# Broken access control.

Missing or wrong authorization checks, IDOR, loose permissions. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101795.md)
  `CVE-2026-101795` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 6.7 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101794.md)
  `CVE-2026-101794` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Communications BRM - Elastic Charging Engine](https://agentprime.io/advisories/CVE-2026-101793.md)
  `CVE-2026-101793` · CVE record: Oracle Corporation Oracle Communications BRM - Elastic Charging Engine · CVSS 5.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Communications BRM - Elastic Charging Engine](https://agentprime.io/advisories/CVE-2026-101792.md)
  `CVE-2026-101792` · CVE record: Oracle Corporation Oracle Communications BRM - Elastic Charging Engine · CVSS 5.9 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Communications BRM - Elastic Charging Engine](https://agentprime.io/advisories/CVE-2026-101791.md)
  `CVE-2026-101791` · CVE record: Oracle Corporation Oracle Communications BRM - Elastic Charging Engine · CVSS 8.1 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Communications BRM - Elastic Charging Engine](https://agentprime.io/advisories/CVE-2026-101790.md)
  `CVE-2026-101790` · CVE record: Oracle Corporation Oracle Communications BRM - Elastic Charging Engine · CVSS 3.3 Low · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101789.md)
  `CVE-2026-101789` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101788.md)
  `CVE-2026-101788` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101787.md)
  `CVE-2026-101787` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101786.md)
  `CVE-2026-101786` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 7.2 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101785.md)
  `CVE-2026-101785` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 8.3 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101784.md)
  `CVE-2026-101784` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Router](https://agentprime.io/advisories/CVE-2026-101783.md)
  `CVE-2026-101783` · CVE record: Oracle Corporation MySQL Router · CVSS 7.4 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Applications Manager](https://agentprime.io/advisories/CVE-2026-101782.md)
  `CVE-2026-101782` · CVE record: Oracle Corporation Oracle Applications Manager · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101781.md)
  `CVE-2026-101781` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101780.md)
  `CVE-2026-101780` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101779.md)
  `CVE-2026-101779` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 2.7 Low · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101778.md)
  `CVE-2026-101778` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101777.md)
  `CVE-2026-101777` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101776.md)
  `CVE-2026-101776` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101775.md)
  `CVE-2026-101775` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 7.4 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101774.md)
  `CVE-2026-101774` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101773.md)
  `CVE-2026-101773` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 7.1 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101772.md)
  `CVE-2026-101772` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 8.1 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101771.md)
  `CVE-2026-101771` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 8.1 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101770.md)
  `CVE-2026-101770` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 8.1 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Cluster](https://agentprime.io/advisories/CVE-2026-101769.md)
  `CVE-2026-101769` · CVE record: Oracle Corporation MySQL Cluster · CVSS 7.0 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Connectors](https://agentprime.io/advisories/CVE-2026-101768.md)
  `CVE-2026-101768` · CVE record: Oracle Corporation MySQL Connectors · CVSS 8.1 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101766.md)
  `CVE-2026-101766` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 4.4 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Communications Billing and Revenue Management](https://agentprime.io/advisories/CVE-2026-101764.md)
  `CVE-2026-101764` · CVE record: Oracle Corporation Oracle Communications Billing and Revenue Management · CVSS 5.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101762.md)
  `CVE-2026-101762` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101761.md)
  `CVE-2026-101761` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101760.md)
  `CVE-2026-101760` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Communications Billing and Revenue Management](https://agentprime.io/advisories/CVE-2026-101759.md)
  `CVE-2026-101759` · CVE record: Oracle Corporation Oracle Communications Billing and Revenue Management · CVSS 7.5 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Communications Billing and Revenue Management](https://agentprime.io/advisories/CVE-2026-101758.md)
