Broken access control.

FOG: Authenticated low-privileged API user can modify Storage Nodes and reach root command execution

• fogproject
• Command injection
• Broken access control

YosemiteCrew: Missing organization authorization on service and PMS library/template routes

• YosemiteCrew Yosemite-Crew
• Broken access control

Xibo: IDOR (Broken Object-Level Authorization) on GET /layout/status/{id} Allows Arbitrary Layout Metadata Disclosure

• xibosignage xibo-cms
• Broken access control

Xibo: Missing Authorization on POST /displaygroup/criteria/{displayGroupId} Allows Arbitrary Scheduling Criteria Injection to Player Devices

• xibosignage xibo-cms
• Broken access control

GFI KerioConnect KOFF < 10.0.9p2 Privilege Escalation

• GFI USA, LLC GFI KerioConnect
• Broken access control

Xibo: Missing Object-Level Authorization on /notification/export/{id} Allows Authenticated Users to Download Arbitrary Attachments

• xibosignage xibo-cms
• Broken access control

Xibo: IDOR (Broken Object-Level Authorization) on GET /dataset/export/csv/{id} Allows Arbitrary Dataset Export

• xibosignage xibo-cms
• Broken access control

Xibo: IDOR (Broken Object-Level Authorization) on PUT/DELETE /action/{id} Allows Arbitrary Layout Action Modification and Deletion

• xibosignage xibo-cms
• Broken access control

NORA missing cross-user token-management authorization

• nora
• Broken access control

WordPress Optima Express + MarketBoost IDX Plugin plugin <= 8.7.8 - Broken Access Control vulnerability

• iHomefinder, Inc. Optima Express
• Broken access control

WordPress Redux Framework plugin <= 4.5.16 - Broken Access Control vulnerability

• David Anderson Redux Framework
• Broken access control

HCL BigFix AEX is affected by multiple security vulnerabilities.

• HCL Software BigFix AEX
• Cross-site scripting (XSS)
• Broken access control

WordPress My auctions allegro plugin <= 4.0.3 - Broken Access Control vulnerability

• wphocus My auctions allegro
• Broken access control

Essential Addons for Elementor 6.7.3 - 6.8.6 - Unauthenticated Registration Approval Bypass via OTP Verification

• Essential Addons for Elementor
• Broken access control

Missing authorization in Dell PowerProtect Data Domain Management Center

• Dell PowerProtect Data Domain Management Center
• Broken access control

Giftcard enumeration

• pretix
• Broken access control

Missing authorization in Dell PowerProtect Data Domain Management Center

• Dell PowerProtect Data Domain Management Center
• Broken access control

Insecure direct object reference in Acronis Cyber Protect 17

• Acronis Cyber Protect 17
• Broken access control

Missing authorization in Dell PowerProtect Data Domain

• Dell PowerProtect Data Domain
• Broken access control

Missing authorization in Dell PowerProtect Data Domain

• Dell PowerProtect Data Domain
• Broken access control

Enable Media Replace <= 4.2.2 - Missing Authorization to Authenticated (Author+) Post Content Modification via Media Replacement Workflow

• shortpixel Enable Media Replace
• Broken access control

Advanced Custom Fields: Extended <= 0.9.2.7 - Missing Authorization to Unauthenticated Data Exposure via Multiple AJAX Endpoints

• hwk-fr Advanced Custom Fields: Extended
• Broken access control

Travelly <= 2.3.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication via 'post' Parameter

• magepeopleteam Travelly – Tour & Travel Booking Manager for WooCommerce
• Broken access control

Clean Login <= 1.20.1 - Missing Authorization to Authenticated (Contributor+) Arbitrary Clean-Login Option Update via 'save_post' Hook

• hornero Clean Login
• Broken access control

Related Posts for WordPress <= 3.0.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'rp4wp_view' Parameter

• barrykooij Related Posts for WordPress
• Broken access control

Rich Showcase for Google Reviews <= 7.1.6 - Missing Authorization to Authenticated (Contributor+) Site Secret Disclosure via 'grw_auth_code' Site Secret Disclosure via grw-builder Admin Page

• widgetpack Rich Showcase for Google Reviews
• Broken access control

Related Posts for WordPress <= 3.0.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'rp4wp_create_link' Parameter

• barrykooij Related Posts for WordPress
• Broken access control

AI ChatBot for WooCommerce <= 5.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via qcld_rag_manual_sync AJAX Action

