By weakness (CWE)

CWE-284: related vulnerabilities

CVEs classified under CWE-284. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

304 published vulnerabilities · page 2 of 4

• CVE-2026-35327HIGH 7.6

  Oracle WebCenter Content contains a flaw that allows an authenticated user with low-level permissions to gain unauthorized access to sensitive data or make unauthorized changes to documents and records through the web interface. The vulnerability requires the attacker to trick another user into performing an action (such as clicking a link or opening a file), but once successful, can expose critical business information or allow data manipulation. The issue affects two specific versions of the software and could also impact other Oracle systems that depend on WebCenter Content.

• CVE-2026-46699HIGH 7.6

  conda-smithy, a widely-used tool for building conda packages through automated CI services, contains a vulnerability that could allow an attacker to gain unauthorized write access to feedstock repositories on GitHub. The flaw stems from the system using mutable GitHub usernames—which can be changed or reassigned—as the basis for routing repository access invitations, rather than using stable, permanent GitHub user identifiers. If someone changes their GitHub username or if GitHub reassigns a username after account deletion, an attacker could potentially intercept repository invitations intended for the original user and gain write access to critical package build repositories. This vulnerability affects conda-smithy versions prior to 3.61.0.

• CVE-2025-46315HIGH 7.5

  A permissions flaw in macOS Tahoe allows applications to bypass security controls and access sensitive user data they should not be able to reach. The issue stems from insufficient access restrictions that were in place before the fix. Apple has addressed this in macOS Tahoe 26.1 by implementing additional permission enforcement mechanisms.

• CVE-2025-63579HIGH 7.5

  A vulnerability in Kyocera's multifunction printers and their Command Center RX management system allows attackers to bypass encryption protections and extract sensitive data without requiring authentication. An attacker with network access can export all contacts stored in the device's address book, decrypt previously encrypted communications, and obtain stored passwords and credentials. This represents a direct path to credential theft and reconnaissance against organizations relying on these devices for document management.

• CVE-2026-12490HIGH 7.5

  CVE-2026-12490 is a TLS authentication bypass in NLnet Labs NSD, a popular authoritative DNS server. The vulnerability allows a secondary nameserver to request zone transfers without providing the required client certificate when the transfer request arrives over standard TLS or TCP ports, even though the primary server is configured to demand certificate authentication. An attacker can exploit this to request sensitive DNS zone data if they can reach the server over the network, bypassing what administrators believed was a protected channel.

• CVE-2026-24451HIGH 7.5

  Gitea 1.26.2 has a flaw in how it handles repository access control when a parent repository transitions from public to private. If a user has forked a public repository, they can continue to sync updates from the parent even after the parent becomes private—a synchronization that should be blocked. This allows fork owners to access data they no longer have authorization to see, turning a change in access policy into a data exposure window.

• CVE-2026-24690HIGH 7.5

  Gitea, a popular self-hosted Git service platform, contains a flaw in how it checks permissions when developers request changes to pull request branches. An unauthenticated attacker can exploit this weakness to update or rebase pull request branches without proper authorization, potentially altering code that others are reviewing or about to merge. The vulnerability affects all Gitea versions prior to 1.25.5 and carries a high severity rating.

• CVE-2026-25712HIGH 7.5

  Gitea, a self-hosted Git service popular among development teams, contains a vulnerability in its organization management APIs that allows unauthenticated users to discover sensitive information about hidden organization members and private organizations. The flaw stems from insufficient permission checks when querying organization data, potentially exposing membership lists and organizational structure that administrators intended to keep confidential. This is a read-only disclosure issue—attackers cannot modify data or take control of systems, but they can gather reconnaissance information about an organization's internal structure.

• CVE-2026-27660HIGH 7.5

  Gitea, a popular self-hosted Git service, contains a flaw in how it handles draft releases. Before version 1.25.5, attackers can view draft release information and download attached files even though they lack the permission to modify or publish releases. This is a read-access bypass—an attacker cannot change anything, but they can see and retrieve data that should be restricted. The vulnerability requires network access but no authentication or user interaction.

• CVE-2026-27779HIGH 7.5

  Gitea, a popular self-hosted Git service, contains a flaw in how it validates HTTP header values used to construct public-facing URLs. Attackers can inject malicious or malformed 'forwarded-proto' headers to trick Gitea into generating incorrect canonical URLs. This could lead to service disruption or availability issues, but does not directly expose sensitive data or allow unauthorized access to repositories.

• CVE-2026-32995HIGH 7.5

  Rocket.Chat contains an authentication bypass vulnerability in its direct message protocol (DDP) translation feature. An authenticated user—even without access to specific rooms or channels—can read private messages, direct messages, and end-to-end encrypted messages from other users by exploiting an unprotected DDP method. The flaw stems from insufficient permission checks when a client requests message translation, allowing lateral message enumeration across the entire Rocket.Chat instance.

• CVE-2026-35269HIGH 7.5

  A flaw in Oracle Identity Manager's REST web services layer allows an attacker on the network to make unauthorized changes to critical data without needing to log in. The vulnerability affects Identity Manager versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with HTTP network access can create, delete, or modify identity data that the system manages, potentially compromising user accounts, access controls, and sensitive identity attributes across an organization.

