Advisories · Weakness

Broken access control.

Missing or wrong authorization checks, IDOR, loose permissions. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

CVE-2026-101454 CVE record

CVSS 6.1 Medium

Improper access control in Oracle Corporation Siebel CRM Development
- Oracle Corporation Siebel CRM Development
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101451 CVE record

CVSS 8.7 High

Cross-site request forgery in Oracle Corporation Siebel Life Sciences
- Oracle Corporation Siebel Life Sciences
- Broken access control
- Cross-site request forgery (CSRF)
Not analysed yet 20 Oct 2026
CVE-2026-101446 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Siebel CRM Cloud Applications
- Oracle Corporation Siebel CRM Cloud Applications
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101445 CVE record

CVSS 3.6 Low

Incorrect authorization in Oracle Corporation Siebel CRM Cloud Applications
- Oracle Corporation Siebel CRM Cloud Applications
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101444 CVE record

CVSS 5.5 Medium

Incorrect authorization in Oracle Corporation Siebel CRM Cloud Applications
- Oracle Corporation Siebel CRM Cloud Applications
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101443 CVE record

CVSS 6.5 Medium

Incorrect authorization in Oracle Corporation Siebel CRM Cloud Applications
- Oracle Corporation Siebel CRM Cloud Applications
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101442 CVE record

CVSS 3.1 Low

Incorrect authorization in Oracle Corporation Siebel CRM Cloud Applications
- Oracle Corporation Siebel CRM Cloud Applications
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101437 CVE record

CVSS 6.6 Medium

Missing authorization in Oracle Corporation Siebel CRM Cloud Applications
- Oracle Corporation Siebel CRM Cloud Applications
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101436 CVE record

CVSS 4.1 Medium

Missing authorization in Oracle Corporation Siebel CRM Cloud Applications
- Oracle Corporation Siebel CRM Cloud Applications
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101431 CVE record

CVSS 8.7 High

Improper access control in Oracle Corporation PeopleSoft Enterprise PeopleTools
- Oracle Corporation PeopleSoft Enterprise PeopleTools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101429 CVE record

CVSS 7.0 High

Improper access control in Oracle Corporation PeopleSoft Enterprise PeopleTools
- Oracle Corporation PeopleSoft Enterprise PeopleTools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101428 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation PeopleSoft Enterprise PeopleTools
- Oracle Corporation PeopleSoft Enterprise PeopleTools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101425 CVE record

CVSS 2.5 Low

Incorrect authorization in Oracle Corporation PeopleSoft Enterprise PeopleTools
- Oracle Corporation PeopleSoft Enterprise PeopleTools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101424 CVE record

CVSS 5.8 Medium

Information disclosure in Oracle Corporation PeopleSoft Enterprise PeopleTools
- Oracle Corporation PeopleSoft Enterprise PeopleTools
- Information disclosure
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101423 CVE record

CVSS 4.3 Medium

Incorrect authorization in Oracle Corporation PeopleSoft Enterprise PeopleTools
- Oracle Corporation PeopleSoft Enterprise PeopleTools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101420 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation PeopleSoft Enterprise PeopleTools
- Oracle Corporation PeopleSoft Enterprise PeopleTools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101419 CVE record

CVSS 6.5 Medium

Incorrect authorization in Oracle Corporation PeopleSoft Enterprise PeopleTools
- Oracle Corporation PeopleSoft Enterprise PeopleTools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101418 CVE record

CVSS 6.5 Medium

Incorrect authorization in Oracle Corporation PeopleSoft Enterprise PeopleTools
- Oracle Corporation PeopleSoft Enterprise PeopleTools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101416 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation PeopleSoft Enterprise PeopleTools
- Oracle Corporation PeopleSoft Enterprise PeopleTools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101414 CVE record

CVSS 2.9 Low

Missing authorization in Oracle Corporation PeopleSoft Enterprise PeopleTools
- Oracle Corporation PeopleSoft Enterprise PeopleTools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101411 CVE record

CVSS 8.1 High

Improper access control in Oracle Corporation PeopleSoft Enterprise PeopleTools
- Oracle Corporation PeopleSoft Enterprise PeopleTools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101410 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation PeopleSoft Enterprise PeopleTools
- Oracle Corporation PeopleSoft Enterprise PeopleTools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101404 CVE record

CVSS 3.9 Low

Improper access control in Oracle Corporation Siebel Apps - Marketing
- Oracle Corporation Siebel Apps - Marketing
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101398 CVE record

CVSS 7.6 High

Improper access control in Oracle Corporation Oracle Capacity
- Oracle Corporation Oracle Capacity
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101396 CVE record

CVSS 4.7 Medium

Improper access control in Oracle Corporation Siebel Apps - Marketing
- Oracle Corporation Siebel Apps - Marketing
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101395 CVE record

CVSS 6.1 Medium

Improper access control in Oracle Corporation Siebel Apps - Marketing
- Oracle Corporation Siebel Apps - Marketing
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101394 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation Siebel Apps - Marketing
- Oracle Corporation Siebel Apps - Marketing
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101391 CVE record

CVSS 6.1 Medium

Improper access control in Oracle Corporation Siebel Apps - Marketing
- Oracle Corporation Siebel Apps - Marketing
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101388 CVE record

CVSS 7.1 High

Improper access control in Oracle Corporation PeopleSoft Enterprise PeopleTools
- Oracle Corporation PeopleSoft Enterprise PeopleTools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101387 CVE record

CVSS 7.6 High

Improper access control in Oracle Corporation Oracle Capacity
- Oracle Corporation Oracle Capacity
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101386 CVE record

CVSS 4.2 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101385 CVE record

CVSS 4.9 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101383 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101382 CVE record

CVSS 4.2 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101381 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101380 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101379 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101378 CVE record

CVSS 4.3 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101377 CVE record

CVSS 2.7 Low

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101376 CVE record

CVSS 4.7 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101375 CVE record

CVSS 6.3 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101374 CVE record

CVSS 5.9 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101373 CVE record

CVSS 2.4 Low

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101371 CVE record

CVSS 3.1 Low

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101369 CVE record

CVSS 6.1 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101368 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101367 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101364 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101363 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101362 CVE record

CVSS 6.9 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101361 CVE record

CVSS 4.2 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101360 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101359 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
org.a2aproject.sdk:a2a-java-sdk-server-common Maven

CVSS 7.5 High

A2A Java SDK has a fail-open default task authorization
- Broken access control
- CWE-1188
<1.3.0.Final · fixed in 1.3.0.Final

GHSA-qw47-mcm5-934w · CVE-2026-111764 Not analysed yet 20 Oct 2026
CVE-2026-113125 CVE record

CVSS 8.8 High

Missing authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-113013 CVE record

CVSS 8.8 High

Incorrect authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-113083 CVE record

CVSS 8.8 High

Missing authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-113286 CVE record

CVSS 8.8 High

Missing authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-113227 CVE record

CVSS 8.8 High

Missing authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-113122 CVE record

CVSS 6.5 Medium

Incorrect authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 20 Oct 2026