By weakness (CWE)

CWE-863: related vulnerabilities

CVEs classified under CWE-863. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

185 published vulnerabilities · page 1 of 2

• CVE-2016-20075HIGH 8.8

  WordPress Ultimate Product Catalog version 3.8.6 has a file upload weakness that lets authorized site users with contributor, editor, author, or administrator access upload dangerous files—specifically PHP code—through the plugin's custom fields feature. Once uploaded, these files land in a publicly accessible directory where an attacker can execute them, gaining full control over the website and server. The vulnerability requires someone with legitimate site access to exploit it, but the impact is severe.

• CVE-2026-14536HIGH 8.8

  Devolutions Server 2026.2.9.0 contains a flaw that allows attackers with valid login credentials to skip multi-factor authentication (MFA) and gain full access to the system. The vulnerability occurs when the server encounters an invalid default MFA configuration, creating a gap in the authentication enforcement mechanism. An attacker who has already compromised a user's password can exploit this to bypass the MFA requirement entirely, gaining the same level of access as if they had completed the second factor.

• CVE-2026-15125HIGH 8.8

  Google Chrome versions before 150.0.7871.115 contain a vulnerability in the Forms implementation that allows attackers to execute arbitrary code within Chrome's sandbox through a malicious HTML page. An attacker would need to trick a user into visiting or interacting with a crafted webpage, but once clicked or loaded, the vulnerability could allow code execution with the privileges of the browser process.

• CVE-2026-27775HIGH 8.8

  Gitea 1.25.5 contains a privilege-escalation flaw in how it manages write permissions during git operations. When a user with limited write access to a specific branch executes a push, Gitea incorrectly caches their permission level and reuses it for all other branches and refs in the same operation. An attacker with per-branch maintainer permissions can exploit this to gain full repository write access, potentially modifying code, deleting branches, or corrupting the entire repository.

• CVE-2026-35674HIGH 8.8

  OpenClaw versions before 2026.5.18 contain a privilege escalation flaw in their chat messaging system. An attacker with basic operator permissions can bypass security controls meant to restrict high-risk actions—such as modifying plugins, configurations, or access policies—by sending commands through internal message routes. This allows someone with limited access to act as if they have full administrative privileges.

• CVE-2026-45831HIGH 8.8

  ChromaDB's SimpleRBACAuthorizationProvider has a critical authorization bypass flaw. While it correctly verifies that a user holds a permission, it fails to validate which tenant, database, or collection that permission actually applies to. This means an authenticated user can exploit this gap to access or modify data belonging to other tenants, databases, or collections they shouldn't have access to. The vulnerability affects ChromaDB version 0.5.0 and later.

• CVE-2026-46519HIGH 8.8

  mcp-server-kubernetes is a protocol server that helps manage Kubernetes clusters through a standardized interface. The software offers three environment variables designed to limit which cluster operations a user can perform—read-only mode, non-destructive operations only, or a custom whitelist. Before version 3.6.0, these restrictions only applied when listing available tools, but not when actually executing them. An authenticated user could bypass all restrictions by directly invoking a tool name they discovered, gaining full control over the cluster regardless of the configured safety mode. Version 3.6.0 fixes this enforcement gap.

• CVE-2026-53807HIGH 8.8

  OpenClaw versions before 2026.5.6 contain a flaw that allows authenticated users to bypass permission checks in Telegram interactive callbacks. An attacker with valid credentials can manipulate the callback mechanism to mark themselves as authorized before the allowlist validation occurs, effectively circumventing configured sender restrictions. This means an authenticated user could trigger commands they shouldn't be able to execute based on their Telegram sender status.

• CVE-2026-53828HIGH 8.8

  OpenClaw before version 2026.5.6 has a flaw that allows authenticated users to run commands that should only be available to the owner. Even though the software has built-in protections to prevent this, an attacker who has valid login credentials can bypass those protections and execute privileged commands they shouldn't have access to. This is particularly dangerous because it requires no user interaction and can be exploited over the network by anyone with basic authentication credentials.

• CVE-2026-54998HIGH 8.8

  Microsoft Exchange Online contains a flaw in how it validates user permissions, allowing someone with legitimate access to the system to gain higher privileges than they should have. An attacker with any valid Exchange Online account could exploit this over the network to gain administrator-level capabilities, potentially compromising email data, modifying configurations, and accessing sensitive organizational information.

• CVE-2026-56075HIGH 8.8

  PraisonAI versions before 4.5.128 have a critical flaw that allows authenticated users to trick the system into running arbitrary shell commands on the server. The vulnerability stems from a hardcoded setting that forces automatic approval of commands, even when administrators have configured the system to require manual review. An attacker with login credentials can exploit this by instructing the AI agent to execute dangerous shell commands, bypassing both the approval safeguard and command filtering protections.

• CVE-2026-56086HIGH 8.8

  Dell PowerProtect Data Domain contains a flaw in how it checks user permissions. A remote attacker with low-level credentials can bypass authorization controls and gain unauthorized access to the system. This affects multiple versions across different release lines (7.7 through 8.6 and several LTS branches). The vulnerability allows a low-privileged user to escalate their access in ways the system should prevent.

• CVE-2026-56232HIGH 8.8

  Capgo, a cloud deployment platform, contains a critical authentication bypass vulnerability in how it validates API key permissions. The vulnerability allows authenticated users to circumvent restrictions placed on limited-scope API keys (subkeys) by manipulating the x-limited-key-id header. Instead of enforcing the intended scope constraints, the application defaults to using the unrestricted parent key for all subsequent operations. This means an attacker with a scoped subkey can effectively gain the full permissions of their parent account, potentially accessing or modifying any organization or application they shouldn't have access to.