• CVE-2026-35275HIGH 7.5

  A flaw in Oracle VM VirtualBox's Shared Folders feature allows an attacker with local access to a machine running VirtualBox to gain unauthorized read and write access to data within VirtualBox and potentially affect systems connected to it. The vulnerability is difficult to exploit in practice—it requires the attacker to already be logged into the host system and involves complex technical conditions—but if successful, could expose or alter sensitive information across VirtualBox and related infrastructure.

• CVE-2026-37235HIGH 7.5

  FlexRIC v2.0.0 contains a critical authentication bypass flaw in its E42 message handler. An attacker on the network can forge requests claiming to be any authorized xApp (a RIC application component) without proving their identity. The system validates only that the claimed xApp ID falls within a valid range, but does not verify that the request actually originated from that xApp. By sending a malicious request with a spoofed xApp ID to the iApp service on port 36422, an attacker can trick the RIC into routing responses to a legitimate xApp, corrupting its internal state and potentially crashing it, the RIC itself, or the iApp.

• CVE-2026-40452HIGH 7.5

  Apache IoTDB contains an authorization flaw in its REST API endpoint `/rest/v2/fastLastQuery` that allows authenticated users to access time-series data they should not be permitted to view. An attacker with valid credentials—but no legitimate access to specific datasets—can retrieve the latest values from sensors, devices, or other IoT sources, potentially exposing sensitive operational or environmental information. This is a classic privilege-escalation scenario where the application fails to enforce proper access controls before returning query results.

• CVE-2026-41006HIGH 7.5

  Spring HATEOAS contains a flaw in how it processes certain API response formats (Collection+JSON and UBER). When deserializing these formats, the library uses an internal method that bypasses Jackson's security controls, allowing it to bind properties to Java objects without respecting restrictions that developers have intentionally put in place. This can be exploited to set properties that shouldn't be settable, potentially causing availability issues.

• CVE-2026-41728HIGH 7.5

  Spring Data REST, a widely-used framework for building REST APIs on top of Spring Data repositories, contains an authorization bypass vulnerability in its JSON Patch implementation. When processing JSON Patch requests (which use the application/json-patch+json content type), the framework fails to properly enforce write-access restrictions on intermediate steps of multi-level object paths. This means an attacker can craft a malicious patch request that modifies protected fields by traversing through intermediate objects without the framework validating permissions at each step. The vulnerability affects a broad range of versions across multiple release lines, potentially impacting many Spring-based microservices and REST APIs.

• CVE-2026-41856HIGH 7.5

  Spring for GraphQL has a flaw in how it detects security annotations on data fetcher methods. When methods are inherited or defined in type hierarchies, the framework may fail to recognize authorization annotations at runtime, allowing requests that should be blocked by security rules to proceed. This affects multiple versions across the 1.x and 2.x release lines.

• CVE-2026-46791HIGH 7.5

  An Oracle WebCenter Content vulnerability allows unauthenticated attackers to read sensitive data over the network without authentication. The flaw resides in the Content Server component of Oracle Fusion Middleware version 14.1.2.0.0. An attacker with network access can exploit this over HTTP to gain unauthorized access to critical information stored within WebCenter Content. The vulnerability does not allow attackers to modify or delete data, only to read it.

• CVE-2026-46934HIGH 7.5

  A vulnerability in Oracle's Complex Maintenance, Repair and Overhaul component of E-Business Suite allows attackers with low-level network access to gain complete control over the application. The flaw requires an attacker to already be authenticated with basic user credentials and involves HTTP-based exploitation, but once leveraged successfully, gives an adversary full read, write, and availability control over the system. Versions 12.2.3 through 12.2.15 are affected.

• CVE-2026-46935HIGH 7.5

  A vulnerability exists in Oracle's Complex Maintenance, Repair and Overhaul component within Oracle E-Business Suite that allows a low-privileged user with network access to take over the affected system. The flaw is difficult to exploit but has severe consequences—attackers can read, modify, or disable critical maintenance and repair operations. Organizations using versions 12.2.3 through 12.2.15 are at risk and should prioritize assessment and patching.

• CVE-2026-46957HIGH 7.5

  CVE-2026-46957 is a high-severity vulnerability in Oracle's iSupplier Portal, a component of Oracle E-Business Suite used for supplier collaboration. An attacker with low-level user credentials and network access can exploit an improper access control flaw to fully compromise the portal, potentially gaining control over supplier data, transactions, and operations. The vulnerability affects iSupplier Portal versions 12.2.3 through 12.2.15 and requires the attacker to already have valid user credentials, which significantly reduces opportunistic attack risk but remains a concern for insider threats and credential compromise scenarios.

• CVE-2026-46958HIGH 7.5

  A vulnerability in Oracle's Subledger Accounting module (part of E-Business Suite) allows a low-privileged network user to gain complete control over the accounting system through a difficult-to-exploit flaw. The attacker would need valid system credentials and network access, but if successful, could read, modify, or delete critical financial data and disrupt operations. This affects Oracle E-Business Suite versions 12.2.3 through 12.2.15.

• CVE-2026-46959HIGH 7.5

  A vulnerability in Oracle's Subledger Accounting component—part of the E-Business Suite—allows attackers with low-level network access to potentially take over the entire accounting module. While the attack requires special conditions to execute and the attacker must already have basic user credentials, success grants complete control over Subledger Accounting's data and operations. Organizations running versions 12.2.3 through 12.2.15 are at risk.

