CWE-863: Incorrect Authorization, page 6

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

What the weakness is: CWE-863 at MITRE

1. 8.8CVE-2026-96540EPSS 0.3%2026-10-14

   An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a remote authenticated attacker to obtain sensitive information. This may allow t…

2. 6.3CVE-2026-110762EPSS 0.2%2026-10-14

   bbPress before 2.6.19 contains an information disclosure vulnerability that allows unauthenticated visitors to view restricted subforum posts because hide_sitewide ignores ancestor forum visibility. Topics and replies in public subforums n…

3. 8.6CVE-2026-102460EPSS 0.3%2026-10-14

   In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a scope bypass vulnerability exists in Eclipse Vert.x Web's ChainAuthHandler when used with scope-requiring authentication handlers such as JW…

4. 7.5CVE-2026-91157EPSS 0.5%2026-10-14

   Discourse is an open-source discussion platform. Prior to 2026.9.0, 2026.8.1, 2026.7.3, and 2026.1.9, sites with secure uploads enabled did not reconcile existing upload security metadata when a previously public category became read-restr…

5. 8.8CVE-2026-89072EPSS 0.2%2026-10-14

   Incorrect Authorization vulnerability in Progress MOVEit Transfer (Client Certificates module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.

6. 5.9CVE-2026-78433EPSS 0.4%2026-10-14

   Gitea's web attachment handler skips its cross-repository ownership check for attachments created before 16 January 2026 and checks permissions against the repository named in the request URL instead. An unauthenticated attacker who knows …

7. 8.1CVE-2026-73804EPSS 0.5%2026-10-14

   Gitea allows a token with write:user scope to register an attacker-controlled SSH public key on the token owner's account. API requests signed with the corresponding private key authenticate as that account through HTTP Signature without A…

8. 4.3CVE-2026-73126EPSS 0.3%2026-10-14

   Gitea's Actions workflow status badge endpoint does not enforce repository-read scope or the public-only restriction on the token authenticating the request. A token lacking read:repository, or restricted to public repositories, can retrie…

9. 8.8CVE-2026-71184EPSS 0.5%2026-10-14

   Gitea's pull request review notifier does not attach the pull request to the Actions notification, so the fork workflow approval gate does not recognize the run as originating from a fork. Review comment and review approval or rejection ev…

10. 6.5CVE-2026-70406EPSS 0.3%2026-10-14

    Gitea's shared comparison helper omits the token repository-access check used when updating pull requests. A public-only token with read:repository scope can route a comparison or pull request creation through a public base repository and …

11. 5.4CVE-2026-70400EPSS 0.4%2026-10-14

    Gitea's repository migration API accepts a public-only token when the request specifies creation of a private repository. A delegated token intended to operate only on public resources can create a private repository and migration task und…

12. 5.4CVE-2026-70396EPSS 0.4%2026-10-14

    Gitea's organization repository-creation API requires write:organization but omits the write:repository token scope enforced by other repository-creation routes. A personal access token or OAuth application token without repository-write s…

13. 4.3CVE-2026-66853EPSS 0.4%2026-10-14

    Gitea's user organization-list API includes Limited-visibility organizations for authenticated restricted accounts without applying the visibility restriction enforced by the single-organization endpoint. A restricted user can list a known…

14. 6.5CVE-2026-60010EPSS 0.5%2026-10-14

    Gitea's repository-side team-link API allows a repository administrator who is not an organization owner to attach organization teams to a repository despite RepoAdminChangeTeamAccess being disabled. The endpoint does not enforce the organ…

15. 7.0CVE-2026-110630EPSS 0.6%2026-10-14

    VentureDrake Laravel CRM before 2.4.0 contains an incorrect authorization vulnerability in user management that allows authenticated administrators to assign unrestricted roles via Role::find. Attackers with user-management access can assi…

16. 7.3CVE-2026-85298EPSS 0.4%2026-10-14

    An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Google Cloud Application Integration versions prior to 2026-08-27 allows an authenticated user to escalate privileges and impersonat…

17. 4.9CVE-2026-92426EPSS 0.3%2026-10-14

    The YITH WooCommerce Popup WordPress plugin before 1.60.0 does not check the capability of the requesting user before deleting post meta, allowing users with the Contributor role and above to delete arbitrary post meta from any post, inclu…

18. 5.3CVE-2026-106098EPSS 0.2%2026-10-14

    The WP Data Access WordPress plugin before 5.5.77 does not correctly check authorization on one of its application REST endpoints, verifying only read permission before performing a write, which allows unauthenticated attackers to modify …

19. 4.3CVE-2026-110453EPSS 0.1%2026-10-14

    Nix before 2.35.3, when unsandboxed on macOS or FreeBSD, incorrectly allows connections made by build users from daemon clients.