• quantumcloud AI ChatBot for WooCommerce – WoowBot
• Broken access control

PayPal Brasil para WooCommerce <= 1.7.8 - Missing Authorization to Unauthenticated Payment Gateway Modification via 'bcdc_activation_update' Action

• odefranca PayPal Brasil para WooCommerce
• Broken access control

WP Roster < 2.35 - Unauthenticated Roster Member Deletion

• WP Roster
• Broken access control

PayPlug for WooCommerce 2.8.0 - 3.1.0 - Unauthenticated Arbitrary Order Deletion, Modification and Disclosure

• PayPlug for WooCommerce (Official)
• Broken access control

Royal MCP < 1.5.10 - Contributor+ Private and Draft Content Disclosure and publish_posts Bypass via elementor_clone_page

• Royal MCP
• Broken access control

Royal MCP 1.4.38 - 1.5.9 - Subscriber+ Non-Public Post Disclosure via wp_search Ability

• Royal MCP
• Broken access control

Welcart e-Commerce < 2.12.6 - Author+ Arbitrary Product SKU Update and Disclosure via item_sku_ajax

• Welcart e-Commerce
• Broken access control

WPOrLogin < 3.1.0 - Unauthenticated Hide Login Slug Update

• WPOrLogin
• Broken access control

Royal Elementor Addons 1.3.71 - 1.7.1069 - Unauthenticated Mailchimp Audience Injection via mailchimp_subscribe

• Royal Addons for Elementor
• Broken access control

Royal Elementor Addons 1.3.68 - 1.7.1069 - Author+ Form Submission Interception via Widget ID Collision

• Royal Addons for Elementor
• Broken access control

Court Reservation < 1.12.4 - Unauthenticated Reservation Type Addition and Deletion

• Court Reservation
• Broken access control

Court Reservation < 1.12.4 - Unauthenticated Arbitrary Challenge Deletion

• Court Reservation
• Broken access control

Booking Package < 1.7.33 - Unauthenticated Verification Email Sending to Arbitrary Recipient

• Booking Package
• Broken access control

Casso Auto-confirm Bank Transfer < 4.2.0 - Unauthenticated WooCommerce Order Payment Confirmation

• Casso Flow
• Broken access control

Animated Text Block <= 1.2.6 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'id' Shortcode Attribute

• bplugins Animated Text Block – Add Typing and Looping Text Effects
• Broken access control

Missing authorization in GROWI

• GROWI
• Broken access control

Insecure direct object reference in GROWI

• GROWI
• Broken access control

Insecure direct object reference in GROWI

• GROWI
• Broken access control

NexoPOS through 6.3.0 Missing Authorization via Cash Register Session Actions

• Blair2004 NexoPOS
• Broken access control

nopCommerce before 5.00.0 Missing Authorization via Admin ProductController Add Popup Handlers

• nopSolutions nopCommerce
• Broken access control

Incorrect authorization in Google Chrome

• Google Chrome
• Broken access control

Missing authorization in Google Chrome

• Google Chrome
• Broken access control

Cronicle: Non-admin uid/gid injection in create_event/update_event → run-as-arbitrary-user (incl. root) — sibling of CVE-2026-39401

• jhuckaby Cronicle
• Privilege escalation
• Broken access control

Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCE

• asterisk
• certified-asterisk
• Path traversal
• Broken access control

Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server

• Broken access control

>=1.10.0, <1.30.0 || >=2.0.0, <2.2.0 · fixed in 1.30.0, 2.2.0

Neko: Authorization bypass in legacy WebRTC input handling

• Broken access control

>=0.0.0-20250401220545-fe94c999c6af, <0.0.0-20260805142851-395ca1a6f62b · fixed in 0.0.0-20260805142851-395ca1a6f62b

MembershipWorks WordPress Plugin < 6.17 Information Disclosure via WordPress REST API

• MembershipWorks
• Broken access control

MISP Guard Incomplete Tag Validation Allows Non-Allowed Taxonomy Tags to Bypass Feed Policy Enforcement

• misp-guard
• Broken access control
• CWE-20

CVE-2026-118171

• Strapi Open Source and Enterprise Headless CMS
• Broken access control

CVE-2026-118170

• Strapi Open Source and Enterprise Headless CMS
• Broken access control

Tanium addressed an improper access controls vulnerability in Comply.

• Tanium Comply
• Broken access control

Tanium addressed an improper access controls vulnerability in Comply.

• Tanium Comply
• Broken access control

Tanium addressed an improper access controls vulnerability in Enforce.

• Tanium Enforce
• Broken access control