• CVE-2026-46966HIGH 7.5

  A vulnerability in Oracle's Universal Work Queue component of E-Business Suite allows a low-privileged user with network access to take over the application. The flaw exists in the site-level administration features and requires specific difficult-to-exploit conditions, but successful compromise results in complete loss of confidentiality, integrity, and availability for the affected system. This affects E-Business Suite versions 12.2.3 through 12.2.15.

• CVE-2026-46971HIGH 7.5

  Oracle's HR Intelligence system, which is part of Oracle E-Business Suite, contains a security vulnerability that allows a logged-in attacker with network access to take over the application. The flaw affects versions 12.2.3 through 12.2.15. An attacker would need valid user credentials and would need to navigate through some technical obstacles, but successful exploitation grants them complete control over HR Intelligence, potentially exposing or modifying sensitive employee and HR data.

• CVE-2026-46974HIGH 7.5

  Oracle VM VirtualBox version 7.2.8 contains a privilege escalation vulnerability that allows an attacker with high administrative privileges and local access to the system running VirtualBox to gain complete control over the hypervisor. This is a difficult-to-exploit flaw that requires the attacker to already have elevated credentials and physical or direct system access, but successful exploitation grants them the ability to take over VirtualBox and potentially impact guest virtual machines and the underlying infrastructure.

• CVE-2026-47261HIGH 7.5

  Wasmtime, a WebAssembly runtime, contains an access control bypass in its filesystem permission enforcement. When a WebAssembly module is granted read-only access to a directory, an attacker can use a specific file-opening technique (the TRUNCATE flag) to bypass those restrictions and modify files that should be protected. The vulnerability exists in versions before 24.0.9, 36.0.10, and 44.0.2, and stems from a missing permission check in the code that handles file opening operations.

• CVE-2026-49049HIGH 7.5

  An unauthenticated security flaw in the Helix3 plugin for Joomla allows attackers to delete files, write JSON files, and modify template settings without needing user credentials. The vulnerability exists in an exposed AJAX handler that lacks proper access controls, making it trivial for any internet-connected attacker to exploit remotely. This poses an immediate risk to site integrity and functionality.

• CVE-2026-50885HIGH 7.5

  Sismics Docs (also known as Teedy) version 1.11 contains a flaw in how it controls who can access certain file-sharing endpoints. An attacker without any credentials can craft a specially formed request to read sensitive information from the system. This is a remote attack that requires no special privileges or user interaction, making it relatively straightforward to exploit over the network.

• CVE-2026-51221HIGH 7.5

  A buffer overflow vulnerability exists in EIPStackGroup OpENer's Get_Attribute_List function that allows attackers to crash affected systems by sending specially crafted network packets. The vulnerability requires no authentication or user interaction, making it accessible to remote attackers on the network. While the flaw does not enable data theft or unauthorized access, it can disrupt availability—a significant concern for industrial control systems and networked devices that rely on OpENer.

• CVE-2026-52844HIGH 7.5

  Caddy, a popular web server platform, has a flaw in how it handles file paths on Windows systems. When a client requests a file using mixed path separators (like /private\secret.txt), Caddy's security rules incorrectly think the request is outside a protected directory, but the actual file serving code resolves it to the correct file anyway. This means an attacker can bypass authentication or access denial rules that are meant to protect sensitive files. The issue only affects Windows deployments running Caddy before version 2.11.4.

• CVE-2026-55112HIGH 7.5

  A privilege escalation vulnerability exists in UniFi OS running the UniFi Protect application. An attacker who already has network access and low-level user privileges can, under specific conditions, exploit improper access controls to gain elevated privileges on the affected device. This allows a low-privileged insider or compromised account to take full control of the host system.

• CVE-2026-56082HIGH 7.5

  Capgo, a build management platform, has a serious access control flaw in a database function that should only work for authenticated users but is accidentally exposed to anonymous users. An attacker with just the public API key can forge billing records, overwrite existing build logs for other companies, and artificially inflate billable time—essentially gaining the ability to sabotage another organization's usage data and financial records without needing any credentials or authentication.

• CVE-2026-56253HIGH 7.5

  Capgo versions before 12.128.2 have a security gap that lets attackers without credentials view the member roster of any organization. An attacker only needs two pieces of information—a public API key (the kind meant to be embedded in client applications) and an organization's unique identifier—to pull a complete list of members along with their email addresses, user IDs, assigned roles, and any pending invitations. This is a straightforward information-disclosure vulnerability that exposes organizational structure and contact details.

• CVE-2026-59720HIGH 7.5

  Hoppscotch, an open source API development platform, has a flaw that causes mock servers created from private collections to be publicly accessible on the internet without requiring authentication. When developers set up a mock server, the system fails to save the 'private' setting, and the database defaults these servers to public. This means sensitive API data and schemas stored in private collections could be exposed to anyone who discovers the mock server URL. The issue affects all versions before 2026.6.0 and is resolved in that release.

• CVE-2026-46818HIGH 7.4

  Oracle E-Business Suite's Payments module contains a vulnerability in its File Transmission component that allows an unauthenticated attacker over the network to read and modify sensitive payment data. The attacker does not need valid credentials, but exploitation requires specific technical conditions to be in place. Versions 12.2.3 through 12.2.15 are affected. The vulnerability can lead to unauthorized access to critical financial information or payment records.

• CVE-2026-11344HIGH 7.3

  A file upload vulnerability exists in code-projects Vehicle Management System version 1.0. An attacker can bypass upload restrictions by manipulating the photo parameter in the New Driver Registration Form, allowing them to upload arbitrary files to the server without authentication. This can lead to remote code execution or other system compromise. Public exploit code is available, making active exploitation likely.

