Advisories · Weakness

Broken access control.

Missing or wrong authorization checks, IDOR, loose permissions. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

CVE-2026-92539 CVE record

CVSS 6.7 Medium

Cross-organization user modification and deletion via the SCIM API in Grafana Enterprise
- Grafana Enterprise
- Broken access control
- CWE-1220
Not analysed yet 20 Oct 2026
CVE-2026-28328 CVE record

CVSS 8.8 High

SolarWinds Observability Self-Hosted broken authorization schema
- SolarWinds Observability Self-Hosted
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-90800 CVE record

CVSS 8.1 High

Apache CouchDB: Auth bypass in prefixed _users and _replicator databases
- Apache Software Foundation Apache CouchDB
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-113677 CVE record

CVSS 5.3 Medium

Froxlor 0.10.0 before 2.3.15 Missing Authorization via SubDomains.delete API
- froxlor
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-113676 CVE record

CVSS 5.3 Medium

Froxlor 0.10.0 before 2.3.15 Authorization Bypass via Admins.get API
- froxlor
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-113612 CVE record

CVSS 5.3 Medium

SparkyFitness before 0.17.0 Missing Authorization via food-variants DELETE Endpoint
- CodeWithCJ SparkyFitness
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-113611 CVE record

CVSS 6.9 Medium

Outline before 1.8.0 Information Disclosure via Orphaned Webhook Subscriptions
- outline
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-113610 CVE record

CVSS 5.3 Medium

Xen Orchestra before 6.9.0 Authorization Bypass via user.set API
- vatesfr xen-orchestra
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-113607 CVE record

CVSS 7.1 High

Configurable Reports block for Moodle before 5.3.0 Authorization Bypass via get_report_data
- jleyva moodle-block_configurablereports
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-113606 CVE record

CVSS 7.1 High

Stirling-PDF 3.0.0 through 3.2.0 Authorization Bypass via Processing Folders
- Stirling-Tools Stirling-PDF
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-113603 CVE record

CVSS 6.9 Medium

x402 @x402/extensions 2.3.1 through 2.28.0 SIWX Payment Bypass via PaymentPayload.resource
- x402-foundation @x402/extensions
- x402
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-113601 CVE record

CVSS 5.3 Medium

Memos before 0.27.0 Missing Authorization via ActivityService ListActivities/GetActivity
- memos
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-113600 CVE record

CVSS 5.3 Medium

Fat Free CRM before 0.26.0 IDOR via CommentsController update and destroy
- fatfreecrm fat_free_crm
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-113599 CVE record

CVSS 5.3 Medium

Modoboa before 2.8.0 IDOR via API v2 armessages Auto-Reply Creation
- modoboa
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-113598 CVE record

CVSS 5.3 Medium

Modoboa before 2.8.0 IDOR via API v2 alarms bulk_delete
- modoboa
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-113597 CVE record

CVSS 5.3 Medium

Blinko through 1.8.8 IDOR via Tag tRPC Router Procedures
- blinko
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-113596 CVE record

CVSS 2.3 Low

Webstudio before 0.256.0 Information Disclosure via tRPC publishedBuilds and findManyByIds
- webstudio
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-113595 CVE record

CVSS 5.3 Medium

Sharkord before 0.0.26 Missing Authorization via changeLogo tRPC Route
- sharkord
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-113594 CVE record

CVSS 5.3 Medium

Sharkord before 0.0.8 Missing Authorization via updateSettings tRPC Route
- sharkord
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-113359 CVE record

CVSS 5.3 Medium

Baserow before 2.3.0 Cross-Workspace Data Disclosure via unique_row_values Endpoint
- Baserow
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-94023 CVE record

CVSS 6.9 Medium

Module delete dispatchers do not enforce kernel-object ownership before irreversible deletion
- Eclipse Foundation Eclipse ThreadX
- Memory corruption
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-112823 CVE record

CVSS 4.3 Medium

WordPress WP User Manager plugin <= 2.9.25 - Broken Access Control vulnerability
- WP User Manager
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-112824 CVE record

CVSS 5.3 Medium

WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.7 - Broken Access Control vulnerability
- Magepeople inc. Bus Ticket Booking with Seat Reservation
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-112829 CVE record