• CVE-2026-56424HIGH 8.8

  MISP, a widely-used threat intelligence sharing platform, contained multiple authorization flaws that allowed authenticated users to modify or delete data belonging to other organizations. Instead of checking whether a user owned the data they were trying to change, the application sometimes checked permissions against the wrong object or skipped the ownership check entirely. This meant a user with basic access could tamper with event reports, intelligence collections, analyst notes, templates, and decay models belonging to competitors or other organizations—potentially corrupting shared threat intelligence and disrupting security teams' workflows.

• CVE-2026-7387HIGH 8.8

  A privilege escalation vulnerability exists in Mattermost that allows users with basic group-link permissions to promote themselves and other group members to team or channel administrator status without proper authorization checks. An attacker could exploit this by sending specially crafted API requests to the group syncable link and patch endpoints, bypassing the role-management authorization layer. This affects multiple versions across Mattermost 11.6, 11.5, and 10.11 release lines.

• CVE-2026-55638HIGH 8.6

  9Router, an AI-based router designed to optimize and reduce token consumption for language model API calls, contains an authentication bypass vulnerability in versions before 0.5.2. The vulnerability exists because the application's URL protection rules in its dashboard guard don't cover the /codex endpoint. An attacker can exploit this gap by sending unauthenticated requests directly to /codex paths, which are later rewritten internally to /api/v1/responses. This rewriting happens after the authentication checks, allowing the attacker to bypass API-key verification and trick the server into making requests to upstream LLM providers using the operator's stored credentials. The impact ranges from data exposure to potential service disruption.

• CVE-2026-26231HIGH 8.5

  Gitea, a self-hosted Git service, contains a permission logic flaw that allows authenticated users to bypass write restrictions on repositories. Specifically, the "Allow edits from maintainers" permission setting can be misused to authorize commits to repositories the attacker can only read. This means a user with read-only access could potentially modify code they should not be allowed to change, undermining code integrity and access control.

• CVE-2026-44850HIGH 8.5

  Portainer Community Edition versions 2.33.0 through 2.33.7, 2.39.0–2.39.1, and 2.40.x contain a security bypass in their bind-mount restriction feature. Organizations using Portainer to enforce a policy that prevents regular users from mounting host directories into containers can be circumvented. An authenticated user with container-creation rights can work around the restriction by using an alternative API field (HostConfig.Mounts) that the security check failed to inspect, allowing them to mount sensitive host paths into containers they control. This bypasses intended access controls and exposes host data to authenticated container users.

• CVE-2026-45549HIGH 8.5

  Roxy-WI, a web management tool for load balancers and web servers, contains a privilege escalation vulnerability in versions 8.2.6.4 and earlier. Any user logged into the system—even those with minimal "guest" privileges—can remotely start, stop, or restart the monitoring agent service on any server managed by Roxy-WI. Because the underlying systemd commands execute with root privileges, an attacker can disrupt critical infrastructure services or cause denial of service across your entire load-balanced environment. Authentication is required, but the lack of role or permission checks makes this a significant lateral movement and sabotage risk.

• CVE-2026-49824HIGH 8.5

  Fission, an open-source serverless framework for Kubernetes, contains a namespace validation gap in its Function admission webhook. The webhook correctly validates that Secrets and ConfigMaps referenced by a function must belong to the same namespace as the function itself—a security boundary enforcement mechanism. However, it failed to apply the same check to environment specifications, allowing authenticated users to reference environments from other namespaces. This cross-namespace access could enable privilege escalation or unauthorized data exposure in multi-tenant Kubernetes clusters. The issue affects all versions prior to 1.24.0.

• CVE-2026-54765HIGH 8.5

  Traefik versions 3.7.0 through 3.7.5 contain a filter application bug in the Kubernetes Gateway API provider that can cause requests intended for one HTTPRoute to be processed using a different route's security filters. An attacker with the ability to create HTTPRoutes in a Kubernetes cluster can exploit this to apply their own filter rules (such as injected headers) to legitimate traffic, potentially escalating privileges or accessing data they shouldn't see. The vulnerability requires existing cluster access but can cross namespace boundaries if ReferenceGrants permit it.

• CVE-2026-47929HIGH 8.4

  ColdFusion versions 2023.19, 2025.8 and earlier contain an authorization flaw that allows high-privileged attackers to execute arbitrary code within the context of the current user without requiring any user interaction. The vulnerability crosses trust boundaries, meaning an attacker with elevated permissions could escalate access or take control of affected accounts and sessions. This is a serious issue for organizations running vulnerable versions of ColdFusion.

• CVE-2026-54096HIGH 8.4

  File Browser versions prior to 2.63.7 contain a logic flaw that allows authenticated users to pre-stage public share links for files that don't yet exist. When those files are later created at the predicted path, they are automatically exposed through the public share mechanism, bypassing normal access controls. An attacker with valid credentials can exploit this to gain unauthorized read access to files created by others in predictable locations.

• CVE-2026-54320HIGH 8.4

  Daytona, an infrastructure runtime for AI code execution, contains a flaw in how it validates organization invitations. Before version 0.184.0, a user could accept an organization invitation—potentially gaining Owner-level access—without verifying their email address, as long as the email matched the invitation target. This circumvents a security control that normally requires email verification before granting organization membership. The vulnerability requires an attacker to have registered an account and received a session from their identity provider, but does not require prior authorization within Daytona itself.

• CVE-2026-53853HIGH 8.3

  OpenClaw versions prior to 2026.5.12 contain a security flaw that allows authenticated users to bypass restrictions on which command-line arguments can be passed to approved executable programs. An attacker with login access can invoke whitelisted applications with arguments that should be forbidden, potentially gaining unauthorized access to files, establishing network connections, or executing additional commands that the OpenClaw security policy was designed to prevent.

• CVE-2026-53721HIGH 8.2

  Nuxt, a popular Vue.js web framework, contains a middleware bypass vulnerability caused by inconsistent case-sensitivity handling between its router and route-rule matcher. An attacker can craft requests with different letter casing to bypass security middleware that should be protecting sensitive routes, potentially exposing functionality that was intended to be restricted. This affects Nuxt versions 3.11.0 through 3.21.6 and 4.0.0 through 4.4.6. Patches are available in versions 3.21.7 and 4.4.7.