• CVE-2026-11474HIGH 7.3

  A file upload vulnerability has been discovered in Kushan2k's student-management-system that allows attackers to upload files without restriction. The flaw resides in the registration endpoint's service code and is triggered by manipulating the 'stimg' parameter. Because the vulnerability requires no authentication and can be exploited remotely with minimal complexity, it poses an immediate risk to exposed instances. Public exploit code is already available, elevating the likelihood of opportunistic attacks.

• CVE-2026-12529HIGH 7.3

  SourceCodester's CET Automated Grading System with AI Predictive Analytics version 1.0 contains a flaw in its student self-registration function that allows attackers to bypass access controls. An unauthenticated remote attacker can exploit this weakness to gain unauthorized access to system resources. The vulnerability affects the /index.php endpoint and requires no user interaction to trigger.

• CVE-2026-13547HIGH 7.3

  Hanwang e-Face General Management Platform version 6.3.5.4 contains a file upload vulnerability in its resource upload function. An attacker can bypass upload restrictions by manipulating the File parameter sent to the /manage/resourceUpload/upload.do endpoint, allowing them to upload arbitrary files to the server without authentication. This vulnerability is accessible over the network and has already been disclosed publicly, increasing the risk of active exploitation.

• CVE-2026-13553HIGH 7.3

  A vulnerability exists in itsourcecode Online Hotel Management System version 1.0 that allows attackers to upload files without restriction through the amenities management interface. An attacker can manipulate the image upload parameter in the admin panel to bypass upload controls and store arbitrary files on the server. This can be exploited remotely without authentication, and active exploit code has already been published.

• CVE-2026-13568HIGH 7.3

  A flaw in SourceCodester Inventory Management System version 1.0 allows unauthenticated attackers to manipulate user roles during registration, bypassing access controls. An attacker can send a crafted request to the user registration endpoint that assigns themselves elevated privileges, gaining unauthorized access to system functions. Because this requires no authentication and can be exploited over the network, the risk is substantial. Public exploit code now exists, increasing real-world attack likelihood.

• CVE-2026-14736HIGH 7.3

  Ruijie RG-UAC contains a file upload vulnerability in the user_auth_commit.php script that allows unauthenticated attackers to upload arbitrary files. By manipulating the upload_image parameter, an attacker can bypass upload restrictions remotely without authentication. The vulnerability affects versions up to 1.0-R1.8.2.p5, and public exploits are available, increasing active exploitation risk.

• CVE-2026-15319HIGH 7.3

  Sipeed PicoClaw, a hardware tool used for embedded device programming and debugging, contains a flaw in how it controls who can access its web interface. The vulnerability allows attackers to bypass IP-based access restrictions through manipulation of the IPAllowlist function in the launcher component. An attacker on the network can exploit this to gain unauthorized access to the tool's backend without providing credentials. The flaw affects versions up to 0.2.9, and a patch (identified as 3126) is available.

• CVE-2026-35314HIGH 7.3

  A flaw in Oracle Access Manager's web server plugin allows attackers on the network to bypass authentication and access the system without credentials. An unauthenticated attacker can read sensitive data, modify or delete information, and disrupt service availability. The vulnerability affects Oracle Access Manager versions 12.2.1.4.0 and 14.1.2.1.0. Because no prior authentication or user interaction is required, this is a relatively straightforward issue to exploit for anyone with network access.

• CVE-2026-50132HIGH 7.3

  Budibase prior to version 3.39.0 contains a critical account-linking flaw in its public chat integration endpoint. An attacker can craft a malicious link that, when clicked by an authenticated Budibase user, silently binds that user's account to the attacker's Slack, Discord, or Microsoft Teams identity—without the user's knowledge or consent. This gives the attacker the ability to impersonate the victim within chat-integrated workflows and potentially access sensitive data or perform actions on their behalf. The vulnerability requires no special privileges to exploit and succeeds through simple social engineering (tricking a user into clicking a link).

• CVE-2026-35326HIGH 7.2

  Oracle WebCenter Content, a component of Oracle Fusion Middleware used for managing digital assets and documents, contains a vulnerability that allows high-privilege administrators or authenticated users with network access to fully compromise the system. An attacker with admin-level credentials can exploit this flaw remotely over HTTP without user interaction, leading to complete takeover—meaning they could steal, modify, or delete sensitive content, or disrupt service availability. Two versions are affected: 12.2.1.4.0 and 14.1.2.0.0.

• CVE-2026-46769HIGH 7.2

  Oracle's Application Development Framework (ADF), a middleware component used to build enterprise applications, contains a security vulnerability that allows administrators or other high-privileged users with network access to gain complete control over affected systems. An attacker with these elevated privileges can read, modify, or delete sensitive data and disrupt operations. The vulnerability affects two specific versions: 12.2.1.4.0 and 14.1.2.0.0.

• CVE-2026-46868HIGH 7.2

  A vulnerability exists in Oracle Enterprise Manager Base Platform that allows an authenticated administrator to gain complete control over the platform. The flaw is in the Extensibility Framework component and requires the attacker to already have high-privilege credentials and network access via HTTPS. Successful exploitation results in full compromise of the Enterprise Manager instance, affecting confidentiality, integrity, and availability. Versions 13.5 and 24.1 are affected.

