cve.bz

OWASP A01:2025 Broken Access Control vulnerabilities, newest first, page 108

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A01:2025 at MITRE.

Its weaknesses: 40

CWE-22, CWE-23, CWE-36, CWE-59, CWE-61, CWE-65, CWE-200, CWE-201, CWE-219, CWE-276, CWE-281, CWE-282, CWE-283, CWE-284, CWE-285, CWE-352, CWE-359, CWE-377, CWE-379, CWE-402, CWE-424, CWE-425, CWE-441, CWE-497, CWE-538, CWE-540, CWE-548, CWE-552, CWE-566, CWE-601, CWE-615, CWE-639, CWE-668, CWE-732, CWE-749, CWE-862, CWE-863, CWE-918, CWE-922, CWE-1275

  1. 4.4CVE-2026-17053EPSS 0.09%

    The SMBus driver API exposed smbus_smbalert_remove_cb() and smbus_host_notify_remove_cb() as Zephyr syscalls. Their verifiers in drivers/smbus/smbus_handlers.c validated only the dev argument with K_SYSCALL_OBJ(dev, K_OBJ_DRIVER_SMBUS) and…

  2. 8.3CVE-2026-101322EPSS 0.3%

    In Eclipse BaSyx AAS Web UI versions v2-241220 through releases before v2-260924, the shared request handler attached the selected infrastructure's `Authorization` header to outgoing requests without checking the destination origin. In dep…

  3. 7.6CVE-2026-97297EPSS 0.3%

    Subscriber Broken Access Control in Gratisfaction <= 4.6.3 versions.

  4. 6.3CVE-2026-97281EPSS 0.2%

    Subscriber Broken Access Control in WP Project Manager <= 4.0.7 versions.

  5. 6.5CVE-2026-97280EPSS 0.2%

    Missing Authorization vulnerability in Mamunur Rashid Review Schema review-schema allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Review Schema: 3.1.0.

  6. 7.6CVE-2026-97277EPSS 0.3%

    Subscriber Broken Access Control in Social Boost <= 3.6.2 versions.

  7. 6.5CVE-2026-97269EPSS 0.2%

    Unauthenticated Insecure Direct Object References (IDOR) in WPFunnels <= 3.13.1 versions.

  8. 6.5CVE-2026-97258EPSS 0.3%

    Subscriber Broken Access Control in Aruba Migration Tool <= 1.0.4 versions.

  9. 6.5CVE-2026-97251EPSS 0.2%

    Unauthenticated Insecure Direct Object References (IDOR) in Bus Ticket Booking with Seat Reservation <= 5.9.3 versions.

  10. 8.6CVE-2026-95588EPSS 0.3%

    Unauthenticated Arbitrary File Deletion in AcyMailing SMTP Newsletter <= 11.0.5 versions.

  11. 7.9CVE-2026-79899EPSS 0.07%

    Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting a restrictive umask. A local user on the BoKS Master who can read files under BO…

  12. 5.3CVE-2026-67106EPSS 0.2%

    HCL BigFix Service Management is affected by an Information Disclosure vulnerability because two exposed API endpoints return sensitive data. This information could enable an attacker to launch further, more serious attacks.

  13. 5.3CVE-2026-67104EPSS 0.2%

    HCL BigFix Service Management is affected by an Information Disclosure vulnerability, which could allow an unauthenticated attacker to analyze publicly accessible JavaScript files, enabling the discovery of hidden administrative API endpoi…

  14. 7.5CVE-2026-62073EPSS 0.2%

    Unauthenticated Broken Access Control in WP Full Stripe Free <= 8.5.6 versions.

  15. 7.5CVE-2026-100517EPSS 0.3%

    Authorization Bypass Through User-Controlled Key vulnerability in VillaTheme Photo Reviews for WooCommerce woo-photo-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Reviews for WooCo…

  16. 7.5CVE-2026-100514EPSS 0.3%

    Unauthenticated Insecure Direct Object References (IDOR) in REST API Log <= 1.7.2 versions.

