Total
11500 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-8377 | 2026-10-25 | N/A | 8.2 HIGH | ||
| Missing Authorization vulnerability in Armiya Information Technologies Ltd. Co. Access Control System (GKS) allows Collect Data from Common Resource Locations. This issue affects Access Control System (GKS): before Version 2. | |||||
| CVE-2026-11340 | 2026-10-25 | N/A | 8.3 HIGH | ||
| Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Liman MYS: before release.Master.1107. | |||||
| CVE-2026-57323 | 2026-10-25 | N/A | 5.8 MEDIUM | ||
| Unauthenticated Broken Access Control in Flash & HTML5 Video <= 2.11.0 versions. | |||||
| CVE-2026-54837 | 2026-10-25 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in Intranet & Private Site – All-In-One Intranet <= 1.8.1 versions. | |||||
| CVE-2026-54847 | 2026-10-25 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in Stylish Cost Calculator <= 8.3.9 versions. | |||||
| CVE-2026-56773 | 2026-10-25 | N/A | 8.8 HIGH | ||
| Teable's v2 REST API controller lacks @Permissions metadata on ORPC endpoints, allowing any authenticated user to bypass authorization checks. Attackers can read table schemas, create tables, and modify or delete records across bases and tables via endpoints like GET /api/v2/tables/get and POST /api/v2/tables/updateRecords. | |||||
| CVE-2026-56025 | 2026-10-25 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in Paymob for WooCommerce <= 4.1.2 versions. | |||||
| CVE-2026-57324 | 2026-10-25 | N/A | 6.5 MEDIUM | ||
| Unauthenticated Broken Access Control in GIFT4U <= 1.0.10 versions. | |||||
| CVE-2026-54832 | 2026-10-25 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in Gutenverse Companion <= 2.5.0 versions. | |||||
| CVE-2026-56063 | 2026-10-25 | N/A | 8.3 HIGH | ||
| Unauthenticated Broken Access Control in MailChimp Block <= 1.1.15 versions. | |||||
| CVE-2026-54846 | 2026-10-25 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in Syncee Premium Dropshipping & Wholesale <= 1.0.27 versions. | |||||
| CVE-2026-54835 | 2026-10-25 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in Five Star Restaurant Menu <= 2.5.2 versions. | |||||
| CVE-2026-57430 | 2026-10-25 | N/A | 4.3 MEDIUM | ||
| Contributor Broken Access Control in SEOPress PRO <= 9.1.1 versions. | |||||
| CVE-2026-57622 | 2026-10-25 | N/A | 4.3 MEDIUM | ||
| Subscriber Broken Access Control in WPCafe <= 3.0.14 versions. | |||||
| CVE-2026-56061 | 2026-10-25 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in Subscriptions for WooCommerce <= 1.9.5 versions. | |||||
| CVE-2026-54840 | 2026-10-25 | N/A | 7.3 HIGH | ||
| Unauthenticated Broken Access Control in Newsletters <= 4.13 versions. | |||||
| CVE-2026-56038 | 2026-10-25 | N/A | 8.8 HIGH | ||
| Contributor Privilege Escalation in Frisbii Pay <= 1.8.2 versions. | |||||
| CVE-2026-27435 | 2026-10-25 | N/A | 5.3 MEDIUM | ||
| Missing Authorization vulnerability in WofficeIO Woffice allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Woffice: from n/a before 5.4.33. | |||||
| CVE-2026-14156 | 1 Google | 1 Chrome | 2026-10-25 | N/A | 6.5 MEDIUM |
| Insufficient policy enforcement in StorageAccessAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low) | |||||
| CVE-2026-57640 | 2026-10-25 | N/A | 4.3 MEDIUM | ||
| Subscriber Broken Access Control in MasterStudy LMS <= 3.7.30 versions. | |||||