Advisories · Weakness

Broken access control.

Missing or wrong authorization checks, IDOR, loose permissions. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

CVE-2026-114091 CVE record

CVSS 6.0 Medium

Trigger.dev before 4.5.0 Cross-Tenant Run Payload Disclosure via API Replay Route
- triggerdotdev trigger.dev
- Broken access control
Not analysed yet 21 Oct 2026
CVE-2026-114082 CVE record

CVSS 7.2 High

Trigger.dev before 4.6.2 Overly Broad Realtime Session Stream Credentials
- triggerdotdev trigger.dev
- Broken access control
Not analysed yet 21 Oct 2026
CVE-2026-114078 CVE record

CVSS 7.2 High

Trigger.dev before 4.5.6 Cross-Organization Schedule Deletion via Unscoped friendlyId Lookup
- triggerdotdev trigger.dev
- Broken access control
Not analysed yet 21 Oct 2026
CVE-2026-114077 CVE record

CVSS 6.1 Medium

Trigger.dev before 4.5.6 Cross-Tenant Deployment Hijack via createDeploymentBackgroundWorkerV4
- triggerdotdev trigger.dev
- Broken access control
Not analysed yet 21 Oct 2026
CVE-2026-114075 CVE record

CVSS 5.3 Medium

Trigger.dev before 4.5.12 Authorization Bypass via Alert Channels API
- triggerdotdev trigger.dev
- Broken access control
Not analysed yet 21 Oct 2026
CVE-2026-114071 CVE record

CVSS 2.3 Low

Trigger.dev before 4.5.12 Authorization Bypass via Waitpoint Complete Route
- triggerdotdev trigger.dev
- Broken access control
Not analysed yet 21 Oct 2026
CVE-2026-114068 CVE record

CVSS 7.2 High

Trigger.dev before 4.6.0 Missing Authorization via Waitpoint Token Wait Endpoint
- triggerdotdev trigger.dev
- Broken access control
Not analysed yet 21 Oct 2026
CVE-2026-114067 CVE record

CVSS 7.1 High

Trigger.dev 4.5.0 before 4.6.2 Improper Authorization via snapshot-url Session Route
- triggerdotdev trigger.dev
- Broken access control
Not analysed yet 21 Oct 2026
CVE-2026-114066 CVE record

CVSS 7.2 High

Trigger.dev before 4.7.0 Missing Authorization via Batch parentRunId Waitpoints
- triggerdotdev trigger.dev
- Broken access control
Not analysed yet 21 Oct 2026
CVE-2026-114059 CVE record

CVSS 7.7 High

ArcadeDB before 26.10.1 RCE via Gremlin Groovy Engine Missing Authorization
- ArcadeData arcadedb
- Broken access control
Not analysed yet 21 Oct 2026
CVE-2026-114058 CVE record

CVSS 5.3 Medium

ArcadeDB from 26.2.1 before 26.10.1 Missing Authorization via Bolt Protocol
- ArcadeData arcadedb
- Broken access control
Not analysed yet 21 Oct 2026
CVE-2026-114057 CVE record

CVSS 5.3 Medium

ArcadeDB 26.2.1 before 26.10.1 Bolt SHOW DATABASES Information Disclosure
- ArcadeData arcadedb
- Broken access control
Not analysed yet 21 Oct 2026
CVE-2026-114056 CVE record

CVSS 5.3 Medium

ArcadeDB from 26.8.1 before 26.10.1 Authorization Bypass via ALTER TYPE WITH
- ArcadeData arcadedb
- Broken access control
Not analysed yet 21 Oct 2026
CVE-2026-113706 CVE record

CVSS 5.1 Medium

a2aproject a2a-rs inmemory.rs information disclosure
- a2aproject a2a-rs
- Information disclosure
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-81212 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

DataStage on Cloud Pak for Data Improper Authorization
- IBM DataStage on Cloud Pak for Data
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91663 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle Essbase
- Oracle Corporation Oracle Essbase
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91662 CVE record

CVSS 6.4 Medium

Improper access control in Oracle Corporation Oracle Essbase
- Oracle Corporation Oracle Essbase
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91659 CVE record

CVSS 7.7 High

Improper access control in Oracle Corporation Oracle Essbase
- Oracle Corporation Oracle Essbase
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91658 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle Essbase
- Oracle Corporation Oracle Essbase
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91656 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle Essbase
- Oracle Corporation Oracle Essbase
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91655 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle Essbase
- Oracle Corporation Oracle Essbase
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91654 CVE record

CVSS 6.3 Medium

Improper access control in Oracle Corporation Oracle Essbase
- Oracle Corporation Oracle Essbase
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91653 CVE record