• CVE-2026-46922HIGH 7.2

  Oracle HR Intelligence, a component within Oracle E-Business Suite, contains a vulnerability that allows an authenticated high-privileged user with network access to take over the system. The vulnerability affects versions 12.2.3 through 12.2.15 and requires the attacker to already have elevated credentials, meaning it poses a risk primarily from internal threats or from attackers who have compromised privileged accounts. The impact is severe: an attacker could read, modify, or delete sensitive HR data and disrupt the entire HR Intelligence service.

• CVE-2026-46938HIGH 7.2

  Oracle has published a high-severity vulnerability in its Cost Management module within E-Business Suite that allows privileged network attackers to fully compromise the system. The flaw affects versions 12.2.3 through 12.2.15 and requires the attacker to already possess high-level administrative credentials and network access. Successful exploitation grants complete control over the application's functionality, data, and availability.

• CVE-2026-46956HIGH 7.2

  CVE-2026-46956 is a vulnerability in Oracle Property Manager, a module within Oracle E-Business Suite used for real estate and facility management operations. An attacker with high administrative privileges and network access can exploit this flaw to gain complete control over the Property Manager application, potentially compromising confidentiality, integrity, and availability of managed property data. The vulnerability stems from improper access controls in the Internal Operations component.

• CVE-2026-46960HIGH 7.2

  A vulnerability in Oracle's Project Portfolio Analysis component (part of E-Business Suite) allows an attacker with elevated privileges and network access to take full control of the application. The flaw affects versions 12.2.3 through 12.2.15 and requires the attacker to already have high-level system access, but once leveraged, enables complete compromise including data theft, modification, and service disruption.

• CVE-2026-46969HIGH 7.2

  CVE-2026-46969 is a high-severity vulnerability in Oracle Financials for EMEA (part of Oracle E-Business Suite) that allows a high-privileged attacker on your network to take full control of the system. The flaw affects versions 12.2.3 through 12.2.15 and can be exploited over HTTP without user interaction. An attacker with administrative or equivalent credentials could gain complete access to confidentiality, integrity, and availability of your financial data and systems.

• CVE-2026-46976HIGH 7.2

  Oracle Public Sector Payroll, a component of Oracle E-Business Suite, contains a vulnerability in its Internal Operations module that allows a high-privileged network attacker to gain complete control over the payroll system. Versions 12.2.3 through 12.2.15 are vulnerable. An attacker with administrative or elevated privileges who can reach the system over HTTP could compromise confidentiality, integrity, and availability—potentially disrupting payroll processing, modifying employee payment data, or exfiltrating sensitive compensation information.

• CVE-2026-47366HIGH 7.2

  An administrator using the Administration Control Panel (ACP) can assign permissions that exceed what their own account is authorized to hold, bypassing the system's permission hierarchy. This allows a compromised or malicious admin to escalate their own privileges beyond their intended scope without requiring additional account takeover or technical exploitation.

• CVE-2026-35066HIGH 7.1

  Dell PowerFlex Manager versions before 5.1.0.1 contain an access control flaw that allows low-privileged remote attackers to cause denial of service. The vulnerability stems from improper enforcement of access restrictions, enabling an authenticated attacker to disrupt availability of the management platform without requiring elevated permissions or user interaction.

• CVE-2026-43701HIGH 7.1

  A vulnerability in Apple's Safari web browser and related operating systems allows malicious websites to process restricted web content that should remain sandboxed, potentially exposing sensitive data or enabling unauthorized actions on affected devices. The issue stems from insufficient validation checks when handling web content within the browser's security boundaries. Users who visit a specially crafted malicious website could have their device compromised without additional interaction beyond browsing.

• CVE-2026-45649HIGH 7.1

  A flaw in Microsoft Office apps on Android devices allows someone with local access to spoof or impersonate document content without requiring special permissions or user interaction beyond launching the app. An attacker with physical or logical access to the device could manipulate what appears in Word, Excel, or PowerPoint documents, potentially tricking the device owner or others into trusting falsified information. The vulnerability affects the access control layer that should prevent unauthorized modification of displayed document content.

• CVE-2026-46932HIGH 7.1

  A flaw in Oracle Enterprise Asset Management allows someone with low-level network access to view sensitive data or cause service disruptions. An authenticated user (even with minimal privileges) can send specially crafted HTTP requests to the application to either read confidential information or partially disable the service. The vulnerability affects versions 12.2.3 through 12.2.15 and does not require user interaction—an attacker simply needs valid login credentials and network connectivity to the system.

• CVE-2026-5230HIGH 7.1

  CVE-2026-5230 is a high-severity access control flaw in MIA Technology Inc.'s Pizzy Library that allows authenticated users to bypass authorization checks and access data or functionality they shouldn't have permission to reach. The vulnerability stems from incorrectly configured security levels that fail to properly validate user privileges. Versions 1.0.0.26250 through 1.3.8.26250 are affected; upgrading to 1.3.9.26250 or later resolves the issue.

• CVE-2026-54012HIGH 7.1

  Open WebUI, a self-hosted AI platform, contains a flaw in how it manages file access permissions tied to AI models. Before version 0.9.6, a user who creates or imports a model can attach references to files belonging to other users without any verification. This allows the malicious model owner to read or delete those private files by manipulating how the system validates file access. The vulnerability requires an authenticated attacker but poses a direct threat to data confidentiality and integrity within shared Open WebUI deployments.

