Total
11506 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-44765 | 2026-10-23 | N/A | 7.3 HIGH | ||
| Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unauthenticated remote attacker could access scheduling-related application functions without proper authorization validation. Successful exploitation could allow the attacker to retrieve, create, modify, or delete application-managed scheduling data, causing a low impact on confidentiality, integrity, and availability. | |||||
| CVE-2026-44764 | 2026-10-23 | N/A | 7.3 HIGH | ||
| Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unauthenticated attacker could send crafted requests to the Cost Servlet using specific parameter values. If processed by the application, these requests enable access to backend operations. Successful exploitation could allow the attacker to read, create, modify, or delete application-managed business data, resulting in a limited impact on the confidentiality, integrity, and availability of the affected system. | |||||
| CVE-2026-19656 | 1 Scada-lts | 1 Scada-lts | 2026-10-23 | N/A | 9.9 CRITICAL |
| ScadaLTS 2.7.8.1 exposes a server-side method that lacks authorization checks, allowing any authenticated user (including one holding only low-privilege, read-only permissions) to execute arbitrary operating system commands on the host. Successful exploitation results in code execution in the context of the ScadaLTS server process (root), leading to full compromise of the underlying system. | |||||
| CVE-2026-19539 | 2026-10-23 | N/A | N/A | ||
| Authorization Bypass Through User-Controlled Key in the ticket management component in Roskus Prospero Flow CRM before 5.4.9 allows authenticated users of any company to read the full content (title, description, and attachments) of tickets belonging to another company, to hijack another company's tickets by reassigning their company_id, and to delete another company's tickets without any authorization check, via the ticket's numeric identifier, because the read and save operations retrieve the record without constraining the query to the authenticated user's company, and the delete controller type-hints a generic Illuminate\Http\Request instead of the TicketDeleteRequest that would enforce the required permission. | |||||
| CVE-2026-42142 | 2026-10-23 | N/A | 7.1 HIGH | ||
| TypeBot is a chatbot builder tool. Prior to version 3.17.0, the `handleGetSheets` API handler (`POST /api/sheets/getSheets`) does not validate workspace membership, allowing any authenticated user to access and decrypt another workspace's Google Sheets OAuth credentials and retrieve spreadsheet data (sheet names, IDs, column headers). Version 3.17.0 fixes the issue. | |||||
| CVE-2026-28181 | 2026-10-23 | N/A | 6.5 MEDIUM | ||
| Subscriber Broken Access Control in AcyMailing SMTP Newsletter <= 10.11.1 versions. | |||||
| CVE-2026-27345 | 2026-10-23 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce <= 2.0.3 versions. | |||||
| CVE-2026-28159 | 2026-10-23 | N/A | 6.5 MEDIUM | ||
| Subscriber Broken Access Control in Service Finder Booking <= 6.2 versions. | |||||
| CVE-2026-27999 | 2026-10-23 | N/A | 6.5 MEDIUM | ||
| Subscriber Broken Access Control in Tourfic <= 2.23.1 versions. | |||||
| CVE-2026-27535 | 2026-10-23 | N/A | 7.1 HIGH | ||
| Subscriber Broken Access Control in Solace Extra <= 1.6.0 versions. | |||||
| CVE-2026-28188 | 2026-10-23 | N/A | 7.3 HIGH | ||
| Unauthenticated Broken Access Control in Hydra Booking <= 1.2.2 versions. | |||||
| CVE-2026-28186 | 2026-10-23 | N/A | 8.1 HIGH | ||
| Subscriber Broken Access Control in Travelfic Toolkit <= 1.5.1 versions. | |||||
| CVE-2026-28173 | 2026-10-23 | N/A | 7.1 HIGH | ||
| Customer Arbitrary Content Deletion in WP Event SOlution <= 4.1.19 versions. | |||||
| CVE-2026-111638 | 2026-10-23 | N/A | 7.7 HIGH | ||
| sshportal through 1.19.5 contains a missing authorization vulnerability in the management shell 'key show' command that allows authenticated non-admin users to obtain decrypted backend private SSH keys. Attackers can request predictable key names like 'default' or 'host' to retrieve private keys and connect directly to backend hosts, bypassing ACLs and session recording. | |||||
| CVE-2026-112778 | 1 Traefik | 1 Traefik | 2026-10-23 | N/A | 8.8 HIGH |
| Traefik before 2.11.46, 3.x before 3.6.17, and 3.7.0 lack namespace validation for Ingress and Service annotations in the Kubernetes Ingress provider, allowing references to Middlewares, ServersTransports, and TLSOptions in other namespaces. Attackers able to create or update Ingress or Service resources in one namespace can set router.middlewares or service.serverstransport annotations to obtain another tenant's injected credentials or reuse its client certificates, bypassing namespace-based tenant isolation. | |||||
| CVE-2026-75049 | 1 Jetbrains | 1 Youtrack | 2026-10-23 | N/A | 6.5 MEDIUM |
| In JetBrains YouTrack before 2026.1.13903, 2026.2.17950 an authenticated user could read restricted articles from other projects via the draft creation endpoint | |||||
| CVE-2026-63669 | 2026-10-23 | N/A | 6.5 MEDIUM | ||
| ApostropheCMS is an open-source Node.js content management system. Prior to 4.32.0, the page module's move() operation fails to enforce the destination parent's _create permission because its oldParent archive condition disables the check for ordinary moves, allowing an authenticated editor or contributor to use _targetId and _position through the page REST update endpoint to move a controlled page into a restricted subtree and make nudgeNewPeers() updateMany re-rank protected sibling pages. This issue is fixed in version 4.32.0. | |||||
| CVE-2026-75051 | 1 Jetbrains | 1 Youtrack | 2026-10-23 | N/A | 8.1 HIGH |
| In JetBrains YouTrack before 2026.2.17917 unauthorised project transfer between organisations was possible | |||||
| CVE-2026-75109 | 2026-10-23 | N/A | 7.1 HIGH | ||
| Determined fails to authorize requests on the generic task kill, pause, and unpause endpoints in the API handlers. Authenticated attackers can disrupt other users' workloads by terminating, pausing, or unpausing tasks they do not own. | |||||
| CVE-2026-73424 | 2026-10-23 | N/A | 6.5 MEDIUM | ||
| Astro is a web framework for content-driven websites. From 10.0.3 until 11.0.3, the Astro Vercel adapter in packages/integrations/vercel/src/serverless/entrypoint.ts accepts x_astro_path for the public /_isr function based only on the x-vercel-isr header, allowing unauthenticated GET requests to render routes protected only by Vercel edge path rules or split edge middleware. This issue is fixed in 11.0.3. | |||||