2026-09-14 | A vulnerability has been found in DjangoCRM django-crm up to 1.2. This vulnerability affects the function BulkUpdateCasesView of the file backend/cases/bulk_vi… |
CVE-2026-55866 | Low | 3.7 | 2026-09-14 | SpiceDB is an open source database system for creating and managing security-critical application permissions. From 1.34.0 until 1.54.0, SpiceDB can return PER… |
CVE-2026-54180 | High | 7.6 | 2026-09-14 | backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administratio… |
CVE-2026-56839 | High | 7.3 | 2026-09-14 | PraisonAI is a multi-agent teams system. Prior to 4.6.59, the CODE_TOOLS wrappers keep _workspace_root as None and pass workspace=None to read_file, search_rep… |
CVE-2026-82432 | High | 8.1 | 2026-09-14 | Description Nimbus validated `topology.blobstore.map` against the calling subject at submission time only. The rebalance operation accepts configuration overr… |
CVE-2026-82431 | Critical | 9.8 | 2026-09-14 | Description `SimpleACLAuthorizer` evaluated the user-level command set by returning early when `nimbus.users` was empty, before `nimbus.groups` was considered… |
CVE-2026-57125 | Critical | 9.8 | 2026-09-14 | PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.59 and praisonaiagents 1.6.59, the unauthenticated POST /api/v1/runs Jobs API accepts attacker-… |
CVE-2026-82920 | Medium | 5.5 | 2026-09-14 | Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7 fail to enforce authorization boundaries on the access control policy update endpoint… |
CVE-2026-73370 | Critical | 9.8 | 2026-09-14 | Incorrect Authorization vulnerability in Apache Syncope. Delegated administration security checks performed by Reconciliation service's pull and push, being… |
CVE-2026-73236 | High | 7.5 | 2026-09-14 | Incorrect Authorization vulnerability in Apache Syncope. Delegated administration security checks are based on Realm hierarchy and enforced via prefix match… |
CVE-2026-90934 | Medium | 4.3 | 2026-09-14 | EspoCRM before 10.0.4 contains a field-level security bypass vulnerability in the meeting and call attendees endpoints that allows authenticated users to read… |
CVE-2026-90929 | High | 8.1 | 2026-09-14 | File Browser versions >= 2.5.0 and <= 2.63.23 contain an incorrect authorization flaw in the direct-upload endpoint (resourcePostHandler in http/resource.go)… |
CVE-2026-77181 | Critical | 9.8 | 2026-09-14 | Incorrect Authorization vulnerability in Apache Syncope. An administrator with ClientApp's update entitlement is unable to perform the related operation, wh… |
CVE-2026-73668 | Critical | 9.8 | 2026-09-14 | Incorrect Authorization vulnerability in Apache Syncope. An administrator with adequate entitlements in a given Realm may be able to read via REST the ful… |
CVE-2026-73579 | Critical | 9.8 | 2026-09-14 | Incorrect Authorization vulnerability in Apache Syncope. Any search requests are transformed into SQL, Neo4J or Elasticsearch / Opensearch queries, dependin… |
CVE-2026-20773 | | 2026-09-14 | A role-based access control issue was identified in the administrative expression evaluation functionality. This could allow users with certain administrative… | |
CVE-2026-72524 | High | 8.8 | 2026-09-14 | Incorrect Authorization vulnerability in Apache Doris allows an authenticated user to bypass privilege checks and access or modify data they are not authorized… |
CVE-2026-68570 | Medium | 6.5 | 2026-09-14 | Incorrect Authorization vulnerability in Apache Doris allows an authenticated user to bypass privilege checks and access data they are not authorized to read… |
CVE-2023-50462 | Medium | 5.3 | 2026-09-14 | An issue was discovered in the content_consent (aka Content Consent) extension through 2.0.1 for TYPO3. It fails to verify whether a specified content element… |
CVE-2023-50461 | High | 8.8 | 2026-09-14 | An issue was discovered in the direct_mail (aka Direct Mail) extension through 9.5.1 for TYPO3. The Configuration backend module of the extension allows an aut… |
CVE-2023-50460 | Medium | 5.4 | 2026-09-14 | An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. The backend module allows an authenticated backend user to perform various actio… |
CVE-2023-50459 | Medium | 5.4 | 2026-09-14 | An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. It fails to check access permissions for the edit user component. An authenticat… |
