Advisories · Weakness
Broken access control.
Missing or wrong authorization checks, IDOR, loose permissions. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 6.9 Medium
file-management-system FileController.php store unrestricted upload
- file-management-system
- Broken access control
- Unrestricted file upload
- CVSS 3.1 Low
ApostropheCMS: Missing Authentication in `cleanExport` Route
- Authentication bypass
- Broken access control
<3.7.1 · fixed in 3.7.1
GHSA-rw26-wwfc-9wvm · CVE-2026-113648 - CVSS 6.5 Medium
ApostropheCMS: Import API bypasses publication roles for protected content
- Broken access control
<4.34.0 · fixed in 4.34.0
GHSA-5m22-7pfq-vp65 · CVE-2026-113649 - CVSS 6.5 Medium
ApostropheCMS: Archive duplicate continuation lets contributors overwrite published content
- Broken access control
<3.7.1 · fixed in 3.7.1
GHSA-jf5h-36mg-rp6x · CVE-2026-112956 - CVSS 6.3 Medium
Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine
- Path traversal
- Broken access control
<6.4.4 || >=7.0.0, <7.3.7 || >=8.0.0, <8.1.6 || >=8.2.0, <8.2.4 || >=8.3.0, <8.3.3 · fixed in 6.4.4, 7.3.7, 8.1.6, 8.2.4, 8.3.3
GHSA-rq7h-c2jc-7f22 · CVE-2026-112946 - CVSS 6.9 Medium
oretnom23 file-management-system-php admin_class.php save_files unrestricted upload
- oretnom23 file-management-system-php
- Broken access control
- Unrestricted file upload
- CVSS 7.4 High
OpenChoreo: Authorization bypass on WorkflowRun update allows cross-project takeover of workflow runs
- Broken access control
>=1.0.0, <1.0.6 || >=1.1.0, <1.1.7 || >=1.2.0, <1.2.5 · fixed in 1.0.6, 1.1.7, 1.2.5
GHSA-46r4-q7wv-32fc · CVE-2026-113727 - CVSS 7.8 High
Cisco Expressway Series Software Hardening Release: October 2026 - Incorrect Permission Assignment Vulnerabilities
- Cisco TelePresence Video Communication Server (VCS) Expressway
- Broken access control
- CVSS 8.8 High
Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control Vulnerabilities
- Cisco Emergency Responder
- Cisco Unified Communications Manager
- Broken access control
- CVSS 7.8 High
Incorrect Authorization in hMailServer
- Progressive Robot Ltd hMailServer
- Broken access control
- CVSS 8.1 High
Missing Authorization in hMailServer
- Progressive Robot Ltd hMailServer
- Broken access control
- CVSS 4.3 Medium
Missing Authorization in hMailServer
- Progressive Robot Ltd hMailServer
- Broken access control
- CVSS 7.5 High
Incorrect Authorization in hMailServer
- Progressive Robot Ltd hMailServer
- Broken access control
- CVSS 6.5 Medium
Missing Authorization in hMailServer
- Progressive Robot Ltd hMailServer
- Broken access control
- CVSS 5.0 Medium
Incorrect Authorization in hMailServer
- Progressive Robot Ltd hMailServer
- Broken access control
- CVSS 7.5 High
CVE-2026-114463
- Nous Research Hermes Agent
- Broken access control
- CVSS 6.5 Medium
WordPress BjornTech Swish for WooCommerce plugin <= 3.7.8 - Broken Access Control vulnerability
- BjornTech Swish for WooCommerce
- Broken access control
- CVSS 2.3 Low
Missing authorization in EnterpriseDB WarehousePG
- EnterpriseDB WarehousePG
- Broken access control
- CVSS 7.1 High
Missing authorization in EnterpriseDB WarehousePG
- EnterpriseDB WarehousePG
- Broken access control
- CVSS 5.3 Medium
Missing authorization in EnterpriseDB WarehousePG
- EnterpriseDB WarehousePG
- Broken access control
- CVSS 6.9 Medium
dhikshitha29 Insurance-Management-System Policy Holder Update Form UpdatePolicyHolder-inc.php improper authorization
- dhikshitha29 Insurance-Management-System
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
WordPress WpTravelly plugin <= 2.3.5 - Broken Access Control vulnerability
- Magepeople inc. WpTravelly
- Broken access control
- CVSS 6.9 Medium
dhikshitha29 Insurance-Management-System Add New Admin Form Admin-Register-inc.php improper authorization
- dhikshitha29 Insurance-Management-System
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
Trudesk through 1.2.11 Authorization Bypass via /api/v1/messages/send
- polonel trudesk
- Broken access control
- CVSS 5.3 Medium
Trudesk through 1.2.11 Authorization Bypass via Ticket Comment and Create APIs
- polonel trudesk
- Broken access control
- CVSS 5.3 Medium
Trudesk through 1.2.11 Authorization Bypass via Ticket Update API Endpoints
- polonel trudesk
- Broken access control
- CVSS 6.9 Medium
Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/tickets/:uid
- polonel trudesk
- Broken access control
- CVSS 7.1 High
ZenTao PMS before 22.3 Authorization Bypass via Ajax Controller Methods
- easysoft zentaopms
- Broken access control
- CVSS 6.9 Medium
Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Authorization in AJAX Handlers
- chamilo-lms
- Broken access control
- CVSS 5.3 Medium
Chamilo LMS 2.0.0-alpha.4 before 2.0.0-RC.3 Missing Authorization via openAnswerGrade
- chamilo-lms
- Broken access control
- CVSS 6.9 Medium
Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Authorization via GradebookController
- chamilo-lms
- Broken access control
- CVSS 8.7 High
Shopper 2.0.0 before 2.6.0 Privilege Escalation via Unguarded Livewire Components
- shopper
- Broken access control
- CVSS 5.3 Medium
SchedulePress before 5.3.5 Missing Authorization via wpsp_el_editor_form AJAX Action
- WPDeveloper SchedulePress
- Broken access control
- CVSS 7.5 High
Apache bRPC: Builtin services reachable from the public port via protobuf protocols despite ServerOptions.internal_port configuration
- Apache Software Foundation Apache bRPC
- Broken access control
- CVSS 3.3 Low
Incorrect authorization in Acronis Cyber Infrastructure
- Acronis Cyber Infrastructure
- Broken access control
- CVSS 9.1 CriticalCritical · CVSS 9+
Incorrect authorization in Acronis Cyber Infrastructure
- Acronis Cyber Infrastructure
- Broken access control
- CVSS 8.4 High
OnePlus OxygenOS exposed dangerous method vulnerability
- OnePlus OxygenOS
- Broken access control
- CWE-749
- CVSS 8.5 High
OnePlus OxygenOS improper neutralization of special elements vulnerability
- OnePlus OxygenOS
- Command injection
- Broken access control
- CVSS 5.3 Medium
CMP - Coming Soon & Maintenance 4.1.19 - 4.1.20 - Unauthenticated Maintenance Mode Bypass via Custom URL Whitelist
- CMP – Coming Soon & Maintenance
- Broken access control
- CVSS 6.5 Medium
Wava Payment 0.3.1 - 0.3.9 - Unauthenticated Merchant Credential Overwrite via Install Webhook
- Wava Payment Plugin
- Broken access control
- CVSS 5.3 Medium
Wava Payment 0.3.1 - 0.3.9 - Unauthenticated Order Status Change via Payment Webhook
- Wava Payment Plugin
- Broken access control
- CVSS 5.3 Medium
TI WooCommerce Wishlist < 2.13.0 - Unauthenticated Private Wishlist Disclosure via share_key
- TI WooCommerce Wishlist
- Broken access control
- CVSS 5.3 Medium
SUMIT Payment Gateway for WooCommerce < 4.0.0 - Unauthenticated Payment Confirmation Forgery via Redirect Callback
- SUMIT Payment Gateway for WooCommerce
- Broken access control
- CVSS 5.5 Medium
Easy Pricing Tables < 4.1.3 - Contributor+ Arbitrary Post Clone and Publish via Legacy Table Duplication
- Pricing Table WordPress Plugin
- Broken access control
- CVSS 5.3 Medium
Kliken: Ads + Pixel for Meta < 1.2.3 - Unauthenticated Order Data Disclosure via IDOR
- Kliken: Ads + Pixel for Meta
- Broken access control
- CVSS 4.9 Medium
AI Engine < 3.8.6 - Editor+ Arbitrary Post Title and Excerpt Update via update_post_title and update_post_excerpt
- AI Engine
- Broken access control
- CVSS 4.9 Medium
WPZOOM Portfolio < 1.4.34 - Contributor+ Arbitrary Post/Page Type Overwrite via IDOR
- WPZOOM Portfolio Lite
- Broken access control
- CVSS 4.3 Medium
Productive Commerce < 1.1.49 - Subscriber+ Arbitrary Plugin Activation
- Productive Commerce
- Broken access control
- CVSS 5.3 Medium
SmartyParcel < 1.23.4 - Unauthenticated Shipping Label Disclosure via IDOR
- SmartyParcel
- Broken access control
- CVSS 4.3 Medium
SmartyParcel (WC Ukr Shipping) < 1.23.4 - Subscriber+ Arbitrary Shipping Label Deletion
- SmartyParcel
- Broken access control
- CVSS 8.2 High
Backup and Staging by WP Time Capsule < 1.22.28 - Subscriber+ Staging-to-Live Deployment via wptc_copy_stage_to_live
- Backup and Staging by WP Time Capsule
- Broken access control
- CVSS 5.0 Medium
Uncanny Toolkit for LearnDash < 3.8.2 - Admin+ Cross-Site Account Lockout via Missing Authorization
- Uncanny Toolkit for LearnDash
- Broken access control
- CVSS 6.5 Medium
Moloni < 5.0.14 - Subscriber+ Arbitrary Order Invoice Generation via genInvoice
- Moloni
- Broken access control
- CVSS 5.3 Medium
Booking Package < 1.7.31 - Unauthenticated Subscription Deactivation via Missing Authorization
- Booking Package
- Broken access control
- CVSS 5.3 Medium
Ettrick Escape Room Booking < 1.3.1 - Unauthenticated Payment Confirmation Bypass
- Ettrick Escape Room Booking
- Broken access control
- CVSS 2.7 Low
LatePoint < 5.7.5 - Agent+ Customer PII Disclosure via IDOR
- Appointment Booking Plugin
- Broken access control
- CVSS 6.5 Medium
Synchrony Financing 1.0.5 - 1.1.1 - Unauthenticated Order Takeover via admin_order_callback REST Route
- Synchrony Financing
- Broken access control
- CVSS 9.9 CriticalCritical · CVSS 9+
Incorrect authorization in OpenStack Manila
- OpenStack Manila
- Broken access control
- CVSS 7.1 High
vLLM before 0.31.0 contains a cache aliasing vulnerability that allows authenticated attackers to collide shared cache keys by supplying caller-controlled values such as EXIF ImageID or cache_salt....
- Broken access control
Published by the maintainers · not yet reviewed by GitHub
<0.31.0 · fixed in 0.31.0
GHSA-rh6f-3x46-j33q · CVE-2026-114054 - CVSS 6.9 Medium
Adm-zip before 0.6.1 Privilege Escalation via keepOriginalPermission Setuid Bits
- cthackers adm-zip
- Broken access control