• CVE-2026-55188HIGH 8.2

  RustFS, a Rust-based distributed object storage system, has an authorization bypass flaw affecting versions 1.0.0-alpha.1 through 1.0.0-beta.8. An authenticated user—even one with minimal or no permissions—can query the bucket replication API to retrieve remote replication target configurations, including stored access credentials. This credential disclosure poses a direct risk to organizations relying on RustFS for sensitive data, as attackers gaining foothold access could pivot to compromise downstream replication infrastructure. The fix is available in version 1.0.0-beta.9 and later.

• CVE-2026-55428HIGH 8.2

  Coder, a platform for provisioning remote development environments via Terraform, contains a validation gap that allows authenticated agents to inject arbitrary IP ranges into the WireGuard tunnel configuration of other agents. An attacker with valid credentials can manipulate the `AllowedIPs` field to route network traffic through their controlled agent, potentially intercepting or redirecting communications intended for legitimate development environments. This is a cross-tenant risk in multi-user deployments where agents from different organizations or teams share a tailnet coordinator.

• CVE-2026-22659HIGH 8.1

  FlaskBB versions through 2.2.0 contain a critical authorization flaw that allows authenticated forum moderators to manipulate topics they shouldn't have access to. By crafting specially formatted batch requests that mix a topic from a forum they do control with topics from forums they don't, attackers can bypass permission checks and lock, unlock, delete, or hide discussions across the entire forum. The vulnerability requires valid moderator credentials but no further user interaction, making it a practical risk in multi-forum deployments.

• CVE-2026-24724HIGH 8.1

  CVE-2026-24724 is an authorization bypass vulnerability affecting QNAP File Station 6. An attacker with valid user credentials can exploit improper access control checks to gain unauthorized access to resources or functionality they should not be able to reach. The vulnerability requires an existing user account but does not require user interaction or special network conditions, making it a practical concern for environments where user account compromise is a realistic threat.

• CVE-2026-28699HIGH 8.1

  Gitea, a self-hosted Git service, has a critical flaw in how it enforces API permissions for OAuth2 applications. When someone logs in using HTTP Basic authentication (username and password), the system fails to respect the restricted access scopes that should apply to OAuth2 tokens. This means an attacker with a compromised user account or valid credentials could use HTTP Basic auth to perform actions that an OAuth2 application was explicitly forbidden from doing, such as modifying repositories or accessing sensitive information.

• CVE-2026-28744HIGH 8.1

  Gitea, a self-hosted Git platform, contains a flaw in how it validates API access tokens when developers use Git's smart HTTP protocol. An authenticated user with a token intended for limited access (scoped tokens) can bypass those restrictions and perform actions they shouldn't be allowed to do—such as reading or modifying repositories they lack permission for. This affects Gitea versions 1.26.1 and earlier. The vulnerability requires an attacker to already have valid credentials, but once authenticated, the scope bypass is straightforward to exploit.

• CVE-2026-44654HIGH 8.1

  LibreChat is an open-source ChatGPT alternative that integrates multiple AI providers. A critical flaw in versions up to 0.8.3 allows a user with editing privileges on a shared agent to permanently delete files — not just from that shared agent, but globally across the entire system. This means if a file owner has reused the same file across multiple private agents, an attacker with edit access to just one shared agent can destroy those files, leaving the owner's other agents broken with orphaned file references. The owner doesn't control the attacker's edit access to their own private agents; they simply stop working.

• CVE-2026-44882HIGH 8.1

  Portainer Community Edition versions 2.33.0 through 2.33.7 contain an authorization bypass vulnerability in how it proxies requests to Kubernetes clusters. When a user's token validation fails during a security check, the application incorrectly continues processing the request instead of stopping it. This allows an authenticated Portainer user without permission to access a specific Kubernetes cluster to send requests directly to that cluster anyway, circumventing the intended access controls. An attacker must already have a valid Portainer session to exploit this.

• CVE-2026-47339HIGH 8.1

  Apache APISIX has an authorization flaw in its authz-casdoor plugin that allows attackers with valid credentials to bypass authentication controls and gain access using credentials from a different authentication source. This is possible when the plugin is deployed with its default settings. The vulnerability affects APISIX versions 2.14.1 through 3.16.0, and upgrading to version 3.17.0 eliminates the issue.

• CVE-2026-53738HIGH 8.1

  Copy & Delete Posts, a WordPress plugin, contains a critical authorization flaw that allows any user with a plugin-enabled role—even non-administrators—to perform privileged operations they shouldn't be able to access. Through a parameter called 'f', attackers can delete posts or change plugin configuration settings. The vulnerability stems from missing per-function permission checks in the plugin's AJAX handler, meaning the plugin trusts user input without verifying what actions each user is authorized to perform.

• CVE-2026-53855HIGH 8.1

  OpenClaw versions before 2026.4.2 contain a security flaw that allows authenticated operators to bypass security controls meant to restrict which commands can be executed. By exploiting how shell parameters work, an attacker with valid credentials can combine approved tools with special shell arguments to sneak in and run commands that should be blocked. This creates a significant risk because it defeats the intended protection layer.

• CVE-2026-54652HIGH 8.1

  Frigate version 0.17.1 contains a privilege escalation vulnerability affecting its log retrieval API. Any user with viewer-level access—the lowest privilege tier—can download application and web server logs that inadvertently contain sensitive credentials. These logs include auto-generated admin passwords and camera authentication details that may have been captured in web request parameters. This flaw enables a low-privilege user to escalate their access to administrator level by obtaining stored credentials from logs.