  `CVE-2026-101758` · CVE record: Oracle Corporation Oracle Communications Billing and Revenue Management · CVSS 8.2 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Application Object Library](https://agentprime.io/advisories/CVE-2026-101757.md)
  `CVE-2026-101757` · CVE record: Oracle Corporation Oracle Application Object Library · CVSS 7.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101756.md)
  `CVE-2026-101756` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101755.md)
  `CVE-2026-101755` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101754.md)
  `CVE-2026-101754` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 4.4 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101753.md)
  `CVE-2026-101753` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 4.4 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101752.md)
  `CVE-2026-101752` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 4.4 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101751.md)
  `CVE-2026-101751` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101750.md)
  `CVE-2026-101750` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101749.md)
  `CVE-2026-101749` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101748.md)
  `CVE-2026-101748` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101747.md)
  `CVE-2026-101747` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Agile Engineering Data Management](https://agentprime.io/advisories/CVE-2026-101746.md)
  `CVE-2026-101746` · CVE record: Oracle Corporation Oracle Agile Engineering Data Management · CVSS 7.3 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Agile Engineering Data Management](https://agentprime.io/advisories/CVE-2026-101745.md)
  `CVE-2026-101745` · CVE record: Oracle Corporation Oracle Agile Engineering Data Management · CVSS 5.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Agile Engineering Data Management](https://agentprime.io/advisories/CVE-2026-101744.md)
  `CVE-2026-101744` · CVE record: Oracle Corporation Oracle Agile Engineering Data Management · CVSS 8.4 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101743.md)
  `CVE-2026-101743` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Applications Manager](https://agentprime.io/advisories/CVE-2026-101742.md)
  `CVE-2026-101742` · CVE record: Oracle Corporation Oracle Applications Manager · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Agile Engineering Data Management](https://agentprime.io/advisories/CVE-2026-101741.md)
  `CVE-2026-101741` · CVE record: Oracle Corporation Oracle Agile Engineering Data Management · CVSS 5.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Agile Engineering Data Management](https://agentprime.io/advisories/CVE-2026-101740.md)
  `CVE-2026-101740` · CVE record: Oracle Corporation Oracle Agile Engineering Data Management · CVSS 3.6 Low · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Agile Engineering Data Management](https://agentprime.io/advisories/CVE-2026-101739.md)
  `CVE-2026-101739` · CVE record: Oracle Corporation Oracle Agile Engineering Data Management · CVSS 7.0 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Agile Engineering Data Management](https://agentprime.io/advisories/CVE-2026-101738.md)
  `CVE-2026-101738` · CVE record: Oracle Corporation Oracle Agile Engineering Data Management · CVSS 3.1 Low · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Java SE](https://agentprime.io/advisories/CVE-2026-101737.md)
  `CVE-2026-101737` · CVE record: Oracle Corporation Oracle Java SE · CVSS 5.9 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Primavera Unifier](https://agentprime.io/advisories/CVE-2026-101736.md)
  `CVE-2026-101736` · CVE record: Oracle Corporation Primavera Unifier · CVSS 7.4 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Primavera Unifier](https://agentprime.io/advisories/CVE-2026-101735.md)
  `CVE-2026-101735` · CVE record: Oracle Corporation Primavera Unifier · CVSS 7.1 High · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation Oracle Agile Engineering Data Management](https://agentprime.io/advisories/CVE-2026-101734.md)
  `CVE-2026-101734` · CVE record: Oracle Corporation Oracle Agile Engineering Data Management · CVSS 4.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control
- [Improper access control in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-101733.md)
  `CVE-2026-101733` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control

Newest: <https://agentprime.io/advisories/tag/access-control.md>
Older: <https://agentprime.io/advisories/tag/access-control.md?cursor=WyIyMDI2LTEwLTIwVDIxOjIyOjM1LjA1NzAwMFoiLCJDVkUtMjAyNi0xMDE3MzMiXQ>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=access-control&cursor=WyIyMDI2LTEwLTIwVDIxOjIyOjU5LjQxMjAwMFoiLCJDVkUtMjAyNi0xMDE3OTYiXQ>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/access-control/?cursor=WyIyMDI2LTEwLTIwVDIxOjIyOjU5LjQxMjAwMFoiLCJDVkUtMjAyNi0xMDE3OTYiXQ>. Everything for agents: <https://agentprime.io/llms.txt>.