cve.bz

CWE-863: Incorrect Authorization, page 7

Filter

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

What the weakness is: CWE-863 at MITRE

Ask an AI about CWE-863

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-863: Incorrect Authorization and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/863.html and https://cve.bz/cve/cwe/863?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.5CVE-2026-88162EPSS 0.3%

    Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally.

  2. 5.5CVE-2026-84011EPSS 0.3%

    Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally.

  3. 7.8CVE-2026-83792EPSS 0.3%

    Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally.

  4. 4.2CVE-2026-83766EPSS 0.4%

    Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network.

  5. 5.5CVE-2026-83764EPSS 0.3%

    Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally.

  6. 8.8CVE-2026-77910EPSS 0.9%

    Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

  7. 8.8CVE-2026-70299EPSS 0.3%

    Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

  8. 5.5CVE-2026-70280EPSS 0.4%

    Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.

  9. 8.8CVE-2026-70246EPSS 0.9%

    Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  10. 8.1CVE-2026-70229EPSS 1.0%

    Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

  11. 5.5CVE-2026-70087EPSS 0.3%

    Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.

  12. 5.5CVE-2026-70083EPSS 0.3%

    Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally.

  13. 5.5CVE-2026-70057EPSS 0.3%

    Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.

  14. 5.5CVE-2026-69971EPSS 0.4%

    Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

  15. 5.3CVE-2026-69640EPSS 0.7%

    Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network.

  16. 9.2CVE-2026-110112EPSS 0.4%

    Dockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another tenant to gain admin access because OIDC iss, aud, nonce and exp claims are not validated. Attackers with admin rights in another tenant of…

  17. 8.8CVE-2026-105733EPSS 0.3%

    Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.

  18. 4.3CVE-2026-105720EPSS 0.5%

    Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  19. 6.5CVE-2026-102865EPSS 0.9%

    Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  20. 8.8CVE-2026-102862EPSS 0.8%

    Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  21. 7.0CVE-2026-102232EPSS 0.3%

    Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  22. 6.3CVE-2026-93294EPSS 0.3%

    A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity (unintended proxy). The impact is bounded by the Azur…

  23. 6.5CVE-2026-15577EPSS 0.3%

    A user or service account with read-only access to Git Sync (provisioning) connections can modify a connection's configuration through its status subresource (incorrect authorization). On Grafana 12.4 the affected API is only available whe…

  24. 9.9CVE-2026-77459EPSS 0.5%

    Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Argo CD creates PostDelete resource hooks without applying the AppProject destination and resource authorizat…

  25. 6.5CVE-2026-69226EPSS 0.2%

    A flaw in Portal for ArcGIS allows unauthenticated users to create new accounts through the sharing endpoint even when self-service account registration is disabled (disableSignup=true). An attacker can bypass the intended restriction by m…

  26. 5.5CVE-2026-109525EPSS 0.3%

    A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown part of the file changebookingstatus.php of the component submit2 Handler. Such manipul…

  27. 5.5CVE-2026-109524EPSS 0.3%

    A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this issue is some unknown functionality of the file Admin/showdoctor.php of the component Admin Di…

  28. 4.2CVE-2026-102832EPSS 0.1%

    JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.5.7 until 4.5.11 and 4.6.4, the markdownviewer:trust and notebook:trust command-link handlers use tracke…

  29. 4.3CVE-2026-103028EPSS 0.2%

    SFTPGo is an open source, event-driven file transfer solution. From 2.5.0 until 2.7.6, an authenticated user with copy permission can copy a source file denied by denied_patterns or outside allowed_patterns to an allowed destination name b…

  30. 4.3CVE-2026-77362EPSS 0.2%

    obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, bridge tools do not consistently apply the read access-control list (ACL) to every returned field. The tasks_filter tool exposes grou…

  31. 4.7CVE-2026-77361EPSS 0.1%

    obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, read access-control list (ACL) checks use a lexical vault-relative path while containment checks use the resolved path. An in-vault s…

  32. 8.6CVE-2026-74036EPSS 0.8%

    Wazuh from 4.3.0 before 4.14.8 contains a remote code execution vulnerability where SCA policy trust is determined by file path rather than configuration source. Attackers controlling a manager can write unsigned policy files to var/incomi…

  33. 8.6CVE-2026-74035EPSS 0.6%

    Wazuh versions from 4.6.0 before 4.14.8 contain an authentication bypass vulnerability where security.update_user places the reserved user guard and password policy inside a falsy truthiness check. A delegated user administrator can send a…

  34. 5.3CVE-2026-74032EPSS 0.3%

    Wazuh from 4.0.0 before 4.14.8 contains an authorization bypass vulnerability that allows low-privileged authenticated users to read the RBAC catalog by querying unprotected security endpoints. Attackers can request GET /security/actions a…

  35. 4.3CVE-2026-9268EPSS 0.2%

    GitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with limited permissions to mod…

  36. 4.2CVE-2026-92528EPSS 0.1%

    GitLab has remediated an issue in GitLab EE affecting all versions from 16.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to approve a merge request des…

  37. 5.3CVE-2026-85529EPSS 0.2%

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read internal notes and…

  38. 5.3CVE-2026-84284EPSS 0.2%

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 19.2.8, 19.3 before 19.3.6, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read work item content…

  39. 3.1CVE-2026-82632EPSS 0.2%

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with a fine-grained Personal…

  40. 7.7CVE-2026-81839EPSS 0.3%

    GitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to execute arbitrary CI/CD pipe…

  41. 4.2CVE-2026-78335EPSS 0.2%

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a project-scoped fin…

  42. 4.3CVE-2026-6567EPSS 0.2%

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.8 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with reporter role to access…

  43. 4.2CVE-2026-5954EPSS 0.2%

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to download package files from a public pro…

  44. 8.5CVE-2026-16301EPSS 0.3%

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Developer role to execu…

  45. 5.3CVE-2026-16275EPSS 0.3%

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.4 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read confidential notes…

  46. 4.3CVE-2026-14552EPSS 0.2%

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Guest access to read co…

  47. 2.7CVE-2026-103549EPSS 0.2%

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with maintainer-role permiss…

  48. 4.3CVE-2026-89124EPSS 0.2%

    Display Product Catalog Based on Customs Declaration application does not perform sufficient authorization checks within certain functionality, allowing an authenticated low-privileged user to access sensitive information beyond their inte…

  49. 2.3CVE-2026-109561EPSS 0.2%

    goose from 1.28.0 before 1.44.0 contains an authorization bypass vulnerability that allows tools to run without user approval in Manual Approval mode because persisted read-only annotations are never cleared by update_goose_mode. After a s…

  50. 7.7CVE-2026-109560EPSS 0.5%

    Continue CLI (@continuedev/cli) through 1.5.47 contains a permission bypass vulnerability that allows attackers to run unapproved commands by chaining them after allowed Bash prefix rules. Attackers can inject instructions into repository …