• CVE-2026-54761HIGH 7.1

  Traefik, a widely-deployed reverse proxy and load balancer, contains a flaw in how it enforces access controls when Kubernetes HTTPRoutes specify multiple backend services. An attacker with the ability to create HTTP routes in a non-allowed namespace can exploit a namespace validation bypass to expose sensitive internal Traefik services—including the admin API, dashboard, and REST interface—to the network. The vulnerability stems from Traefik checking permissions against the wrong namespace when evaluating cross-provider service references, allowing an attacker to pivot through an allow-listed namespace to reach forbidden internal endpoints. This affects versions prior to 3.6.21 and 3.7.5.

• CVE-2026-56257HIGH 7.1

  Capgo versions before 12.128.2 contain a critical authorization flaw that allows authenticated users to directly modify app ownership records through PostgREST without using the proper transfer workflow. This creates a dangerous split-brain scenario where an application's metadata appears owned by one organization, but version data remains accessible to the original organization's API keys. An attacker with valid credentials can exploit this to maintain persistent unauthorized access to application versions even after nominally transferring the app to a different organization.

• CVE-2026-36933MEDIUM 6.8

  Boyleep K11 y108 devices running firmware version 2.3.0.11291 contain a vulnerability in their factory test feature that allows an attacker with physical access to execute arbitrary code. This means someone with hands-on access to the device can bypass normal security controls and run malicious code with full device privileges. The vulnerability requires no special permissions or user interaction to exploit once physical access is achieved.

• CVE-2025-24816MEDIUM 6.5

  Nokia MantaRay contains a flaw in its API authorization logic that allows an authenticated user to access information they should not be able to see. An attacker with valid credentials could exploit insufficient permission checks to retrieve confidential data beyond their intended access scope. This is a moderate-severity issue requiring attention but does not enable data modification or system disruption.

• CVE-2026-11017MEDIUM 6.5

  Google Chrome versions before 149.0.7827.53 contain a flaw in how the Link Preview feature handles navigation restrictions. If an attacker first compromises Chrome's renderer process—the component that displays web content—they can craft a malicious HTML page to bypass restrictions that normally prevent unauthorized navigation. The vulnerability requires prior renderer compromise, limiting its immediate attack surface, but it does allow an attacker with that foothold to navigate to restricted locations without proper authorization.

• CVE-2026-11026MEDIUM 6.5

  Google Chrome versions prior to 149.0.7827.53 contain a flaw in how extensions are handled that allows an attacker to bypass built-in navigation restrictions. The vulnerability requires social engineering—an attacker must trick a user into installing a malicious Chrome extension. Once installed, the extension can circumvent the browser's navigation safeguards, potentially redirecting users to unintended destinations or enabling other attack chains. This is classified as a Medium severity issue by Chromium's security team.

• CVE-2026-11078MEDIUM 6.5

  Google Chrome versions before 149.0.7827.53 contain a flaw in how the browser's FileSystem implementation validates cross-origin requests. If an attacker compromises Chrome's renderer process—the sandboxed component that executes web content—they can craft a malicious HTML page to bypass the same-origin policy, a foundational browser security mechanism that prevents one website from accessing data or resources belonging to another. The vulnerability requires the renderer to already be compromised, meaning an attacker would need to have successfully exploited a prior vulnerability to reach this point, making it a secondary but meaningful risk in a multi-stage attack chain.

• CVE-2026-11135MEDIUM 6.5

  Google Chrome's Autofill feature fails to properly enforce security policies, allowing attackers to trick users into bypassing security controls through specially crafted web pages. An attacker cannot steal data directly, but can manipulate what gets filled into form fields—potentially leading users to submit sensitive information to the wrong destination or trigger unintended actions. The vulnerability requires user interaction (clicking or interacting with the page) and affects Chrome versions before 149.0.7827.53.

• CVE-2026-11190MEDIUM 6.5

  Google Chrome versions before 149.0.7827.53 contain a flaw in how it handles browser extensions. An attacker could create a malicious extension that, if installed by a user, bypasses Chrome's access control protections. This means the extension could perform actions it should not be permitted to do—such as accessing restricted resources or modifying system behavior—without proper authorization checks. The attack requires user action to install the extension, but once installed, the damage is contained to what the extension itself can access rather than affecting the entire system.

• CVE-2026-11193MEDIUM 6.5

  Google Chrome's Password Manager contained a flaw that failed to properly enforce access controls, allowing an attacker to bypass security restrictions through a malicious webpage. An attacker could craft a specially designed HTML page that, when visited by a user, circumvents the protections meant to prevent unauthorized access to password management features. This requires user interaction—the victim must visit the attacker's page—but no special privileges are needed on the attacker's side. The vulnerability does not lead to data theft or system crashes, but rather prevents the password manager from properly enforcing who can access its functions.

• CVE-2026-11197MEDIUM 6.5

  Google Chrome versions prior to 149.0.7827.53 contain a flaw in how Worker threads enforce same-origin policy. An attacker who has already compromised your browser's rendering engine can craft a malicious webpage to trick the Worker into allowing cross-origin requests it should block. This is a post-compromise scenario—the attacker must first gain control of the renderer process—but once inside, they can escalate their privileges by accessing data from other websites.

• CVE-2026-11204MEDIUM 6.5

  A flaw in Google Chrome's sign-in implementation on iOS allows an attacker to bypass navigation restrictions by directing a user to a specially crafted webpage. The vulnerability requires user interaction—specifically visiting a malicious page—but does not require elevated permissions. While the attacker cannot read sensitive data or crash the application, they can manipulate the browser's navigation behavior in ways the user did not intend.