20. 4.3CVE-2026-110451EPSS 0.1%2026-10-14

    Nix before 2.35.3 and Lix before 2.95.4 on macOS allow a Seatbelt sandbox escape (for an unconfined build) because a certain size threshold is mishandled.

21. 8.7CVE-2026-92817EPSS 0.5%2026-10-14

    The Ignition Perspective module does not properly validate session privileges when determining Designer-level access. An authenticated user with access to a Vision project could provide their valid Vision session identifier and gain Design…

22. 9.6CVE-2026-110159EPSS 0.2%2026-10-13

    Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)

23. 8.6CVE-2026-110144EPSS 0.2%2026-10-13

    Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)

24. 9.1CVE-2026-95695EPSS 0.3%2026-10-13

    IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due to incorrect authorization.

25. 8.6CVE-2026-95639EPSS 0.2%2026-10-13

    Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitatio…

26. 9.6CVE-2026-75994EPSS 0.3%2026-10-13

    ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. The vulnerable com…

27. 8.4CVE-2026-71385EPSS 0.3%2026-10-13

    ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary cod…

28. 5.4CVE-2026-11713EPSS 0.2%2026-10-13

    IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by a privilege escalation vulnerability with the restConnector-2.0 feature enabled.

29. 3.5CVE-2026-108388EPSS 0.3%2026-10-13

    Indico is a feature-rich event management system. Indico 3.3.3 through 3.3.13 incorrectly uses the ambient web-session user instead of the user supplied to Contribution.can_manage when checking inherited event contribution-management permi…

30. 7.5CVE-2026-106623EPSS 0.4%2026-10-13

    ColdFusion is affected by an Incorrect Authorization vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue does not requ…

31. 9.6CVE-2026-106620EPSS 0.4%2026-10-13

    ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. …

32. 8.8CVE-2026-106618EPSS 0.1%2026-10-13

    ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Expl…

33. 8.8CVE-2026-106617EPSS 0.2%2026-10-13

    ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Expl…

34. 8.8CVE-2026-106615EPSS 0.2%2026-10-13

    ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Expl…

35. 7.8CVE-2026-106614EPSS 0.2%2026-10-13

    ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Expl…

36. 9.9CVE-2026-106612EPSS 0.5%2026-10-13

    ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Expl…

37. 8.8CVE-2026-106090EPSS 0.1%2026-10-13

    ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Expl…

38. 8.8CVE-2026-106089EPSS 0.2%2026-10-13

    ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Expl…

39. 7.7CVE-2026-105994EPSS 0.3%2026-10-13

    ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. …

40. 8.8CVE-2026-105901EPSS 0.2%2026-10-13

    ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Expl…

41. 8.2CVE-2026-105898EPSS 0.1%2026-10-13

    ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Expl…

42. 10.0CVE-2026-90532EPSS 0.8%2026-10-13

    Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or …

43. 9.9CVE-2026-75732EPSS 0.7%2026-10-13

    Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or …

44. 10.0CVE-2026-48383EPSS 1.0%2026-10-13

    Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or …

45. 10.0CVE-2026-48382EPSS 1.0%2026-10-13

    Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or …

46. 8.8CVE-2026-16753EPSS 0.5%2026-10-13

    Incorrect authorization in the library-query execution endpoint in Lowcoder version, up to and including 2.4.10, allows an authenticated administrator or developer in one organization to execute a library query belonging to another organiz…

47. 7.8CVE-2026-96918EPSS 0.3%2026-10-13

    Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.

48. 7.2CVE-2026-92910EPSS 0.4%2026-10-13

    Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write a…

49. 9.8CVE-2026-92909EPSS 0.8%2026-10-13

    Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation o…

50. 8.3CVE-2026-92908EPSS 0.6%2026-10-13

    Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and w…