  17. 8.7CVE-2024-58388EPSS 0.8%

    Sharp (and Toshiba Tec rebranded) multifunction printers contain an unauthenticated local file inclusion vulnerability that allows remote attackers to read arbitrary files by manipulating the path parameter in the installed_emanual_down.ht…

  18. 5.4CVE-2026-62063EPSS 0.2%

    Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.1.

  19. 5.3CVE-2026-62061EPSS 0.2%

    Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfileGrid…

  20. 5.3CVE-2026-62058EPSS 0.2%

    Insertion of Sensitive Information Into Sent Data vulnerability in WPExperts CF7 Apps contact-form-7-honeypot allows Retrieve Embedded Sensitive Data.This issue affects CF7 Apps: from n/a through 3.7.2.

  21. 5.3CVE-2026-103345EPSS 0.2%

    Insertion of Sensitive Information Into Sent Data vulnerability in Shamim Rajani Pie Register pie-register allows Retrieve Embedded Sensitive Data.This issue affects Pie Register: from n/a through 3.8.4.13.

  22. 5.3CVE-2026-103341EPSS 0.2%

    Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issu…

  23. 5.3CVE-2026-103340EPSS 0.2%

    Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Reviews: from n/a through 8.3.2.

  24. 8.0CVE-2026-103067EPSS 0.1%

    Cross-Site Request Forgery (CSRF) vulnerability in Memberful Memberful - Membership Plugin memberful-wp allows Cross Site Request Forgery.This issue affects Memberful - Membership Plugin: from n/a through 1.81.0.

  25. 5.3CVE-2026-102390EPSS 0.2%

    Missing Authorization vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AFFI – Affiliate Marke…

  26. 4.3CVE-2026-102382EPSS 0.2%

    Authorization Bypass Through User-Controlled Key vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic Support: from n/a through 1.2.0.

  27. 5.3CVE-2026-102381EPSS 0.2%

    Missing Authorization vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic Support: from n/a through 1.2.0.

  28. 2.1CVE-2026-94220EPSS 0.2%

    Cross-Site request forgery (CSRF) vulnerability in feishu-auth and dingtalk-auth plugins in Apache APISIX. An attacker who can get a user to click a crafted link may cause that user's browser session on a protected route to be establish…

  29. 5.3CVE-2026-103858EPSS 0.2%

    MISP contains an incomplete authorization check in the discussion posting functionality. When a user submits a post to a thread or replies to an existing post, the application only verified whether the target thread was restricted to a sin…

  30. 5.9CVE-2026-103754EPSS 0.3%

    A flaw was found in ansible-runner. The unstream_dir() function, which receives and extracts a streamed zip archive on the worker side of the ansible-runner transmit/worker protocol, re-creates symbolic links from archive content without v…

  31. 5.3CVE-2026-103336EPSS 0.2%

    Insertion of Sensitive Information Into Sent Data vulnerability in Smackcoders Inc. WP Ultimate CSV Importer wp-ultimate-csv-importer allows Retrieve Embedded Sensitive Data.This issue affects WP Ultimate CSV Importer: from n/a through 9.1.

  32. 8.6CVE-2026-103758EPSS 0.2%

    Obot 0.21.1 through 0.24.1 contains an authorization bypass vulnerability that allows authenticated users to reach MCP servers because the checkUI deny list omits the /mcp-connect-composite/ route. Basic-role users with a composite MCP ID …

  33. 8.3CVE-2026-103757EPSS 0.3%

    Budibase through 3.41.0 contains a server-side request forgery vulnerability in AI table generation because the uploadUrl function in packages/server/src/utilities/fileUtils.ts uses raw node-fetch instead of fetchWithBlacklist. Authenticat…

  34. 5.3CVE-2026-103291EPSS 0.1%

    Ghost versions from 3.20.2 before 6.51.0 contain a server-side request forgery vulnerability in image dimension refetching that allows authenticated staff users to trigger outbound HTTP requests to arbitrary URLs. Attackers can point image…

  35. 7.1CVE-2026-103288EPSS 0.2%

    Ghost, an open-source publishing platform, contains an input validation flaw in its comment like feature in versions from 5.9.0 before 6.44.1. An authenticated member can delete comment likes or dislikes belonging to other users that they …