• CVE-2026-11210MEDIUM 6.5

  Google Chrome versions before 149.0.7827.53 contain a flaw in Safe Browsing that allows attackers to bypass access controls when a user opens a specially crafted RAR archive file. An attacker would need to trick a user into opening a malicious RAR file, but once they do, the browser's safety mechanisms fail to properly restrict what the file can access. This is a moderate-severity issue that affects Chrome on Windows, macOS, and Linux.

• CVE-2026-11258MEDIUM 6.5

  Google Chrome versions before 149.0.7827.53 contain a flaw in how the browser handles file system access permissions. An attacker can craft a malicious webpage that, when visited, tricks users into performing specific clicks or gestures that bypass the browser's normal access controls. This allows the attacker to gain unauthorized access to files on the user's computer that would normally be protected. The vulnerability requires user interaction and social engineering to exploit, but once triggered, could expose sensitive files.

• CVE-2026-11275MEDIUM 6.5

  A flaw in how Google Chrome on Android displays page information allows an attacker who has already compromised Chrome's rendering engine to bypass navigation security controls. An attacker would need to trick a user into viewing a specially crafted webpage after gaining control of the browser's internal processes. The vulnerability is rated Medium severity because while it requires significant pre-existing compromise, it enables attackers to circumvent protections that prevent unauthorized navigation to restricted pages.

• CVE-2026-13818MEDIUM 6.5

  Google Chrome contained a flaw in its password management feature that could allow an attacker to trick users into navigating to unintended websites through a specially crafted web page. The vulnerability affects Chrome versions prior to 150.0.7871.47 and requires user interaction to exploit. While the attacker cannot steal passwords or crash the browser, the ability to redirect users to malicious sites poses a meaningful risk, particularly for phishing campaigns or drive-by downloads.

• CVE-2026-13828MEDIUM 6.5

  A flaw in Google Chrome's Enterprise implementation allows attackers to extract sensitive data from browser memory by tricking users into visiting a specially crafted webpage. The vulnerability requires user interaction (clicking a link or viewing a page) but does not require any special privileges. While the underlying browser processes are not compromised or harmed, the attacker gains unauthorized access to information that may be confidential. This affects Chrome versions prior to 150.0.7871.47 across Windows, macOS, and Linux systems.

• CVE-2026-13931MEDIUM 6.5

  A vulnerability in Google Chrome's media handling on Windows allows an attacker who has already compromised the renderer process to trick users into believing they're interacting with a legitimate interface, when in fact they're seeing a fake one created by the attacker. The vulnerability requires the renderer to be compromised first, making it part of a multi-stage attack chain. It affects Chrome versions prior to 150.0.7871.47 on Windows.

• CVE-2026-13932MEDIUM 6.5

  A vulnerability in Google Chrome on Android allows an attacker who has already compromised the browser's rendering engine to steal sensitive data from websites you visit. The attacker would need to trick you into visiting a malicious webpage, but once you do and given they control the renderer process, they can access information from other websites you have open—bypassing normal browser security boundaries. This affects Chrome versions before 150.0.7871.47 on Android devices.

• CVE-2026-13936MEDIUM 6.5

  Google Chrome on Android contains a flaw in how it handles password-related functionality that could allow an attacker to trick users into visiting a malicious webpage and leak sensitive information from the browser's memory. The vulnerability requires user interaction—specifically clicking a link or visiting a crafted site—but does not require any special privileges or authentication. Chrome version 150.0.7871.47 and earlier on Android are affected.

• CVE-2026-13937MEDIUM 6.5

  Google Chrome versions before 150.0.7871.47 contain a flaw in password policy enforcement that could allow an attacker who has already compromised the browser's rendering engine to steal sensitive information from websites you visit. The attacker would craft a malicious web page to extract data that should remain isolated between different websites. While this requires the renderer process to be compromised first, it represents a meaningful step in a multi-stage attack chain.

• CVE-2026-13949MEDIUM 6.5

  A flaw in Google Chrome's payment handling on Android devices could allow an attacker to steal sensitive information from the browser's memory. The vulnerability requires a user to visit a malicious website, but does not require any special user privileges or browser configuration. An attacker could craft a deceptive web page that, when viewed, bypasses Chrome's security policies and leaks data from the payment system's process memory—potentially exposing payment-related information or other sensitive details stored there.

• CVE-2026-13953MEDIUM 6.5

  Google Chrome versions before 150.0.7871.47 contain a flaw in how the SplitView feature handles navigation security checks. An attacker who has already compromised Chrome's renderer process—the component that executes web content—can exploit this weakness to bypass built-in navigation restrictions by serving a crafted HTML page. The vulnerability requires the attacker to have prior control of the renderer process, which substantially limits the attack surface but remains serious in environments where renderer compromise is plausible.

• CVE-2026-13954MEDIUM 6.5

  Google Chrome on Android contains a flaw in how it enforces security policies when processing XML within web pages. An attacker can craft a malicious HTML page that, when visited by a user, allows the attacker to read sensitive data held in Chrome's process memory. This vulnerability requires user interaction (visiting a malicious page) but does not require the attacker to be authenticated or have special privileges. The vulnerability was patched in Chrome version 150.0.7871.47 and later.