CVE-2023-45023 | Medium | 4.2 | 2026-09-14 | The femanager extension 7 before 7.2.2 for TYPO3 has Incorrect Access Control: it lacks a check for permissions for the invitation component. |
CVE-2026-90595 | Medium | 6.3 | 2026-09-13 | A security flaw has been discovered in wxiaoqi Spring-Cloud-Platform 1.0/2.2/3.0. This issue affects the function OnlineController.getOnlineInfo of the file ac… |
CVE-2026-90594 | Medium | 6.3 | 2026-09-13 | A vulnerability was identified in wxiaoqi Spring-Cloud-Platform 3.0.1/3.1.0. This vulnerability affects the function PermissionService.checkUserPermission of t… |
CVE-2026-90508 | Low | 3.4 | 2026-09-13 | A security flaw has been discovered in Chengdu Qilu Technology Ludashi 6.1026.4715.714. Affected by this vulnerability is the function MessageNotifyCallback in… |
CVE-2026-89267 | Medium | 4.3 | 2026-09-12 | starlette-admin versions 0.16.1 through 0.17.1 fail to enforce the searchable_fields allowlist when configured as an empty list, allowing authenticated users t… |
CVE-2026-90460 | | 2026-09-11 | An issue was discovered in OpenStack Keystone before 29.0.3. Tokens obtained via delegated authentication methods (EC2 credentials, application credentials, OA… | |
CVE-2026-90450 | | 2026-09-11 | The application's role-authorization lookup defaults to granting access when a request handler's name is not present in its table of role requirements, rather… | |
CVE-2026-89013 | High | 7.5 | 2026-09-11 | Dolibarr 23.0.4 before 24.0.1 contains an authorization bypass vulnerability that allows unauthenticated attackers to read arbitrary files through the document… |
CVE-2026-89151 | Low | 3.5 | 2026-09-11 | Forgejo before 16.0.4 allows use of restricted API tokens for unintended access to the "allow maintainer edit" feature. |
CVE-2026-78134 | High | 7.1 | 2026-09-11 | strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identit… |
CVE-2026-81905 | | 2026-09-11 | Concrete CMS below 9.5.3 stores user validation hashes for multiple purposes (email/registration validation, password reset, and persistent login) in a single… | |
CVE-2026-75624 | High | 8.8 | 2026-09-10 | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.27 could allow a remote authenticated attacker to bypass security restrictio… |
CVE-2026-85025 | Critical | 9.8 | 2026-09-10 | IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an unauthenticated attacker to execute arbitrary code and access or modify chat sessions through pub… |
CVE-2026-87107 | Medium | 5.4 | 2026-09-10 | Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog deregistration path that may allow a local ACL token to delete peer-impor… |
CVE-2026-87090 | High | 8.3 | 2026-09-10 | Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog node-write path that may allow an authenticated attacker to delete anothe… |
CVE-2026-88044 | Critical | 9.1 | 2026-09-10 | rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.70.0 until 1.75.1, the serve/start RC inte… |
CVE-2026-88939 | High | 8.3 | 2026-09-10 | knowns through 0.33.0 exempts the project.set action from permission guard checks unconditionally, allowing read-only agent sessions to bypass restrictions. At… |
CVE-2026-88008 | Critical | 9.1 | 2026-09-10 | Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.26 until 2.11.57 and 3.7.13, Traefik forwards a client-supplied Connection header req… |
CVE-2026-88007 | Critical | 9.1 | 2026-09-10 | Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.0 until 2.11.57 and 3.7.13, the HTTP/3 entrypoint ConnContext does not call service.A… |
CVE-2026-88006 | Medium | 6.5 | 2026-09-10 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.11.1, Open WebUI's OAuth token exchange endpoint issue… |
CVE-2026-88005 | Medium | 6.5 | 2026-09-10 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.9.0, Open WebUI's OAuth token exchange endpoint issues… |
CVE-2026-88894 | Medium | 5.4 | 2026-09-10 | Snipe-IT's predefined kit checkout path does not enforce Full Multiple Company Support (FMCS) tenant isolation on the checkout target. Unlike the single, bulk… |
CVE-2026-88884 | Medium | 5.8 | 2026-09-10 | Renovate is a dependency update automation tool. In versions before 44.3.1 (and Mend Renovate CE/EE images before 15.4.0, mend-renovate-ce Helm chart before 15… |
