CVE-2026-77459 is a critical authorization vulnerability in Argo CD affecting versions from 2.10.0 onward. It allows users with write access to Git repositories backing Applications to create PreDelete and PostDelete hooks that bypass AppProject authorization checks. These hooks run with the application-controller's credentials on the destination cluster during Application deletion, potentially enabling unauthorized creation of cluster-scoped or namespace-scoped resources. The vulnerability is patched in Argo CD versions 3.3.15 and later, including 3.4.10, 3.5.4, and 3.6.0-rc2. Versions 2.x and 3.0 through 3.2 are out of support and will not receive patches. Mitigations include restricting write access to Git repositories, limiting who can delete Applications, and tightening the application-controller's Kubernetes permissions.
CVE-2026-69226 is a medium severity vulnerability in Esri Portal for ArcGIS that allows unauthenticated users to create new accounts via the sharing endpoint even when self-service account registration is disabled. This occurs due to an incorrect authorization flaw (CWE-863) that lets attackers bypass the intended restriction by manipulating the signup workflow, resulting in unauthorized account creation.
CVE-2026-104005 is a high-severity vulnerability in MongoDB Server's mongos component, the sharded cluster router. An authenticated user with readWrite privileges can exploit a reachable assertion flaw by crafting a specially formed aggregation pipeline. This triggers an internal aggregation stage lacking proper authorization checks, causing an unhandled fatal error that crashes the mongos process and results in denial of service for all clients using that router.
CVE-2026-103028 is an authorization vulnerability in drakkan sftpgo versions 2.5.0 up to but not including 2.7.6. It allows an authenticated user with copy permissions to bypass file pattern filters that are intended to restrict access to certain files. By copying files denied by filters to permitted names or locations, the user can read contents of files that should be inaccessible according to the configured filters. Other access controls such as home directory restrictions, virtual folder layouts, and per-directory permissions remain enforced. There is no administrative privilege escalation or cross-account access.
### Impact
ACL checks ran on the lexical vault-relative path while containment used the realpath. An in-vault symlink placed under an allowed glob, whose realpath resolved into a denied folder, passed the read ACL — an intra-vault read-ACL-scope bypass. It requires an out-of-band-planted symlink (no MCP tool creates one) and is not a vault-root escape.
### Patches
Fixed in **1.3.1**. Upgrade to `>= 1.3.1`. ACL enforcement now derives the realpath vault-relative path and feeds a single unified predicate at every site.
### Workarounds
Do not permit untrusted symlinks inside the vault.
obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, bridge tools do not consistently apply the read access-control list (ACL) to every returned field. The tasks_filter tool exposes group counts derived from denied notes, makemd_query passes unfiltered sibling result fields through, and list_templates exposes template paths and parsed user-function bodies without a read-whitelist check. An authenticated caller can consequently infer or read data from notes outside the caller's read ACL. Version 1.3.1 fixes the vulnerability by filtering path-attributable fields and applying the read whitelist to list_templates.
CVE-2026-84284 is an incorrect authorization vulnerability in GitLab CE/EE that affects versions from 17.11 up to but not including 19.2.8, 19.3 up to 19.3.6, and 19.4 up to 19.4.2. This flaw could allow an unauthenticated user to read work item contents from private groups and projects under certain conditions. The issue has been fixed in versions 19.2.8, 19.3.6, and 19.4.2.
Display Product Catalog Based on Customs Declaration application does not perform sufficient authorization checks within certain functionality, allowing an authenticated low-privileged user to access sensitive information beyond their intended authorization scope. This vulnerability has low impact on confidentiality of the data, with no impact on the integrity and availability of the application.
CVE-2026-104355 is a high-severity authorization vulnerability in Temporal Technologies, Inc.'s Temporal Server affecting multi-cluster deployments. A connected peer cluster can modify local namespaces on another cluster without proper authorization because the receiving cluster applies inbound namespace replication updates without verifying if the namespace is global. This allows a compromised or malicious peer to overwrite namespace metadata such as state, description, retention, and active cluster settings, potentially disrupting workflow operations. Clusters without remote clusters registered with connection enabled are not affected.
