cve.bz

OWASP A01:2025 Broken Access Control vulnerabilities, newest first, page 76

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A01:2025 at MITRE.

Its weaknesses: 40

CWE-22, CWE-23, CWE-36, CWE-59, CWE-61, CWE-65, CWE-200, CWE-201, CWE-219, CWE-276, CWE-281, CWE-282, CWE-283, CWE-284, CWE-285, CWE-352, CWE-359, CWE-377, CWE-379, CWE-402, CWE-424, CWE-425, CWE-441, CWE-497, CWE-538, CWE-540, CWE-548, CWE-552, CWE-566, CWE-601, CWE-615, CWE-639, CWE-668, CWE-732, CWE-749, CWE-862, CWE-863, CWE-918, CWE-922, CWE-1275

  1. 7.2CVE-2026-110211EPSS 0.4%

    iFlytek SkillHub through 0.2.22 contains a missing authorization vulnerability that allows any authenticated user to permanently delete other users' skills via DELETE /api/cli/v1/skills/{namespace}/{slug}. Attackers can locate targets thro…

  2. 6.0CVE-2026-110210EPSS 0.5%

    Phase Console through 2.77.3 contains a missing authorization vulnerability that allows organisation members without Secrets read permission to read secret history via the secretHistory GraphQL query. Attackers holding an environment key c…

  3. 7.1CVE-2026-110209EPSS 0.5%

    Stonewuu ai-fusion-video through 1.2.0 contains a missing authorization vulnerability that allows authenticated non-admin users to read stored secrets through unprotected ApiConfigController and SystemConfigController endpoints. Attackers …

  4. 7.1CVE-2026-110208EPSS 0.4%

    Wukong AICRM through 20260610 contains a missing authorization vulnerability in the /systemConfig controller that allows any authenticated user to read the stored AI provider API key. Attackers can request GET /systemConfig/byType/ai for t…

  5. 8.7CVE-2026-110207EPSS 0.4%

    Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows any authenticated user to call user, role, department and agent administration APIs because no administrator check exists. Attackers can send POST req…

  6. 9.2CVE-2026-110112EPSS 0.4%

    Dockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another tenant to gain admin access because OIDC iss, aud, nonce and exp claims are not validated. Attackers with admin rights in another tenant of…

  7. 5.5CVE-2026-108462EPSS 0.9%

    Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.

  8. 7.0CVE-2026-108135EPSS 0.3%

    Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

  9. 8.8CVE-2026-105733EPSS 0.3%

    Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.

  10. 8.8CVE-2026-105727EPSS 1.0%

    Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.

  11. 4.3CVE-2026-105720EPSS 0.5%

    Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  12. 5.7CVE-2026-105713EPSS 0.4%

    Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.

  13. 7.5CVE-2026-105009EPSS 0.3%

    Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

  14. 7.1CVE-2026-104875EPSS 0.4%

    Ente provides end-to-end encrypted cloud services and security tools. Prior to server image 2026.07.09, the POST /emergency-contacts/approve-recovery endpoint authorized approval using a client-supplied userID and updated an emergency reco…

  15. 8.7CVE-2026-104817EPSS 0.5%

    Misskey is an open source, federated social media platform. From 12.112.1 until 2026.7.0, the unauthenticated fetch-rss API lacks rate limiting and response-size restrictions and performs synchronous XML parsing. An attacker can trigger un…

  16. 6.5CVE-2026-103576EPSS 0.9%

    Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

  17. 5.5CVE-2026-103560EPSS 0.3%

    Improper authorization in DNS Server allows an authorized attacker to perform tampering locally.

  18. 6.5CVE-2026-102865EPSS 0.9%

    Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  19. 8.8CVE-2026-102862EPSS 0.8%

    Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  20. 8.8CVE-2026-102861EPSS 0.8%

    Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  21. 8.8CVE-2026-102860EPSS 0.8%

    Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  22. 7.8CVE-2026-102233EPSS 0.4%

    Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  23. 7.0CVE-2026-102232EPSS 0.3%

    Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  24. 6.8CVE-2026-102229EPSS 1.1%

    Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to disclose information over a network.

  25. 8.8CVE-2026-102226EPSS 1.0%

    Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.

  26. 8.8CVE-2026-102217EPSS 1.3%

    Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network.

  27. 7.8CVE-2026-102204EPSS 0.4%

    Improper link resolution before file access ('link following') in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

  28. 7.8CVE-2026-102202EPSS 0.4%

    Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

  29. 7.8CVE-2026-100217EPSS 0.3%

    Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.