• CVE-2026-57950HIGH 8.1

  CVE-2026-57950 is a privilege-escalation vulnerability in ruoyi-vue-pro, an open-source ERP framework. The flaw allows users with shipment-level permissions (specifically those with 'erp:sale-out' access) to bypass intended access controls and perform unauthorized operations on sale orders—including viewing, creating, modifying, and deleting sensitive financial records. The vulnerability stems from a misconfiguration in the ErpSaleOrderController where the code checks for the wrong permission namespace, creating a gap between intended and actual authorization boundaries. This is particularly risky because it affects financially sensitive transactions and can be exploited without any user interaction or network complexity; a single authenticated request is sufficient.

• CVE-2026-35482HIGH 8.0

  alf.io, an open-source ticketing platform for conferences and events, contains a critical sandbox escape flaw in its extension script engine. An authenticated administrator can exploit this vulnerability to run arbitrary commands on the server. The flaw stems from an improperly protected Java object exposed to the sandboxed JavaScript environment, combined with gaps in code validation that allow attackers to use Java reflection to break out of the sandbox entirely. This requires administrator credentials to exploit, but once compromised, grants complete control over the underlying server.

• CVE-2025-32348HIGH 7.8

  CVE-2025-32348 is a privilege escalation vulnerability affecting Android that allows a local attacker to launch background activities without proper permission validation. An attacker with basic user-level access can exploit this flaw to gain elevated privileges on the device—no special capabilities or user interaction required. The vulnerability exists across multiple code paths where permission checks are missing, creating a consistent attack surface.

• CVE-2026-21031HIGH 7.8

  AppBlock, a Samsung Android security component, contains an authorization flaw that allows a local attacker to launch arbitrary activity on an affected device. The vulnerability requires user interaction to trigger—for example, the user must perform an action or accept a prompt that inadvertently enables the attack. While the flaw is local-only (not remotely exploitable), it grants the attacker significant control over the device once activated.

• CVE-2026-45490HIGH 7.8

  A flaw in Microsoft .NET allows an authorized local user to bypass privilege restrictions and gain higher-level access on the same machine. An attacker who already has login credentials can exploit this improper authorization logic to escalate to administrative or system-level permissions, potentially compromising the entire system.

• CVE-2026-54555HIGH 7.8

  rtk is a tool that filters and compresses command outputs before they reach language model contexts. Versions before 0.42.2 contain a permission-bypass vulnerability in how the permission splitter handles Bash shell constructs. An attacker can craft a command that starts with an allowed prefix (like 'git') but hides a second command using shell execution boundaries that Bash recognizes but rtk's filter does not. The tool incorrectly reports success (exit code 0), causing the permission system to approve the command. The hidden command then executes without the user confirmation or denial that the permission rules were meant to enforce.

• CVE-2026-46717HIGH 7.7

  Nezha Monitoring, a self-hosted server and website monitoring tool, contains an access control vulnerability in versions 1.4.0 through 2.0.7 that allows unprivileged users to trigger outbound HTTP requests to arbitrary destinations and retrieve the response data. The vulnerability exists in the notification configuration endpoints, which were inadvertently made accessible to standard member-level users instead of being restricted to administrators only. An attacker with member-level access can exploit this to perform server-side request forgery (SSRF) attacks, potentially accessing internal services, extracting sensitive information from cloud metadata endpoints, or conducting reconnaissance against internal infrastructure. The issue has been resolved in version 2.0.8.

• CVE-2026-46823HIGH 7.7

  CVE-2026-46823 is an authorization flaw in Oracle Public Sector Financials (International), a module of Oracle E-Business Suite. An attacker with a low-privileged account and network access can bypass authorization controls to read sensitive financial data that should be restricted. The vulnerability requires valid credentials but no user interaction, making it a straightforward privilege escalation path. Affected versions range from 12.2.6 through 12.2.15.

• CVE-2026-49823HIGH 7.7

  Fission, an open-source serverless framework for Kubernetes, contains a namespace isolation bypass in versions prior to 1.24.0. When defining Fission Functions, administrators can reference Secrets, ConfigMaps, and Packages. The admission webhook—a Kubernetes security control—validated namespace boundaries for Secrets and ConfigMaps but failed to validate the namespace referenced in PackageRef. This gap allows an authenticated user in one namespace to access packages from other namespaces, violating expected isolation. Version 1.24.0 patches this validation gap.

• CVE-2026-55189HIGH 7.7

  RustFS, a distributed storage system, has a critical authorization bypass in its FTP interface. When FTP is enabled, users can read files and check file/bucket existence without proper permission checks—even if their account explicitly denies read access. The HTTP S3 interface is not affected. This vulnerability affects RustFS versions 1.0.0-alpha.1 through 1.0.0-beta.8 and is resolved in 1.0.0-beta.9.

• CVE-2026-56268HIGH 7.7

  Flowise, a popular open-source platform for building conversational AI applications, has an information disclosure flaw in versions before 3.1.2. An attacker with a valid API key to one workspace can query an unprotected endpoint and retrieve sensitive configuration details—including system prompts, node settings, and credential IDs—from chatflows across other workspaces that lack API key protection. This occurs because the API endpoint fails to enforce workspace boundaries when returning chatflow data.

• CVE-2026-58056HIGH 7.6

  RustDesk contains an authorization bypass vulnerability where a user granted only file-transfer permissions can exploit insufficient access controls to perform unauthorized actions including keyboard input, mouse control, and screen capture. The vulnerability exists because the application checks individual feature permissions rather than validating that the requester's session type authorizes the requested action. When a file-transfer session is established, the application fails to clear capability flags, leaving them accessible for abuse by an attacker with limited legitimate access.

• CVE-2026-3514HIGH 7.5

  Prefect version 3.6.19 contains an authentication bypass vulnerability in its health check exemption logic. The system automatically skips authentication for any URL path ending in 'health' or 'ready', a design meant to allow infrastructure monitoring. An attacker can exploit this by creating resources—such as variables, flows, work pools, work queues, or deployments—with names ending in those keywords, then access them without credentials. This can expose sensitive secrets like API keys and database passwords that are stored in Prefect Variables.