CVSS 5.3 Medium

WordPress Booktics plugin <= 1.0.30 - Broken Access Control vulnerability
- Arraytics Booktics
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-109700 CVE record

CVSS 6.5 Medium

WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.2 - Broken Access Control vulnerability
- eLightUp Meta Box – WordPress Custom Fields Framework
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-112834 CVE record

CVSS 5.3 Medium

WordPress Seriously Simple Podcasting plugin <= 3.17.0 - Broken Access Control vulnerability
- Castos Seriously Simple Podcasting
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-113411 CVE record

CVSS 5.3 Medium

Nerimity Desktop Window Open mainWindow.js shell.openExternal improper authorization in handler for custom url scheme
- Nerimity Desktop
- Broken access control
- CWE-939
Not analysed yet 20 Oct 2026
CVE-2026-113393 CVE record

CVSS 5.3 Medium

DrayTek Vigor2960 commonupload mainfunction.cgi unrestricted upload
- DrayTek Vigor2960
- Broken access control
- Unrestricted file upload
Not analysed yet 20 Oct 2026
CVE-2026-34485 CVE record

CVSS 7.8 High

A CLI ACL Bypass vulnerability in Nokia 1830 Global Express (GX)
- Nokia 1830 Global Express (GX)
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-9589 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Unblu Spark Authorization Bypass in Configuration Cascade Operations
- Unblu inc. Unblu Spark
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-113357 CVE record

CVSS 5.1 Medium

@e2e-dev/github before 0.4.1 CI Report Hijacking via Predictable Comment Marker
- tester-army @e2e-dev/github
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-113354 CVE record

CVSS 7.1 High

Dockhand before 1.0.46 Arbitrary File Read via /api/system/files/content
- Finsys dockhand
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-113353 CVE record

CVSS 5.3 Medium

LearnPress before 4.4.10 Missing Authorization via Legacy Editor AJAX Handlers
- ThimPress LearnPress
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-113349 CVE record

CVSS 5.3 Medium

OpenCATS before 0.10.0 Missing Authorization in Calendar editEvent/deleteEvent
- OpenCATS
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-112787 CVE record

CVSS 5.3 Medium

OpenCATS before 0.10.0 Missing Authorization in Reports Module EEO Reports
- OpenCATS
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-112786 CVE record

CVSS 5.3 Medium

OpenCATS before 0.10.0 Missing Authorization via Import Revert Action
- OpenCATS
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-112785 CVE record

CVSS 5.3 Medium

OpenCATS before 0.10.0 Missing Authorization in Saved-List AJAX Endpoints
- OpenCATS
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-112784 CVE record

CVSS 5.3 Medium

OpenCATS before 0.10.0 Missing Authorization via ajax/testEmailSettings.php
- OpenCATS
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-112783 CVE record

CVSS 5.3 Medium

OpenCATS before 0.10.0 Missing Authorization via Activity AJAX Endpoints
- OpenCATS
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-113382 CVE record

CVSS 5.3 Medium

arizu-id fast-tunnel Plugin Installer api_plugins.php extractTo unrestricted upload
- arizu-id fast-tunnel
- Broken access control
- Unrestricted file upload
Not analysed yet 20 Oct 2026
sgalinski/sg-cookie-optin Packagist

CVSS 5.3 Medium

TYPO3-EXT-SA-2026-029: Missing Authorization in extension "sgalinski Cookie Consent" (sg_cookie_optin)
- Broken access control
<7.4.6 || >=8.0.0, <8.1.12 · fixed in 7.4.6, 8.1.12

PKSA-xc65-qxpn-2x5q · CVE-2026-112065 Not analysed yet 20 Oct 2026
t3g/analytics Packagist

CVSS 5.3 Medium

TYPO3-EXT-SA-2026-031: Broken Access Control in extension "Analytics" (analytics)
- Broken access control
<1.1.1 · fixed in 1.1.1

PKSA-x737-v31s-48yt · CVE-2026-112070 Not analysed yet 20 Oct 2026
codingms/shop Packagist