  30. 6.3CVE-2026-93294EPSS 0.3%

    A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity (unintended proxy). The impact is bounded by the Azur…

  31. 9.1CVE-2026-52394EPSS 0.4%

    DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input.

  32. 6.5CVE-2026-15577EPSS 0.3%

    A user or service account with read-only access to Git Sync (provisioning) connections can modify a connection's configuration through its status subresource (incorrect authorization). On Grafana 12.4 the affected API is only available whe…

  33. 3.8CVE-2026-106176EPSS 0.2%

    A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests

  34. 9.8CVE-2026-106173EPSS 1.0%

    A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets.

  35. 8.8CVE-2026-85990EPSS 0.4%

    Leantime is an open source project management system. Prior to 3.10.0, for the provisionally grouped account-creation and plugin-management surfaces, Leantime's JSON-RPC dispatcher in app/Domain/Api/Controllers/Jsonrpc.php exposes public A…

  36. 5.3CVE-2026-85733EPSS 0.2%

    FrankenPHP is a modern application server for PHP. Prior to 1.12.5, the official FrankenPHP Debian and Alpine Docker images include a default /app/public/index.php that executes phpinfo(). A derived image that does not overwrite this place…

  37. 9.8CVE-2026-78799EPSS 1.3%

    Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000 Enterprise-grade Wi-Fi 6 wireless router Enterprise Edition: <= iKuai8_3.7.23_Enterprise Build 202606021825 - Free Edition: <= iKuai 8_4.0.30…

  38. 9.9CVE-2026-77459EPSS 0.5%

    Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Argo CD creates PostDelete resource hooks without applying the AppProject destination and resource authorizat…

  39. 6.5CVE-2026-69226EPSS 0.2%

    A flaw in Portal for ArcGIS allows unauthenticated users to create new accounts through the sharing endpoint even when self-service account registration is disabled (disableSignup=true). An attacker can bypass the intended restriction by m…

  40. 5.1CVE-2026-66057EPSS 0.4%

    Frappe is a full-stack web application framework. Prior to 15.116.0 and 16.29.0, the OAuth login flow uses an unsanitized client-controlled state parameter to select post-authentication navigation, allowing a crafted state value to redirec…

  41. 7.7CVE-2026-54641EPSS 0.3%

    OpenRemote is an open-source internet-of-things platform. Prior to 1.24.2, the get, getUserClientRoles, and getUserRealmRoles methods in manager/src/main/java/org/openremote/manager/security/UserResourceImpl.java authorize callers with the…

  42. 8.5CVE-2026-53562EPSS 0.2%

    Improper link resolution before file access ('link following') vulnerability in Citrix UniconOS. This issue affects UniconOS: before 2607 CR and before 2603 LTSR CU2.

  43. 6.9CVE-2026-110131EPSS 0.3%

    ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article and /api/article/{id} endpoints that allows unauthenticated attackers to read unpublished draft and soft-deleted articles. Attackers can requ…

  44. 7.1CVE-2026-110129EPSS 0.4%

    fuintCatering through commit 122c9e6 contains an insecure direct object reference vulnerability in the ClientRefundController refund detail endpoint that lets authenticated members read other members' refund records. Attackers can register…

  45. 5.3CVE-2026-110127EPSS 0.2%

    waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in the mobile CartController that allows authenticated members to modify or delete other members' cart items. Attackers can enumerate sequential cart id…

  46. 5.3CVE-2026-110126EPSS 0.3%

    waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in AddressController that allows authenticated members to modify or delete other members' shipping addresses. Attackers can enumerate auto-increment add…

  47. 5.3CVE-2026-110125EPSS 0.3%

    Waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability that allows authenticated members to access and modify other members' orders by supplying their order identifiers. Attackers can enumerate sequential or…

  48. 8.6CVE-2026-110124EPSS 0.4%

    FastBee through 2.1.0 contains an insecure direct object reference vulnerability in DeviceController that allows authenticated low-privilege users to read and modify other tenants' devices by supplying sequential device IDs. Self-registere…

  49. 7.1CVE-2026-110123EPSS 0.3%

    Makunet maku-boot 4.3.0 through 5.0.0 contains a missing authorization vulnerability that allows authenticated users to read mail and SMS configurations by calling /sys/mail/config/list and /sys/sms/config/list without the required authori…

  50. 5.3CVE-2026-110122EPSS 0.2%

    PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that allows authenticated sellers to change other stores' product freight templates via PUT /store/goods/goods/freight. GoodsServiceImpl.freight and G…