CVSS 8.5 High

Improper access control in Oracle Corporation Oracle Essbase
- Oracle Corporation Oracle Essbase
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91651 CVE record

CVSS 8.5 High

Improper access control in Oracle Corporation Oracle Essbase
- Oracle Corporation Oracle Essbase
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91647 CVE record

CVSS 8.1 High

Improper access control in Oracle Corporation Oracle Essbase
- Oracle Corporation Oracle Essbase
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91646 CVE record

CVSS 5.6 Medium

Improper access control in Oracle Corporation Oracle Essbase
- Oracle Corporation Oracle Essbase
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91644 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle Essbase
- Oracle Corporation Oracle Essbase
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91642 CVE record

CVSS 7.3 High

Improper access control in Oracle Corporation Oracle Essbase
- Oracle Corporation Oracle Essbase
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91638 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle Essbase
- Oracle Corporation Oracle Essbase
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91637 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle Essbase
- Oracle Corporation Oracle Essbase
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91635 CVE record

CVSS 8.1 High

Improper access control in Oracle Corporation Oracle Essbase
- Oracle Corporation Oracle Essbase
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91633 CVE record

CVSS 6.0 Medium

Improper access control in Oracle Corporation Oracle Essbase
- Oracle Corporation Oracle Essbase
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91623 CVE record

CVSS 7.4 High

Improper access control in Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91622 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91615 CVE record

CVSS 6.3 Medium

Improper access control in Oracle Corporation Oracle Database Server
- Oracle Corporation Oracle Database Server
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91610 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle REST Data Services
- Oracle Corporation Oracle REST Data Services
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91604 CVE record

CVSS 7.5 High

Improper access control in Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91597 CVE record

CVSS 8.3 High

Improper access control in Oracle Corporation Oracle Business Intelligence Enterprise Edition
- Oracle Corporation Oracle Business Intelligence Enterprise Edition
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91590 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91577 CVE record

CVSS 6.4 Medium

Improper access control in Oracle Corporation Oracle Business Intelligence Enterprise Edition
- Oracle Corporation Oracle Business Intelligence Enterprise Edition
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91576 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle Business Intelligence Enterprise Edition
- Oracle Corporation Oracle Business Intelligence Enterprise Edition
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91574 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91568 CVE record

CVSS 7.7 High

Improper access control in Oracle Corporation Oracle Database Server
- Oracle Corporation Oracle Database Server
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91565 CVE record

CVSS 6.4 Medium

Improper access control in Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91562 CVE record

CVSS 4.4 Medium

Improper access control in Oracle Corporation PeopleSoft Enterprise FIN Inventory Brazil
- Oracle Corporation PeopleSoft Enterprise FIN Inventory Brazil
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91559 CVE record

CVSS 4.4 Medium

Improper access control in Oracle Corporation PeopleSoft Enterprise FIN Manufacturing Brazil
- Oracle Corporation PeopleSoft Enterprise FIN Manufacturing Brazil
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91554 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91553 CVE record

CVSS 4.4 Medium

Improper access control in Oracle Corporation PeopleSoft Enterprise FIN Product Configurator Brazil
- Oracle Corporation PeopleSoft Enterprise FIN Product Configurator Brazil
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91550 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91545 CVE record

CVSS 7.8 High

Improper access control in Oracle Corporation Oracle Business Intelligence Enterprise Edition
- Oracle Corporation Oracle Business Intelligence Enterprise Edition
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91541 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation PeopleSoft Enterprise FIN Common Objects Brazil
- Oracle Corporation PeopleSoft Enterprise FIN Common Objects Brazil
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91536 CVE record

CVSS 5.0 Medium

Improper access control in Oracle Corporation Oracle SOA Suite
- Oracle Corporation Oracle SOA Suite
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91530 CVE record

CVSS 4.4 Medium

Improper access control in Oracle Corporation Oracle GoldenGate
- Oracle Corporation Oracle GoldenGate
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91527 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle ZFS Storage Appliance Kit
- Oracle Corporation Oracle ZFS Storage Appliance Kit
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91523 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Oracle Business Intelligence Enterprise Edition
- Oracle Corporation Oracle Business Intelligence Enterprise Edition
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91520 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91519 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation PeopleSoft Enterprise PeopleTools
- Oracle Corporation PeopleSoft Enterprise PeopleTools
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91518 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91517 CVE record

CVSS 8.0 High

Improper access control in Oracle Corporation Oracle Management Pack for Oracle GoldenGate
- Oracle Corporation Oracle Management Pack for Oracle GoldenGate
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91512 CVE record

CVSS 7.2 High

Improper access control in Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Oracle Corporation Oracle Agile Product Lifecycle Management for Process
- Broken access control
Not analysed yet 20 Oct 2026