  36. 5.1CVE-2026-103287EPSS 0.2%

    Ghost versions 1.18.0 before 6.27.0 contain a server-side request forgery vulnerability in the webhooks feature that allows staff users to probe internal hosts. Attackers with staff privileges can craft webhook requests to access internal …

  37. 5.3CVE-2026-103285EPSS 0.1%

    Ghost versions from 5.19.0 before 6.57.1 contain a cross-site request forgery vulnerability in the post feedback functionality that allows attackers to submit feedback on behalf of logged-in users. Attackers can craft a malicious link to t…

  38. 5.3CVE-2026-103284EPSS 0.2%

    Ghost versions from 5.125.1 before 6.57.1 contain an information disclosure vulnerability in the Admin Feedback endpoint that allows unauthorized staff users to access member data. Attackers with staff privileges can query the feedback end…

  39. 5.3CVE-2026-103281EPSS 0.2%

    Ghost (npm package 'ghost') versions from 3.23.0 up to, but not including, 6.23.0 expose API keys to users with low-privilege staff accounts. An authenticated low-privilege staff user can read API keys returned by the Admin API, which are …

  40. 6.9CVE-2026-103280EPSS 0.2%

    Ghost from version 0.8.0 before 6.23.0 contains an information disclosure vulnerability in its setup endpoint: the endpoint responds to unauthenticated requests with the site owner's email address, allowing any remote visitor to obtain it.

  41. 8.5CVE-2026-103278EPSS 0.3%

    Ghost versions 5.8.0 before 6.34.0 contain an input validation vulnerability in the admin iframe that allows attackers to take over staff user accounts. Attackers with content publishing privileges can craft malicious pages that, when visi…

  42. 6.9CVE-2026-103274EPSS 0.2%

    Ghost versions 5.3.0 before 6.58.0 fail to properly enforce access controls on comments in private mode. Unauthenticated visitors can read comments that should be restricted, bypassing privacy settings.

  43. 5.3CVE-2026-103273EPSS 0.3%

    Ghost versions 4.3.0 before 6.58.0 contain an authentication bypass vulnerability where lower-privilege staff users can use staff tokens to bypass post editing restrictions. Attackers with staff credentials can leverage tokens to edit post…

  44. 8.7CVE-2026-103271EPSS 0.4%

    Ghost versions from 4.0.0 before 6.63.0 contain a content API vulnerability that allows unauthenticated visitors to access gated post content. Attackers can bypass content restrictions by directly querying the content API to retrieve restr…

  45. 6.9CVE-2026-103269EPSS 0.2%

    Ghost versions 5.3.0 before 6.62.0 contain a missing authorization vulnerability that allows an authenticated site member to read the excerpts of posts they do not have access to (gated content).

  46. 8.7CVE-2026-103268EPSS 0.3%

    Ghost versions before 6.62.0 contain an authentication bypass vulnerability that allows suspended staff users to reactivate their accounts through self-service password reset. Attackers with suspended staff credentials can perform password…

  47. 7.1CVE-2026-103266EPSS 0.3%

    Ghost versions 5.2.0 through versions prior to 6.62.0 allow a remote attacker, without authentication, to abuse the Stripe Checkout flow to attach a paid subscription to an existing member, modify that member's name, and inject content int…

  48. 5.3CVE-2026-103265EPSS 0.2%

    Fleet versions before 4.89.0 fail to properly filter MDM command results by team authorization in the commands/results endpoint. Team-scoped users can read MDM command results for hosts on other teams when a shared command UUID targets hos…

  49. 8.2CVE-2026-103263EPSS 0.5%

    Tornado before 6.5.9 contains a path traversal vulnerability in StaticFileHandler that follows symbolic links inside the static root without confirming the resolved target stays within it. When a symlink pointing outside the static directo…

  50. 6.3CVE-2026-103260EPSS 0.3%

    n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain an approval bypass vulnerability in the Send and Wait node's Approve Within Chat mode. Attackers can submit resume requests without verification of the requester's identity or app…