• CVE-2026-40452HIGH 7.5

  Apache IoTDB contains an authorization flaw in its REST API endpoint `/rest/v2/fastLastQuery` that allows authenticated users to access time-series data they should not be permitted to view. An attacker with valid credentials—but no legitimate access to specific datasets—can retrieve the latest values from sensors, devices, or other IoT sources, potentially exposing sensitive operational or environmental information. This is a classic privilege-escalation scenario where the application fails to enforce proper access controls before returning query results.

• CVE-2026-47777HIGH 7.5

  Mastodon, an open-source social network platform, contains a flaw in its experimental Collections feature that allows attackers to forge authorization objects and falsely claim permission to feature accounts in remote Collections. The vulnerability exists because Mastodon fails to properly validate that the authorization object matches the actual account being featured. Exploitation is straightforward—no user interaction or special privileges are required—but only affects Mastodon instances that have explicitly enabled the experimental Collections feature. The flaw has been patched in version 4.6.0-beta.1.

• CVE-2026-50559HIGH 7.5

  Quarkus, a popular Java framework for cloud-native applications, has a security flaw in how it enforces access controls on HTTP paths. An attacker can bypass authorization policies by embedding encoded characters—specifically encoded semicolons (%3B), slashes (%2F), or backslashes (%5C)—in request URLs. This allows unauthorized access to protected resources and sensitive functionality that should be restricted. The vulnerability affects multiple Quarkus version branches; patched versions are available across the 3.20, 3.27, 3.33, and 3.36+ series.

• CVE-2026-53834HIGH 7.5

  OpenClaw versions before 2026.4.27 contain an authorization bypass flaw in how it handles QQBot slash commands. Authenticated users can trigger these commands in a way that skips the access control policies meant to restrict who can use them. Depending on how an organization configures OpenClaw, this could allow blocked users to execute commands they shouldn't have access to.

• CVE-2026-54091HIGH 7.5

  File Browser is a file management tool that lets users upload, delete, preview, rename, and edit files in designated directories. It also supports sharing directories publicly via special URLs. A flaw in how File Browser handles these public shares allows an attacker who knows a public share URL to bypass access restrictions the owner set up. Specifically, the vulnerability occurs because File Browser checks permissions using paths relative to the shared directory rather than the owner's full filesystem, enabling an attacker to access files the owner explicitly blocked—as long as those files are nested under the shared directory. No authentication is required; the attacker simply needs the public URL.

• CVE-2026-56842HIGH 7.5

  A flaw in Ubiquiti's UniFi Network Application allows an attacker who already has network access and holds low-level privileges to maintain elevated permissions even after an administrator removes them. The vulnerability stems from improper authorization checks—essentially, the application fails to fully revoke access rights in certain conditions, letting an attacker persist with high-level capabilities they should have lost.

• CVE-2025-14774HIGH 7.4

  CVE-2025-14774 is a flaw in ABB T-MAC Plus (version 4.0-24) where access control is not properly enforced, allowing an attacker on the same network to disrupt system availability without needing credentials or user interaction. The vulnerability has a CVSS score of 7.4 (HIGH) and is classified as an incorrect authorization issue.

• CVE-2026-48501HIGH 7.4

  GitHub CLI (gh) prior to version 2.93.0 has a flaw where it unintentionally sends your authentication token to external services during specific operations. When you run commands like `gh attestation`, `gh release verify`, or `gh release verify-asset`, the tool needs to fetch data from various external servers—including TUF (The Update Framework) repositories and cloud storage. The problem is that the authentication layer doesn't correctly identify which servers should receive your token. Due to flawed host detection logic, requests to services like tuf-repo.github.com are incorrectly treated as requests to GitHub itself, causing your personal GitHub token to be transmitted to an untrusted third party. Similarly, requests to unrelated external hosts (like Sigstore's CDN or Azure Blob Storage) also receive your token. An attacker controlling or monitoring traffic to these external services could intercept your token and impersonate your GitHub account.

• CVE-2026-56776HIGH 7.4

  n8n versions before 1.123.55, 2.25.7, and 2.26.2 have a permission flaw in their test-run feature that lets authenticated users with read-only access to workflows actually execute those workflows. When someone with restricted permissions triggers a test run, the workflow runs for real, potentially making unintended changes to connected systems, pulling or pushing data where it shouldn't, or calling external APIs on behalf of the organization. This bypasses the intended access controls that should prevent read-only users from executing workflows.

• CVE-2026-8079HIGH 7.3

  Progress Flowmon contains a privilege escalation vulnerability affecting versions before 12.5.9 and 13.0.11. An authenticated user with low-level permissions can manipulate requests during PDF generation to execute operations as a different user, potentially viewing restricted data or altering system settings they should not have access to. The vulnerability requires user interaction (someone must initiate or be tricked into initiating a PDF generation) but is otherwise straightforward to exploit once access is gained.

• CVE-2026-0272HIGH 7.2

  CVE-2026-0272 is a privilege escalation flaw in Palo Alto Networks PAN-OS that lets an authenticated administrator with CLI access run commands as root. While the vulnerability requires pre-existing admin credentials and CLI access, the impact is severe: a malicious or compromised admin account could gain unrestricted control of the firewall. The risk is substantially reduced when CLI access is tightly limited to a small trusted group and the management interface is restricted to known internal IP ranges.

• CVE-2026-9640HIGH 7.2

  A vulnerability in LXD allows authenticated project operators to escalate their privileges to root on the host system by bypassing security policies designed to restrict multi-tenant environments. An attacker with operator-level access in a restricted project can craft a malicious instance backup, import it, and restore its snapshot in a way that applies restricted configuration settings that would normally be blocked. Once the instance restarts with these unauthorized settings, the operator gains full root access to the underlying host. This affects LXD versions 6.0 through 6.8, 5.21.0 through 5.21.4, and 5.0.0 through 5.0.6.

