Broken access control.

Fastcache by Host.it <= 1.7.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary .htaccess Page-Cache Block Modification via updateSettings() admin_action_update Hook

• hostspa Fastcache by Host.it
• Broken access control

Disabled Sunshine clients can bypass revocation with a derived client certificate

• LizardByte Sunshine
• Broken access control

Arcane: Environment access token bypasses the admin-required authorization gate on `/api/debug/pprof`

• Broken access control

<2.11.0 · fixed in 2.11.0

EA Javelin Anticheat Installer Local Privilege Escalation

• Electronic Arts EA Javelin Anticheat (EA Javelin Anticheat Installer)
• Broken access control

Frappe HR: Missing Authorization on PWA API Endpoints enables Cross-Employee Data access in HRMS

• frappe hrms
• Broken access control

ERPNext: Unauthorised access to financial data due to missing validation

• frappe erpnext
• Broken access control

ERPNext: Unauthorised status modification due to missing validation

• frappe erpnext
• Broken access control

Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination

• Broken access control
• CWE-281

<24.0.11 || >=25.0.0, <36.0.12 || >=37.0.0, <45.0.3 || >=46.0.0, <46.0.1 · fixed in 24.0.11, 36.0.12, 45.0.3, 46.0.1

Tandoor Recipes: Private recipe authorization bypass via /api/step/ - read and modify another Space member's private recipe content

• recipes
• Broken access control

Tandoor Recipes: Private recipe file and share-link authorization bypass in recipe utility API endpoints

• recipes
• Broken access control

IBM i is Affected By Improper Authorization and Access Control Vulnerabilities in Network File System

• i
• Broken access control

IBM i is Affected By Improper Authorization and Access Control Vulnerabilities in Network File System

• i
• Broken access control

IBM i is Affected by an Improper Validation Vulnerability

• i
• Broken access control

LingGuo-Drama through commit 8a6924a Broken Access Control via /admin/v1/admins API

• LingGuoAI LingGuo-Drama
• Broken access control

LingGuo-Drama through commit 8a6924a IDOR via /admin/v1/projects/:id API

• LingGuoAI LingGuo-Drama
• Broken access control

Open WES through 1.0.0 Broken Access Control via GlobalGatewayFilter Warehouse Scoping

• jingsewu open-wes
• Broken access control

Arkon through 0.9.2 Missing Authorization via Skills Versions API

• nduckmink arkon
• Broken access control

Arkon through 0.9.2 Broken Access Control via Sources By-ID Routes

• nduckmink arkon
• Broken access control

Arkon through 0.9.2 Missing Authorization via Wiki Graph Neighborhood API

• nduckmink arkon
• Broken access control

WhaTicket Community through commit cf04795 IDOR via /tickets/:ticketId and /messages/:ticketId

• canove whaticket-community
• Broken access control

99AI through 4.3.0 IDOR via /api/chatLog/querySingleChat Chat Message Disclosure

• vastxie 99AI
• Broken access control

Fuint through commit 57ec018 IDOR via bookId in myBookDetail

• fushengqian fuint
• Broken access control

yshop-crm through 2.1.3 IDOR via CRM customer by-id endpoints

• guchengwuyue yshop-crm
• Broken access control

ChatOllama through commit 96c3ce5 IDOR Exposes Private Knowledge Bases

• sugarforever chat-ollama
• Broken access control

HUIZHI ChargeOS cloud through 3.0.9 Unpaid Wallet Credit via /pay/xcxRecharge

• roinli HUIZHI-ChargeOS-cloud
• Broken access control

HUIZHI ChargeOS cloud through 3.0.9 IDOR via hcp-mp Member and Order APIs

• roinli HUIZHI-ChargeOS-cloud
• Broken access control

Shaiwz data-platform-open through commit efeacd3 IDOR in Datasource API

• shaiwz data-platform-open
• Broken access control

XBoot through 3.3.4 Authorization Bypass via getByDepartmentId Endpoint

• Exrick xboot
• Broken access control

Exrick XBoot through 3.3.4 Data-Scope Bypass via openDataFilter Parameter

• Exrick xboot
• Broken access control

Magistrala through 1.0.0 Cross-Tenant Authorization Bypass in Certs Service

• absmach magistrala
• Broken access control

Allegro Ralph through 20260902.1 Missing Authorization in Data Center Rack API

• allegro ralph
• Broken access control

EFAK 5.0.0 through 5.1.0 Missing Authorization via /api/model-config Exposes API Keys