CVE-2026-88862 | High | 8.8 | 2026-09-10 | Capgo (capgo.app) backend through 12.242.4 does not validate parent-child delegation when processing the x-limited-key-id header. checkKeyByIdPg() in supabase/… |
CVE-2026-88860 | Medium | 6.3 | 2026-09-10 | Capgo fails to clean up channel permission overrides when a user's last organization role binding is deleted, leaving stale overrides active. Attackers can ret… |
CVE-2026-87803 | High | 7.1 | 2026-09-10 | An authorization bypass vulnerability exists in the Countly Server DBViewer due to flawed sub-pipeline detection in the aggregation stage sanitizer. The /o/db… |
CVE-2026-19840 | Medium | 6.5 | 2026-09-10 | The Notiqoo WordPress plugin before 1.4.14 does not have capability checks on several of its AJAX actions and builds the name of the option to write from user… |
CVE-2026-87998 | High | 7.1 | 2026-09-09 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, DELETE /api/v1/knowledge/{id}/delete in backend… |
CVE-2026-87017 | Medium | 4.3 | 2026-09-09 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.7.0 until 0.11.1, the built-in knowledge search tool passed the ca… |
CVE-2026-87014 | Medium | 6.5 | 2026-09-09 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.1, role synchronization in backend/open_webui/route… |
CVE-2026-61910 | Low | 3.5 | 2026-09-09 | An issue was discovered in Cyrus IMAP before 3.12.4. Mailbox/set let a sharee change a special-use role on shared mailboxes. An authenticated user with maySetK… |
CVE-2026-61907 | Medium | 4.3 | 2026-09-09 | An issue was discovered in Cyrus IMAP before 3.12.4. JMAP snooze bypasses the destination-mailbox ACL. An authenticated user with insert permissions on another… |
CVE-2026-46460 | Low | 3.5 | 2026-09-09 | Dell PowerScale OneFS, versions 9.5.0.0 through 9.7.1.15, versions 9.8.0.0 through 9.13.1.0, and versions prior to 9.15.0.0, contain an Incorrect Authorization… |
CVE-2026-86773 | Medium | 5.4 | 2026-09-09 | Snipe-IT through version 8.6.3 fails to perform object-level authorization in the updateLicense, updateConsumable, updateAccessory, and updateModel endpoints a… |
CVE-2026-86760 | Medium | 5.4 | 2026-09-09 | Snipe-IT versions 8.2.0 through 8.6.x (fixed in 8.7.0) contain an incorrect authorization flaw in app/Http/Controllers/Users/UsersController::update(). The sin… |
CVE-2026-86755 | Medium | 5.4 | 2026-09-09 | Snipe-IT versions 4.2.0 through 8.6.3 expose Laravel Passport's auto-registered personal-access-token routes (GET, POST, DELETE /oauth/personal-access-tokens*)… |
CVE-2026-86754 | High | 7.3 | 2026-09-09 | Snipe-IT before 8.7.0 fails to properly gate Laravel Passport's OAuth client management routes, allowing any authenticated user to register OAuth clients with… |
CVE-2026-86753 | Medium | 4.3 | 2026-09-09 | snipe-it versions before 8.7.0 fail to validate the requestable flag for asset models in the POST /account/request/asset_model/{modelId} endpoint. Authenticate… |
CVE-2026-86752 | Medium | 5.4 | 2026-09-09 | snipe-it versions before 8.7.0 fail to enforce per-instance FMCS scoping in asset audit endpoints, relying solely on query-layer filtering instead of policy-la… |
CVE-2026-86750 | High | 7.7 | 2026-09-09 | Snipe-IT versions <= 8.6.3 (fixed in 8.7.0) do not validate company assignment authorization before persisting user records via the REST API. In Api\UsersContr… |
CVE-2026-86747 | Medium | 5.4 | 2026-09-09 | Snipe-IT is an open source IT asset management system. In versions up to and including 8.6.3, the report acceptance endpoints POST /reports/unaccepted_assets/s… |
CVE-2026-85978 | Critical | 9.8 | 2026-09-09 | An unauthenticated remote code execution vulnerability exists in the Policy Manager console of Akana API Platform. A path normalization discrepancy between the… |
CVE-2026-80341 | Medium | 5.9 | 2026-09-09 | The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.26 does not verify that a stored payment method belongs to the user attaching it, allowi… |
CVE-2026-87075 | High | 8.1 | 2026-09-09 | Tanium addressed an improper access controls vulnerability in Comply. |
CVE-2026-87046 | Medium | 4.3 | 2026-09-09 | Tanium addressed an improper access controls vulnerability in Comply. |