• CVE-2026-28740HIGH 7.1

  Gitea, a popular self-hosted Git service, contains an authorization bypass vulnerability in how it handles Git Large File Storage (LFS) objects. An authenticated user who has general repository access but is explicitly restricted from viewing code can bypass those restrictions to access private LFS objects stored in that repository. The issue affects Gitea versions 1.26.2 and earlier. An attacker with basic repository access could exploit this to read sensitive files stored via LFS without proper authorization checks.

• CVE-2026-35210HIGH 7.1

  OpenCTI, an open-source threat intelligence platform, contains an authorization bypass flaw in versions before 7.260326.0. Users with standard knowledge update permissions can manipulate how the system treats sensitive intelligence by sending a specially crafted HTTP header. This allows them to weaken confidence levels on threat data, strip off security markings like TLP:RED that restrict distribution, and alter relationships between threat actors, malware, and indicators—even though they should not have permission to do so. The vulnerability requires an authenticated account but no additional interaction, making it a direct privilege escalation risk for organizations relying on OpenCTI to maintain the integrity and confidentiality of their threat intelligence.

• CVE-2026-39903HIGH 7.1

  Simple Machines Forum (SMF), a popular open-source discussion platform, contains a logic error in its attachment approval system that allows any logged-in user to modify, delete, or approve pending file uploads—even if they lack permission to do so. The flaw stems from a single-character mistake in the permission-checking code that causes the authorization check to fail silently, treating unauthorized users as if they had full moderation rights. This affects SMF 2.1 and 3.0 prior to specific commits. An attacker with basic forum access can exploit this to disrupt moderation workflows, enumerate other users' uploads, delete files, or approve malicious attachments without detection.

• CVE-2026-41048HIGH 7.1

  qSnapper, a snapshot management tool, has a flaw in how it manages user permissions for different administrative actions. A local user on a system could perform restricted operations—such as restoring snapshots—even if their account was only granted permission to delete them. This happens because the system incorrectly caches authentication decisions across different snapshot functions, allowing a lower-privileged user to bypass intended access controls. The vulnerability requires local access and user interaction to exploit.

• CVE-2026-41049HIGH 7.1

  A flaw in the qSnapper D-Bus service allows unprivileged local users to hijack authenticated sessions. When a privileged user authenticates to perform an action via D-Bus, the service incorrectly caches that authentication state without proper isolation. A local attacker can then invoke the same D-Bus functions without re-authenticating, effectively using the elevated privileges that were granted to the legitimate user. This is a local privilege escalation vulnerability requiring an existing login session on the affected system.

• CVE-2026-47120HIGH 7.1

  Nezha Monitoring, a self-hosted monitoring tool, contains an authorization bypass flaw affecting versions 1.4.0 through 2.0.7. A user with RoleMember privileges can trigger cron tasks (scheduled automation jobs) owned by other users without proper permission checks. While the attacker cannot see the tasks' contents or modify them, they can force execution, potentially disrupting monitoring workflows or triggering unintended automated actions. The vulnerability requires authenticated access and has been fixed in version 2.0.8.

• CVE-2026-48507HIGH 7.1

  Snipe-IT, a popular IT asset and license management system, has a privilege escalation flaw that lets low-privileged users with basic editing permissions lock all administrators out of the system. A user granted only the `users.edit` permission can disable admin accounts by toggling login flags and blocking password reset options, effectively taking control of the instance. The vulnerability affects all versions before 8.6.0 and is fixed in that release.

• CVE-2026-52808HIGH 7.1

  Gogs, an open-source Git hosting platform, contains an authorization bypass vulnerability in three API endpoints that handle repository settings and operations. Write-level collaborators—users with limited repository permissions—can exploit these endpoints to disable critical repository features (issue tracker, wiki) or inject malicious URLs that would compromise other users visiting the repository. The vulnerability exists because these endpoints use weaker permission checks than the equivalent web interface, allowing attackers to escalate their effective privileges within a repository. Gogs 0.14.3 and later patch this issue.

• CVE-2026-53905HIGH 7.1

  A security vulnerability in MyComplianceOffice (MCO) allows authenticated users with basic privileges to access sensitive administrator permission structures they shouldn't be able to see. The vulnerability exists in a specific web endpoint that manages access control hierarchies. When exploited, it exposes internal security configuration details that could be leveraged by an attacker to understand the system's administrative structure and potentially plan further attacks. The issue was identified in version 25.3.3.1, though other versions may be affected as well.

• CVE-2026-54761HIGH 7.1

  Traefik, a widely-deployed reverse proxy and load balancer, contains a flaw in how it enforces access controls when Kubernetes HTTPRoutes specify multiple backend services. An attacker with the ability to create HTTP routes in a non-allowed namespace can exploit a namespace validation bypass to expose sensitive internal Traefik services—including the admin API, dashboard, and REST interface—to the network. The vulnerability stems from Traefik checking permissions against the wrong namespace when evaluating cross-provider service references, allowing an attacker to pivot through an allow-listed namespace to reach forbidden internal endpoints. This affects versions prior to 3.6.21 and 3.7.5.

• CVE-2026-9808HIGH 7.1

  Mautic 7's API has a flaw where user permission restrictions aren't being honored properly. Specifically, permissions designed to let users only see or edit their own resources (called 'owner-scope' restrictions) are being bypassed. An attacker with low-level API access can exploit this to view or modify other users' data, even though they shouldn't have that permission.

• CVE-2026-54321HIGH 7.0

  Daytona, a platform for running AI-generated code securely, had a caching bug that allowed certain sandboxes to remain publicly accessible even after their owners switched them to private. If an organization marked a preview sandbox as private, the system's cache did not update immediately, creating a window where unauthenticated users could still access the sandbox and potentially view or interact with code and data that should have been restricted. This gap has been closed in version 0.184.0.