CVSS 6.9 Medium

TYPO3-EXT-SA-2026-036: Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)
- Broken access control
<4.9.4 || >=5.0.0, <5.21.1 || >=6.0.0, <6.3.0 · fixed in 4.9.4, 5.21.1, 6.3.0

PKSA-qcjp-qhjx-bgmg · CVE-2026-113468 Not analysed yet 20 Oct 2026
t3g/analytics Packagist

CVSS 5.3 Medium

TYPO3-EXT-SA-2026-031: Insecure Direct Object Reference in extension "Analytics" (analytics)
- Broken access control
<1.1.1 · fixed in 1.1.1

PKSA-f25v-jzn7-jv3q · CVE-2026-112068 Not analysed yet 20 Oct 2026
nitsan/ns-t3ai Packagist

CVSS 7.2 High

TYPO3-EXT-SA-2026-035: Broken Access Control in extension "TYPO3 AI Integration Extension" (ns_t3ai)
- Broken access control
<14.0.2 · fixed in 14.0.2

PKSA-bvhd-xth6-k5xw · CVE-2026-112239 Not analysed yet 20 Oct 2026
codingms/shop Packagist

CVSS 6.9 Medium

TYPO3-EXT-SA-2026-036: Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)
- Broken access control
<4.9.4 || >=5.0.0, <5.21.1 || >=6.0.0, <6.3.0 · fixed in 4.9.4, 5.21.1, 6.3.0

PKSA-8c1z-qtpy-x6zn · CVE-2026-112071 Not analysed yet 20 Oct 2026
causal/fal-protect Packagist

CVSS 6.3 Medium

TYPO3-EXT-SA-2026-028: Broken Access Control in extension "FAL Protect" (fal_protect)
- Broken access control
>=1.7.1, <1.8.2 · fixed in 1.8.2

PKSA-6z5d-zh8g-4pfj · CVE-2026-112069 Not analysed yet 20 Oct 2026
sgalinski/sg-cookie-optin Packagist

CVSS 7.1 High

TYPO3-EXT-SA-2026-029: Missing Authorization in extension "sgalinski Cookie Consent" (sg_cookie_optin)
- Broken access control
<7.4.6 || >=8.0.0, <8.1.12 · fixed in 7.4.6, 8.1.12

PKSA-1t7r-3wn1-dsjs · CVE-2026-112066 Not analysed yet 20 Oct 2026
codingms/fluid-form Packagist

CVSS 6.3 Medium

TYPO3-EXT-SA-2026-033: Broken Access Control in extension "TYPO3 Fluid-Form by coding.ms" (fluid_form)
- Weak cryptography or TLS
- Broken access control
<5.0.10 || >=6.0.0, <6.0.6 · fixed in 5.0.10, 6.0.6

PKSA-13xq-tz75-c2tq · CVE-2026-112240 Not analysed yet 20 Oct 2026
CVE-2026-12489 CVE record

CVSS 6.5 Medium

Incorrect authorization in Zyxel EX3501-T0 firmware
- Zyxel EX3501-T0 firmware
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-86977 CVE record

CVSS 7.5 High

Incorrect authorization in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-86976 CVE record

CVSS 5.5 Medium

Improper authorization in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-86955 CVE record

CVSS 5.5 Medium

Missing authorization in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-86948 CVE record

CVSS 7.8 High

Protection mechanism failure in Apple Xcode
- Apple Xcode
- Broken access control
- CWE-693
Not analysed yet 20 Oct 2026
CVE-2026-86932 CVE record

CVSS 5.5 Medium

Missing authorization in Apple macOS
- Apple macOS
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-86907 CVE record

CVSS 4.4 Medium

Missing authorization in Apple macOS
- Apple macOS
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-84582 CVE record

CVSS 5.5 Medium

Improper access control in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-84508 CVE record

CVSS 5.5 Medium

Improper access control in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-65379 CVE record

CVSS 5.5 Medium

Information disclosure in Apple macOS
- Apple macOS
- Information disclosure
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-65356 CVE record

CVSS 5.5 Medium

Improper access control in Apple macOS
- Apple macOS
- Broken access control
Not analysed yet 20 Oct 2026