Total
11419 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-55762 | 2026-10-25 | N/A | 8.1 HIGH | ||
| Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7, and 7.10.13, the POST /api/v1/fingerprint REST endpoint enforces authentication (authRequired: true) but performs no authorization check. Any authenticated user — including a standard user role account — can call this endpoint with {"setDeploymentAs": "new-workspace"} to permanently deregister the workspace from Rocket.Chat Cloud. This wipes all cloud credentials, removes the workspace license, breaks push notifications for all users, and requires manual re-registration to recover. This vulnerability is fixed in 8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7, and 7.10.13. | |||||
| CVE-2026-48582 | 1 Microsoft | 1 Exchange Online | 2026-10-25 | N/A | 9.6 CRITICAL |
| Missing authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network. | |||||
| CVE-2026-46716 | 2026-10-25 | N/A | 9.9 CRITICAL | ||
| Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.4.0 to before version 2.0.8, a RoleMember user can create a scheduled cron task with Cover=CronCoverAll, Servers=[] and an arbitrary Command. At every tick of the scheduler, the dashboard pushes that command to every server in the global ServerShared map — including servers that belong to other tenants (admin's servers, other members' servers). Each agent runs the command and returns the output, which is then sent to the attacker's own NotificationGroup → attacker-controlled webhook. This issue has been patched in version 2.0.8. | |||||
| CVE-2026-12105 | 1 Devolutions | 1 Devolutions Server | 2026-10-25 | N/A | 6.5 MEDIUM |
| Improper access control in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user to access attachments via folder duplication with inherited permissions. | |||||
| CVE-2026-54842 | 2026-10-25 | N/A | 8.1 HIGH | ||
| Missing Authorization vulnerability in Royal Plugins Royal MCP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Royal MCP: from n/a through 1.4.25. | |||||
| CVE-2026-54844 | 2026-10-25 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in CheckView Automated Testing <= 2.1.0 versions. | |||||
| CVE-2026-39584 | 2026-10-25 | N/A | 6.5 MEDIUM | ||
| Subscriber Broken Access Control in RepairBuddy <= 4.1132 versions. | |||||
| CVE-2026-10609 | 1 Redhat | 2 Cluster Logging Operator, Logging Subsystem For Red Hat Openshift | 2026-10-25 | N/A | 6.8 MEDIUM |
| A missing authorization flaw was found in the OpenShift Cluster Logging Operator. The operator creates and forwards ServiceAccount tokens to output destinations without verifying that the ClusterLogForwarder creator has permission to use those credentials, allowing a delegated editor to exfiltrate SA tokens and escalate privileges. | |||||
| CVE-2026-48119 | 2026-10-25 | N/A | 7.1 HIGH | ||
| Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 0.20.0 to before version 2.0.12, authenticated agents can forge service-monitor results for other users' services. This issue has been patched in version 2.0.12. | |||||
| CVE-2026-40782 | 2026-10-25 | N/A | 6.5 MEDIUM | ||
| Unauthenticated Broken Access Control in WPAdverts <= 2.3.0 versions. | |||||
| CVE-2026-40741 | 2026-10-25 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in Redsys for WooCommerce Light <= 7.0.0 versions. | |||||
| CVE-2026-20189 | 1 Cisco | 1 Prime Infrastructure | 2026-10-25 | N/A | 4.3 MEDIUM |
| A vulnerability in the log file download functionality of Cisco Prime Infrastructure could allow an authenticated, remote attacker to download arbitrary log files from the server. This vulnerability is due to insufficient authorization checks on the download service API. An attacker could exploit this vulnerability by submitting a crafted URL request to an affected device. A successful exploit could allow the attacker to download sensitive log files that they would otherwise not have authorization to access. To exploit this vulnerability, the attacker must have valid credentials to access the web-based management interface of the affected device. | |||||
| CVE-2026-57619 | 2026-10-25 | N/A | 6.5 MEDIUM | ||
| Contributor Sensitive Data Exposure in Elementor Website Builder <= 4.1.3 versions. | |||||
| CVE-2026-48873 | 2026-10-25 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in Montonio for WooCommerce <= 10.1.2 versions. | |||||
| CVE-2026-48835 | 2026-10-25 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in Contact Form by WPForms <= 1.10.0.4 versions. | |||||
| CVE-2026-49065 | 2026-10-25 | N/A | 8.2 HIGH | ||
| Unauthenticated Broken Access Control in Hippoo Mobile App for WooCommerce <= 1.9.5 versions. | |||||
| CVE-2026-56023 | 2026-10-25 | N/A | 5.4 MEDIUM | ||
| Customer Broken Access Control in UPI QR Code Payment Gateway for WooCommerce <= 1.6.2 versions. | |||||
| CVE-2026-39594 | 2026-10-25 | N/A | 6.4 MEDIUM | ||
| Subscriber Broken Access Control in Ultra Addons for WPForms <= 1.0.11 versions. | |||||
| CVE-2026-56115 | 1 Bootimus | 1 Bootimus | 2026-10-25 | N/A | 8.8 HIGH |
| Bootimus through 0.1.70 contains a broken access control vulnerability that allows authenticated low-privileged users to perform administrative actions by exploiting missing role enforcement in the JWTMiddleware function in internal/auth/auth.go, which validates JWT tokens and account status but fails to inspect the is_admin flag. Attackers can send requests to any endpoint under the /api/users path to create new administrator accounts or reset administrator passwords, thereby gaining full control of the server and the ability to modify boot menus and installation scripts served to PXE clients. | |||||
| CVE-2026-33093 | 1 Anviz | 2 Cx7, Cx7 Firmware | 2026-10-25 | N/A | 5.3 MEDIUM |
| Anviz CX7 Firmware is vulnerable to an unauthenticated POST to the device that captures a photo with the front facing camera, exposing visual information about the deployment environment. | |||||