• CVE-2026-53935MEDIUM 6.9

  Cilium, a widely-deployed networking and security platform for Kubernetes, contains a privilege-escalation vulnerability in how it enforces namespace boundaries. Users who have permission to create CiliumLocalRedirectPolicies can exploit this flaw to redirect traffic destined for Services in other namespaces by manipulating the addressMatcher field. In addition to traffic hijacking, deleting a malicious policy can leave Cilium's internal state corrupted, breaking legitimate service-to-service communication. The vulnerability affects multiple recent versions but has been patched.

• CVE-2026-55411MEDIUM 6.8

  ToolJet, an open-source platform for building internal tools and AI agents, contains a credential exposure vulnerability affecting versions prior to 3.20.1780-lts. An authenticated user can request decryption of data-source secrets belonging to any other organization by knowing or guessing a credential ID. The vulnerability exists because the decryption endpoint lacks proper access controls and organization-level scoping, allowing cross-tenant secret theft. Only users with a ToolJet account can exploit this, but the attacker's organization affiliation is irrelevant—any authenticated user gains access to any other tenant's secrets.

• CVE-2026-6739MEDIUM 6.7

  Mattermost Server has a privilege escalation flaw affecting multiple recent versions (11.6.1, 11.5.4, 10.11.15, and 10.11.16). Users with delegated user-management permissions can abuse the role patch API to modify built-in system roles without proper authorization checks, effectively gaining elevated system privileges they shouldn't possess. An authenticated attacker doesn't need admin status—just user-management delegation—to exploit this, making it a meaningful risk in environments with distributed role administration.

• CVE-2026-10860MEDIUM 6.5

  CVE-2026-10860 is a logic error in MISP's delete handler that allows authenticated users to bypass validation checks and delete records they shouldn't be able to. The flaw stems from a missing parenthesis in the conditional logic that evaluates HTTP DELETE requests, causing the validator to be skipped when a DELETE method is used. While an attacker must already be authenticated, they can exploit this to circumvent application-level protections and remove protected data.

• CVE-2026-32718MEDIUM 6.5

  Coolify, an open-source platform for managing servers, applications, and databases, contains an authorization flaw that allows read-only API tokens to perform state-changing operations. Specifically, an attacker with read-scoped credentials can validate cloud tokens and servers—operations that should require higher privileges. This circumvents the intended permission model and enables unauthorized modifications to infrastructure state. The vulnerability affects all versions prior to 4.0.0-beta.466.

• CVE-2026-35211MEDIUM 6.5

  OpenCTI, an open-source cyber threat intelligence platform, contains a vulnerability in its GraphQL API that allows authenticated users to inject computationally expensive script code. Any user with knowledge management permissions can craft malicious search queries that consume excessive CPU resources on the Elasticsearch backend, degrading performance for all users and potentially causing service unavailability. This is a denial-of-service vulnerability that requires valid credentials but no special privileges beyond standard KNOWLEDGE capability access.

• CVE-2026-35673MEDIUM 6.5

  OpenClaw versions before 2026.4.29 contain a Server-Side Request Forgery (SSRF) policy bypass that allows authenticated users to circumvent network security controls. The vulnerability exists in browser debug and export functionality, where attackers can reuse previously-blocked tabs to access or export content that should remain restricted by private-network SSRF policies. This is a policy evasion technique rather than a direct network breach—the attacker must already have authenticated access to these routes, but can then leverage that access to reach otherwise-protected resources.

• CVE-2026-42357MEDIUM 6.5

  Apache DolphinScheduler contains an authorization flaw that allows authenticated users to view workflow instance data from projects they should not have access to. An attacker with valid credentials could browse sensitive workflow information across project boundaries, exposing task execution details, logs, and operational data without proper permission checks. The vulnerability requires an existing user account but does not require elevated privileges, making it a significant information disclosure risk in multi-tenant or shared environments.

• CVE-2026-44735MEDIUM 6.5

  OpenProject, an open-source project management platform, contains a flaw in its share access API that leaks sensitive work package information to project members who shouldn't see it. When a user with basic project permissions requests share details through the API, the system fails to check whether that user can actually view each individual work package. This allows them to discover confidential work package titles, which team members have been granted access to shared items, and what permission level (Editor, Commenter, or Viewer) was assigned to each. The vulnerability affects versions before 17.3.2 and 17.4.0.

• CVE-2026-47238MEDIUM 6.5

  ClipBucket v5, an open-source video sharing platform, contains an authorization flaw that allows any authenticated user to modify, upload, or delete subtitles belonging to other users' videos. The vulnerability stems from missing permission checks when handling subtitle operations. An attacker with valid credentials—even a low-privilege account—can target subtitles from any video in the system, potentially corrupting content or denying legitimate users access to their own captions. The issue is fixed in version 5.5.3 - #133 and later.

• CVE-2026-48860MEDIUM 6.5

  A flaw in Erlang/OTP's TLS-based distribution module allows an attacker with a valid certificate to bypass IP-address-based access controls on Erlang cluster nodes. The vulnerability stems from a logic error where the code checks the local socket address instead of the remote peer's address when validating whether a connecting node is on the allowed subnet. An attacker holding any CA-signed TLS certificate can exploit this to gain unauthorized access to Erlang RPC and code-loading functions on affected nodes.

• CVE-2026-49376MEDIUM 6.5

  JetBrains TeamCity versions prior to 2026.1 contain a vulnerability in the SAML authentication plugin where usernames are not properly validated. This weakness allows an attacker to bypass normal username restrictions and potentially gain unauthorized access or manipulate user identity claims during the authentication process. The vulnerability requires network access but no special credentials or user interaction to exploit.

• CVE-2026-5149MEDIUM 6.5

  A flaw in the RTMKit WordPress plugin allows users with basic contributor-level access or higher to view form submissions that belong to other users. An attacker can exploit this by guessing or iterating submission IDs in an AJAX request that doesn't properly check permissions. This affects all versions up to 2.0.7 and exposes sensitive form data without additional barriers once an attacker gains even modest WordPress account privileges.