### Impact
Tool dispatch did not check the caller-supplied `input.vault` against the caller's bound vault (`ctx.vaultId`); the folder ACL was a single global instance and the JWT carried no vault claim. As a result, **any valid token could read, write, or delete any configured vault** by passing `input.vault`, defeating multi-tenant isolation across ~90 tool sites. (`resources/read` was the only surface that already guarded this.)
### Patches
Fixed in **1.3.1** (the fix was developed on the `v1.3.0` tag, which never published to npm; 1.3.1 is the first published release with the fix). Upgrade to `>= 1.3.1`.
### Workarounds
Run a single vault per server process, or isolate each tenant on a separate process/credential.
### Fix
A central `input.vault === ctx.vaultId` guard was added in dispatch before the scope check.
CVE-2026-92682 is an authorization vulnerability in @neo4j/graphql versions 7.0.0 up to but not including 7.6.4. The issue arises because the 'none' quantifier in @authorization filters on relationships and connections is not properly negated when translated to Cypher queries, causing it to behave like 'some'. This flaw allows authenticated users who should be denied access to read, create, or delete sensitive data. The vulnerability is fixed in version 7.6.4.
CVE-2026-85499 is an improper authorization vulnerability in Apache SkyWalking BanyanDB versions 0.11.0 up to but not including 0.11.1. Under a non-default configuration involving a readonly Canopy user and a reachable monitoring target, this user can send non-read requests through the monitoring proxy, bypassing intended access controls. The issue is fixed in version 0.11.1.
CVE-2026-103903 is an incorrect authorization vulnerability in MikroTik RouterOS affecting versions 7.0.0 up to but not including 7.24.5. It allows a remote authenticated attacker with low-privilege credentials to escalate privileges by exploiting the WinBox authentication flow. The attacker can impersonate a higher-privilege account, such as admin, without knowing that account's password, gaining full administrative access and the ability to elevate their own privileges.
The Fundiin cho WooCommerce WordPress plugin through 3.4.0 does not have proper authorisation on several of its REST API routes, relying instead on a credential that is identical on every installation, allowing unauthenticated attackers to disclose the store's payment credentials and customer order data, overwrite the payment gateway configuration so that payments are credited elsewhere, and mark unpaid orders as paid. The same missing authorisation also allows arbitrary script to be stored in a field which is output unescaped on the classic checkout, leading to unauthenticated stored XSS on stores that do not use the block-based checkout.
The Squadeno WordPress plugin before 1.12.0 does not enforce its restrictions on every way a sport can be saved, allowing users with the lowest-tier Trainer role to change the section, age group, author, password, comment settings and date of a sport they are assigned to.
The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform proper authorization checks in a set of AJAX actions, allowing users with at least the Contributor role to read, modify and delete other users' galleries as well as site-wide gallery filters.
The Simply Schedule Appointments Booking Plugin for WordPress contains an incorrect authorization vulnerability in all versions up to and including 1.6.11.11. The flaw allows unauthenticated attackers to modify admin-controlled fields of appointments via the appointment update REST API endpoint. This includes faking payment confirmation, reassigning appointments to other users, and changing service types.
CVE-2026-108263 is a critical vulnerability in iflytek's astron-agent prior to version 1.1.2. It involves improper neutralization of directives in dynamically evaluated code, allowing an authenticated low-privilege tenant to execute arbitrary code as root within the core-workflow container. This can lead to unauthorized access to shared service and database credentials, bypassing tenant isolation, and enabling data compromise or service disruption. The issue is fixed in version 1.1.2.
CVE-2026-107841 is an incorrect authorization vulnerability in the john-broadway pacioli package version 0.9.6. It allows an attacker with a credential having API Key Scope 'require_consent' to cancel documents without proper consent markers due to a flaw in the consent gate logic. This enables cancellation of submitted documents that a human operator never approved, reversing ledger effects. The issue is fixed in version 0.10.0, which enforces act-bound consent markers for cascading cancels. Only sites that opted into consent gating are affected.
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB's ACL cache could generate the same database-privilege cache key for role and localhost user names that matched because both used an empty IP component. An attacker with CREATE USER could create the colliding principal and, when the original principal's database privileges were cached, exercise privileges assigned to the other account. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.