Advisories · Weakness

Broken access control.

Missing or wrong authorization checks, IDOR, loose permissions. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

CVE-2026-101795 CVE record

CVSS 6.7 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101794 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101793 CVE record

CVSS 5.5 Medium

Improper access control in Oracle Corporation Oracle Communications BRM - Elastic Charging Engine
- Oracle Corporation Oracle Communications BRM - Elastic Charging Engine
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101792 CVE record

CVSS 5.9 Medium

Improper access control in Oracle Corporation Oracle Communications BRM - Elastic Charging Engine
- Oracle Corporation Oracle Communications BRM - Elastic Charging Engine
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101791 CVE record

CVSS 8.1 High

Improper access control in Oracle Corporation Oracle Communications BRM - Elastic Charging Engine
- Oracle Corporation Oracle Communications BRM - Elastic Charging Engine
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101790 CVE record

CVSS 3.3 Low

Improper access control in Oracle Corporation Oracle Communications BRM - Elastic Charging Engine
- Oracle Corporation Oracle Communications BRM - Elastic Charging Engine
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101789 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101788 CVE record

CVSS 5.9 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101787 CVE record

CVSS 4.9 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101786 CVE record

CVSS 7.2 High

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101785 CVE record

CVSS 8.3 High

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101784 CVE record

CVSS 4.9 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101783 CVE record

CVSS 7.4 High

Improper access control in Oracle Corporation MySQL Router
- Oracle Corporation MySQL Router
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101782 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle Applications Manager
- Oracle Corporation Oracle Applications Manager
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101781 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101780 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101779 CVE record

CVSS 2.7 Low

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101778 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101777 CVE record

CVSS 5.5 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101776 CVE record

CVSS 4.9 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101775 CVE record

CVSS 7.4 High

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101774 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101773 CVE record

CVSS 7.1 High

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101772 CVE record

CVSS 8.1 High

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101771 CVE record

CVSS 8.1 High

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101770 CVE record

CVSS 8.1 High

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101769 CVE record

CVSS 7.0 High

Improper access control in Oracle Corporation MySQL Cluster
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101768 CVE record

CVSS 8.1 High

Improper access control in Oracle Corporation MySQL Connectors
- Oracle Corporation MySQL Connectors
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101766 CVE record

CVSS 4.4 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101764 CVE record

CVSS 5.5 Medium

Improper access control in Oracle Corporation Oracle Communications Billing and Revenue Management
- Oracle Corporation Oracle Communications Billing and Revenue Management
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101762 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101761 CVE record

CVSS 5.9 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101760 CVE record

CVSS 4.9 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101759 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle Communications Billing and Revenue Management
- Oracle Corporation Oracle Communications Billing and Revenue Management
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101758 CVE record

CVSS 8.2 High

Improper access control in Oracle Corporation Oracle Communications Billing and Revenue Management
- Oracle Corporation Oracle Communications Billing and Revenue Management
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101757 CVE record

CVSS 7.8 High

Improper access control in Oracle Corporation Oracle Application Object Library
- Oracle Corporation Oracle Application Object Library
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101756 CVE record

CVSS 4.9 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101755 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101754 CVE record

CVSS 4.4 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101753 CVE record

CVSS 4.4 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101752 CVE record

CVSS 4.4 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101751 CVE record

CVSS 4.9 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101750 CVE record

CVSS 4.9 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101749 CVE record

CVSS 4.9 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101748 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101747 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101746 CVE record

CVSS 7.3 High

Improper access control in Oracle Corporation Oracle Agile Engineering Data Management
- Oracle Corporation Oracle Agile Engineering Data Management
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101745 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation Oracle Agile Engineering Data Management
- Oracle Corporation Oracle Agile Engineering Data Management
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101744 CVE record

CVSS 8.4 High

Improper access control in Oracle Corporation Oracle Agile Engineering Data Management
- Oracle Corporation Oracle Agile Engineering Data Management
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101743 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101742 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Applications Manager
- Oracle Corporation Oracle Applications Manager
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101741 CVE record

CVSS 5.3 Medium

Improper access control in Oracle Corporation Oracle Agile Engineering Data Management
- Oracle Corporation Oracle Agile Engineering Data Management
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101740 CVE record

CVSS 3.6 Low

Improper access control in Oracle Corporation Oracle Agile Engineering Data Management
- Oracle Corporation Oracle Agile Engineering Data Management
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101739 CVE record

CVSS 7.0 High

Improper access control in Oracle Corporation Oracle Agile Engineering Data Management
- Oracle Corporation Oracle Agile Engineering Data Management
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101738 CVE record

CVSS 3.1 Low

Improper access control in Oracle Corporation Oracle Agile Engineering Data Management
- Oracle Corporation Oracle Agile Engineering Data Management
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101737 CVE record

CVSS 5.9 Medium

Improper access control in Oracle Corporation Oracle Java SE
- Oracle Corporation Oracle Java SE
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101736 CVE record

CVSS 7.4 High

Improper access control in Oracle Corporation Primavera Unifier
- Oracle Corporation Primavera Unifier
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101735 CVE record

CVSS 7.1 High

Improper access control in Oracle Corporation Primavera Unifier
- Oracle Corporation Primavera Unifier
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101734 CVE record

CVSS 4.3 Medium

Improper access control in Oracle Corporation Oracle Agile Engineering Data Management
- Oracle Corporation Oracle Agile Engineering Data Management
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-101733 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation MySQL Server and others
- Oracle Corporation MySQL Server
- Oracle Corporation MySQL Cluster
- Broken access control
Not analysed yet 20 Oct 2026