• CVE-2026-53577MEDIUM 6.5

  Kestra, an open-source workflow orchestration platform, has an access control flaw in its file preview feature that allows any logged-in user to read output files from executions they shouldn't have access to. The vulnerability bypasses protections designed to isolate work between different execution runs and namespaces within the same tenant. An attacker with valid credentials—even a low-privileged user—can request files from any other execution and retrieve sensitive data. Versions 1.0.45 and 1.3.21 patch this issue.

• CVE-2026-53808MEDIUM 6.5

  OpenClaw versions prior to 2026.5.6 contain a bypass in their Skill Workshop approval controls. An attacker can force workshop changes to be applied immediately—bypassing the system's built-in approval requirement—by directly calling an agent tool with apply: true. This means configuration modifications intended to require manager review can slip through without authorization. The vulnerability requires user interaction (clicking a link or opening a message) but no special privileges to trigger.

• CVE-2026-53854MEDIUM 6.5

  OpenClaw versions before 2026.4.25 have a privilege escalation flaw in how they handle authentication for internal and webchat commands. An authenticated attacker can exploit wildcard permission rules that incorrectly carry over between separate communication channels, allowing them to run commands with owner-level privileges in areas where they shouldn't have that access. This breaks the intended isolation between different parts of the system.

• CVE-2026-53902MEDIUM 6.5

  MCO (MyComplianceOffice) contains a flaw that allows authenticated users to bypass authorization controls and add themselves to groups they shouldn't access. An attacker with valid login credentials could escalate their privileges by joining arbitrary groups, potentially gaining unauthorized access to sensitive functions or data restricted to those groups. The vulnerability requires authentication and was confirmed in version 25.3.3.1, though other versions may be affected.

• CVE-2026-54324MEDIUM 6.5

  Daytona, an AI code execution platform, contained a cross-tenant authorization weakness in its notification system. Before version 0.185.0, any authenticated user could subscribe to real-time event channels belonging to other organizations and passively observe their notifications. An attacker with valid credentials could monitor sensitive operational events from competing or unrelated tenants without detection. The vulnerability does not allow data modification or service disruption, but it enables unauthorized information disclosure across organizational boundaries.

• CVE-2026-54518MEDIUM 6.5

  Jackson-databind, a widely-used Java library for converting JSON to objects, has a flaw where constructor parameters can be populated with JSON data even when access controls (views) should prevent it. Specifically, when a constructor parameter is marked both @JsonUnwrapped and @JsonView(AdminView.class), the library bypasses the view restriction during JSON deserialization, allowing an attacker to inject data into admin-only fields. This affects versions 2.21.0 through 2.21.3 and 3.1.3, and is patched in 2.21.4 and 3.1.4.

• CVE-2026-56220MEDIUM 6.5

  Capgo before version 12.128.2 has an authorization bypass flaw that lets read-only team members modify over-the-air (OTA) update manifests. An attacker with read-only access to an organization can inject malicious manifest entries pointing to attacker-controlled S3 buckets. When devices check for updates via the public, unauthenticated endpoint, they receive poisoned metadata directing them to download malicious assets instead of legitimate ones. This bridges the gap between limited org access and the ability to compromise device software delivery.

• CVE-2026-57951MEDIUM 6.5

  Mythic command and control framework versions before 3.4.0.60 suffer from a database access control flaw that allows authenticated users to read sensitive output from any operation on the server, regardless of their assigned permissions. The vulnerability stems from a misconfigured permission filter in the backend that treats an OR condition as always-true, effectively removing restrictions. Any user with valid credentials—including those with minimal spectator roles—can extract step output, names, and descriptions from the payload_build_step table across all operations.

• CVE-2026-58254MEDIUM 6.5

  NATS Server, a widely-used messaging platform for cloud and edge deployments, has a flaw in how it validates trace destination requests from leafnode connections. Leafnodes are a federation mechanism that allows separate NATS clusters to communicate. An attacker with leafnode operator privileges can bypass message trace restrictions that would normally block such operations on direct client connections. This allows them to send unauthorized trace events to protected subjects and potentially disrupt normal message delivery or persistence by exploiting trace-only behavior.

• CVE-2026-58494MEDIUM 6.5

  Wasmtime is a WebAssembly runtime that enables sandboxed execution of wasm code. A permission-checking flaw in wasmtime-wasi (the WASI interface layer) allows a guest WebAssembly program with only read-only access to a file to bypass safety controls and modify or overwrite files on the host system that are exposed as read-only through the WASI filesystem interface. The vulnerability affects versions before 24.0.11, 36.0.12, 45.0.3, and 46.0.1, and stems from insufficient permission validation during hard-link creation and file renaming operations.

• CVE-2026-53521MEDIUM 6.4

  Nezha Monitoring, a lightweight self-hosted server monitoring tool, contains a flaw in versions 2.0.14 through 2.0.x that allows attackers to hijack DDNS (Dynamic DNS) profile updates. An authenticated user can save references to nonexistent DDNS profiles on their server. Later, if another user creates a DDNS profile matching one of those IDs, the monitoring system will incorrectly use the new user's DDNS configuration to push updates to the attacker's infrastructure. This creates a cross-user context confusion where DDNS changes intended for one user leak into another user's server configuration. The issue is resolved in version 2.1.0.

• CVE-2026-56778MEDIUM 6.4

  n8n, a popular workflow automation platform, contains a flaw in its Public API that allows users with read-only access to workflows to trigger re-executions of those workflows. The vulnerability stems from an authorization check that uses the wrong permission scope—it verifies read access when it should verify execute access. This means an authenticated user who should only be able to view a shared workflow can actually run it again, circumventing the intended separation between viewing and executing. The issue affects n8n versions before 2.25.7 and 2.26.x before 2.26.2, particularly in multi-user or cross-project setups where workflows are shared.