• smartloli EFAK
• Broken access control

EFAK through 5.1.0 Privilege Escalation via /api/users REST API

• smartloli EFAK
• Broken access control

APIPark through 1.9.7-beta Cross-Team Authorization Bypass via Team Query Parameter

• APIPark
• Broken access control

Ekko Studio through 0.7.36 Missing Authorization via /api/auth/locked-ips

• EKKOLearnAI ekko-studio
• Broken access control

Faveo Helpdesk through 2.0.3 Broken Access Control via /ticket/tooltip Endpoint

• faveosuite faveo-helpdesk
• Broken access control

Tbed through 20240319 Missing Authorization via setImgFileName Endpoint

• Hello-hao Tbed
• Broken access control

Cube-studio through 2026.09.01 IDOR via Pipeline View and Copy Endpoints

• data-infra cube-studio
• Broken access control

Cube-studio through 2026.09.01 IDOR via Notebook and Serving Lifecycle Endpoints

• data-infra cube-studio
• Broken access control

ClickVisual through 1.1.2 Missing Authorization in apiv2 Report Module

• clickvisual
• Broken access control

AIHelms through 0.1.25 Missing Authorization in Efficiency Analytics API

• beizhu-1209 AIHelms
• Broken access control

REBUILD through 4.5.0 Missing Authorization via /project/comments/list Endpoint

• rebuild
• Broken access control

Steedos Platform through 3.0.15-beta.51 Cross-Tenant Information Disclosure via Reports API

• steedos-platform
• Broken access control

Piranha CMS through 12.2 Missing Authorization in Manager Language API

• PiranhaCMS Piranha CMS
• Broken access control

SiteServer SSCMS through 7.4.0 Cross-Site Authorization Bypass via Channels API

• SiteServer SSCMS
• Broken access control

BeikeShop through 2.0.0.31 IDOR via RMA mark_as_shipped Endpoint

• beikeshop
• Broken access control

ChatWiki through 2.9.6 Cross-Tenant IDOR via Form Filter Management Endpoints

• zhimaAi chatwiki
• Broken access control

ThinkAdmin think-plugs-admin through 1.0.81 IDOR via admin/file.edit

• zoujingli think-plugs-admin
• Broken access control

FastBee through 2.1.0 IDOR via /iot/group By-ID Endpoints

• kerwincui FastBee
• Broken access control

Engineercms through 2.0.5 Missing Authorization via AttachController.Attachment

• 3xxx engineercms
• Broken access control

Risesoft Digital-Infrastructure through 9.6.11 Cross-Tenant Data Exposure via DownloadController

• risesoft-y9 Digital-Infrastructure
• Broken access control

Rocboss paopao-ce through 0.6.0-alpha.3 IDOR via DownloadAttachment Endpoint

• rocboss paopao-ce
• Broken access control

BuildAdmin through 2.3.9 IDOR via routine/adminInfo/edit id Parameter

• build-admin buildadmin
• Broken access control

PickMall lilishop through 5.0.0 IDOR via /buyer/trade/receipt/{id}

• PickMall lilishop
• Broken access control

SurveyKing before 1.13.0 Unauthenticated File Download via /api/public/preview

• javahuang SurveyKing
• Broken access control

MrDoc through 1.1.1 Missing Authorization via api/import_local_doc/ Endpoint

• zmister2016 MrDoc
• Broken access control

DooTask through 1.9.66 Missing Authorization in OKR Comment Dialogs

• kuaifan dootask
• Broken access control

sshportal through 1.19.5 Missing Authorization in 'key show' Command Exposes Private Keys

• moul sshportal
• Broken access control

Aureus ERP through 1.6.0 Multi-Company Authorization Bypass via company_id

• aureuserp
• Broken access control

Distributor before 2.3.2 Missing Authorization in External Connection AJAX Actions

• 10up Distributor
• Broken access control