CVE-2026-108706 is a missing authorization vulnerability in elunez eladmin's downloadS3Storage handler. It allows any authenticated user to access stored object URLs without proper storage permissions by enumerating sequential IDs. This exposure can lead to unauthorized access to file contents stored in publicly readable buckets. The vulnerability has a medium severity with a CVSS score of 5.3. A patch is available, and the product is a cloud service, so vendor-managed remediation is expected.
CVE-2026-108705 is a missing authorization vulnerability in CordysCRM through version 1.9.3. It affects the POST /custom-form/data/import endpoint, allowing authenticated users with low privileges to import data into any custom form by specifying the customFormId. Attackers can upload Excel files with importType ADD or UPDATE to create or overwrite records in custom forms they are not authorized to manage. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity.
CordysCRM versions up to 1.9.3 contain an authorization bypass vulnerability that allows low-privileged authenticated users to bypass permission checks by manipulating the owner field. This enables attackers to add or modify follow-up records on customers, clues, or opportunities via specific endpoints.
CordysCRM versions up to 1.9.3 have a missing authorization vulnerability in the POST /approval-resource/push endpoint. Authenticated users with low privileges can submit arbitrary resource IDs for approval without ownership verification, allowing them to alter approval statuses and read approval details of contracts, invoices, quotations, or orders.
CVE-2026-108702 is a medium severity vulnerability in 1Panel-dev CordysCRM versions up to 1.9.3. It involves a missing authorization check on the POST /approval-flow/webhook/test endpoint, allowing any authenticated user to trigger server-side requests to attacker-controlled URLs. This can be exploited to bypass SSRF validation and probe internal network addresses.
A vulnerability identified as CVE-2025-15469 affects the 'openssl dgst' one-shot codepath, where inputs larger than 16MB are silently truncated. This issue is present in Microsoft product version 3.0. No CVSS score or detailed impact information is provided, and no patch or remediation details are available.
1Panel-dev CordysCRM versions before 1.9.2 have a missing authorization vulnerability in the ContractController's sortModule handler for the POST /contract/sort endpoint. This flaw allows authenticated users without contract update permissions to modify any contract, including those belonging to other organizations, by supplying specific parameters. The vulnerability has a medium severity with a CVSS 4.0 score of 5.3.
CVE-2026-108700 is a missing authorization vulnerability in 1Panel-dev CordysCRM versions before 1.9.2. Authenticated users can call the POST /field/source/business-title endpoint without proper permission checks, allowing them to list business titles and retrieve sensitive organization invoicing data such as tax IDs, bank account numbers, opening banks, registration addresses, and phone numbers. This exposure occurs even if users lack the CONTRACT_BUSINESS_TITLE_READ permission.
1Panel-dev CordysCRM versions from 1.9.0 up to but not including 1.9.2 contain a missing authorization vulnerability. This flaw affects eight ModuleFieldController /field/source data-source endpoints that lack proper permission checks. Authenticated users without module permissions can access and page through organization-wide sensitive data such as leads, contacts, quotations, contracts, payment plans, payment records, orders, and invoices owned by other users.
mall4j versions up to 4.0 have an improper authorization vulnerability due to an operator precedence logic error in the cleanExpiryProdList SQL statement. Authenticated storefront customers can exploit this flaw by sending a DELETE request to /p/shopCart/cleanExpiryProdList, which deletes cart items of other users for off-shelf products. These deleted items do not return when products are restocked. The vulnerability has a medium severity with a CVSS 4.0 score of 5.3.
mall4j versions up to 4.0 contain an information disclosure vulnerability due to an operator precedence logic error in the getShopCartExpiryItems SQL filter. Authenticated users can exploit this flaw to access other shoppers' cart items, including product details, SKU, quantity, shop, and promoter card numbers. The vulnerability is rated medium severity with a CVSS 4.0 score of 5.3.
Wukong AICRM through version 0 contains an authorization bypass vulnerability that allows authenticated users to write messages into other users' AI chat sessions by specifying arbitrary session IDs. This enables attackers to append messages to victims' conversations and receive assistant replies based on the victim's recent messages, potentially disclosing conversation content.
Eladmin versions up to 2.7 have a missing authorization vulnerability in the LocalStorageController uploadPicture handler. This flaw allows low-privileged authenticated users to bypass the storage:add permission. Exploitation involves sending POST requests with image-named files to the /api/localStorage/pictures endpoint, enabling unauthorized file writes to the server's local storage and disclosure of absolute server paths. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity.
A NULL pointer dereference vulnerability exists in the PKCS12_item_decrypt_d2i_ex function in Microsoft software version 3.0. This flaw could cause the affected software to crash or behave unexpectedly when processing certain inputs. No CVSS score or detailed impact information is provided. There is no information about available patches or vendor advisories addressing this issue.
CVE-2026-22796 is a type confusion vulnerability in the PKCS7_digest_from_attributes() function of Microsoft software version 3.0. The flaw involves ASN1_TYPE type confusion, which can lead to unexpected behavior in the affected function.
A vulnerability identified as CVE-2026-22795 involves missing ASN1_TYPE validation during PKCS#12 parsing in Microsoft software version 3.0. This flaw relates to improper validation of ASN.1 data structures, which could potentially lead to security issues. No CVSS score or detailed impact information is provided. There is no indication of known exploits in the wild or available patches at this time.
JeecgBoot versions through 3.9.5 have a missing authorization vulnerability in the promptExperiment handler of the AiragPromptsController. This flaw allows any authenticated user, including low-privileged attackers, to run AI prompt experiments by supplying other users' prompt template and dataset IDs. Exploitation can lead to unauthorized execution of large language model evaluation runs, modification of result rows in the airag_ext_data table, and changes to dataset status. The vulnerability has a CVSS score of 4.3, indicating medium severity.
JeecgBoot versions through 3.9.5 have a missing authorization vulnerability in the sendBusAnnouncement handler of SystemApiController. This flaw allows any authenticated user, including low-privileged attackers, to send announcements without proper permissions. Attackers can craft POST requests to /sys/api/sendBusAnnouncement with forged sender, recipients, title, and content fields to deliver spoofed admin or system messages, potentially facilitating phishing attacks.
JeecgBoot versions up to 3.9.5 have a missing authorization vulnerability that allows any authenticated user to send template notifications via the POST /sys/api/sendTemplateAnnouncement endpoint. Attackers with low privileges can forge sender, recipient, title, and template parameters to send messages that appear to come from admin or system accounts.
JeecgBoot versions up to 3.9.5 have a missing authorization vulnerability in the queryUserRoles handler of SystemApiController. This flaw allows authenticated users, including low-privileged attackers, to send GET requests with arbitrary usernames to enumerate role assignments and identify administrator accounts. The vulnerability has a medium severity with a CVSS score of 4.3.