• CVE-2026-13964MEDIUM 6.5

  Google Chrome's WebView component on Android contains a flaw that allows attackers to circumvent navigation restrictions through a specially crafted web page. An attacker could trick a user into visiting a malicious HTML page, which then bypasses security controls that normally prevent unauthorized navigation to restricted destinations. This is a policy enforcement gap rather than a code execution vulnerability, meaning the browser's security rules aren't being properly applied in certain conditions.

• CVE-2026-14035MEDIUM 6.5

  Google Chrome versions prior to 150.0.7871.47 contain a Bluetooth-related security flaw that allows an attacker to extract sensitive information from the browser's memory. An attacker would need to trick a user into visiting a malicious webpage; if successful, the attacker could read data that shouldn't be accessible, such as authentication tokens, session data, or other confidential information stored in memory. Chrome itself rates this as low severity, though the CVSS score reflects moderate risk due to the ease of exploitation and the sensitivity of potential data exposure.

• CVE-2026-14061MEDIUM 6.5

  A flaw in Google Chrome's Dawn graphics component allows attackers to trick users into visiting specially crafted web pages that can leak sensitive information from the browser's memory. The vulnerability requires user interaction—the victim must visit a malicious site—but once they do, attackers may be able to read data that should remain private, such as authentication tokens or other browser state. This affects Chrome versions before 150.0.7871.47 across Windows, macOS, and Linux systems.

• CVE-2026-14155MEDIUM 6.5

  A flaw in Google Chrome's StorageAccessAPI—a mechanism that allows websites to request cross-origin data access—fails to enforce sufficient security policies. This permits an attacker to craft a malicious webpage that tricks users into leaking sensitive data from other websites. The vulnerability requires user interaction and is limited to information disclosure; it does not enable data modification or service disruption. Chrome versions prior to 150.0.7871.47 are affected.

• CVE-2026-14156MEDIUM 6.5

  A flaw in Google Chrome's StorageAccessAPI allowed attackers who had already compromised the browser's rendering engine to bypass the same-origin policy—a core security boundary that prevents malicious websites from accessing data belonging to other sites. The attacker would need to trick a user into visiting a specially crafted webpage while the renderer process was already compromised. This vulnerability affects Chrome versions before 150.0.7871.47.

• CVE-2026-14792MEDIUM 6.5

  A security flaw in Formbricks 5.0.0 allows remote attackers to bypass access controls on survey-related functionality without requiring authentication. The vulnerability exists in the survey link handling component and can be exploited to modify data or disrupt availability. Upgrading to version 5.1.0-rc.1 or later resolves the issue.

• CVE-2026-31978MEDIUM 6.5

  motionEye, a web-based video surveillance interface, contains a path traversal vulnerability in its preview and movie API endpoints that allows authenticated users to read files they shouldn't access. An attacker with a basic motionEye account could exploit this to extract sensitive files such as system credentials, configuration files with passwords, SSH keys, and footage from other cameras. The vulnerability affects all versions before 0.44.0 and requires only user-level privileges to exploit—no special admin access is needed.

• CVE-2026-3198MEDIUM 6.5

  MLflow 3.9.0, when deployed with basic authentication enabled, contains an authorization bypass affecting several gateway API endpoints. The application fails to properly verify user permissions before allowing access to sensitive operations that list gateway secrets, endpoints, and model definitions. This means any user who has logged in—even with minimal privileges—can view all gateway configuration data, including API keys and proprietary model information that should be restricted. The vulnerability is confined to the basic-auth deployment mode and affects information disclosure rather than data modification or system availability.

• CVE-2026-40009MEDIUM 6.5

  Apache IoTDB contains a privilege escalation vulnerability where authenticated users can rename themselves to a special internal system account (__internal_auditor) to gain unrestricted access to all data in the system's tree structure. This vulnerability affects versions 2.0.8 through 2.0.9 and has been patched in version 2.0.10. The vulnerability requires an attacker to already have valid login credentials, so it represents an insider risk or a secondary exploit path following initial compromise.

• CVE-2026-43713MEDIUM 6.5

  Apple has patched a permissions flaw that could allow website visits to leak sensitive user data. The vulnerability affects Safari, iOS, iPadOS, and macOS. An attacker does not need special privileges—only the ability to host a website and trick a user into visiting it. Once a victim lands on the malicious page, the flaw can expose confidential information. The fix involves tightening permission checks to prevent unauthorized data access.

• CVE-2026-45282MEDIUM 6.5

  Nextcloud Server contains a flaw that allows an authenticated user to download file attachments from password-protected or restricted link shares if they know the share token and have access to a document ID. This bypasses the intended security controls around shared links. The attacker can only extract attached files, not the shared documents themselves, and the vulnerability requires prior authentication and knowledge of specific document identifiers.

• CVE-2026-46810MEDIUM 6.5

  Oracle Identity Manager contains a flaw in its End User Self Service component that allows an attacker to modify, add, or delete certain data and read sensitive information without needing to log in first. The vulnerability affects two specific versions of the software and can be exploited remotely via network access through the IIOP protocol. No user interaction or special circumstances are required to trigger the attack.

• CVE-2026-46871MEDIUM 6.5

  MySQL Shell, Oracle's command-line interface and IDE extension for MySQL databases, contains a flaw that allows an authenticated attacker to read sensitive data without authorization. The vulnerability exists in the VS Code extension component and affects version 2026.2.0+9.6.1. An attacker who already has valid credentials can exploit this over the network to access confidential information stored within MySQL Shell's scope, but cannot modify or delete data.