CVE-2026-78581 is an authorization bypass vulnerability in Elastic Kibana version 8.0.0. It allows an authenticated user to access or modify AI Assistant conversations belonging to other users by referencing another user's conversation identifier. Exploitation requires knowledge of a hard-to-guess identifier. The vulnerability has a medium severity with a CVSS score of 4.2.
Joomla Extension - miniorange.com - Unauthenticated Authentication Bypass via SAMLResponse Parameter in miniOrange SAML SSO < 11.0.2, SAML SP Single Sign On – Login with ADFS < 6.4, SAML SP Single Sign On – SAML SSO login with Google Apps < 6.4 - This is due to the mo_saml_validate_signature() function performing a loose boolean check on the raw tri-state integer returned by PHP's openssl_verify(), causing an error return value of -1 to be evaluated as truthy and therefore treated as a successful signature verification. This makes it possible for unauthenticated attackers to log in as any existing Joomla user, including administrators, by submitting a crafted SAMLResponse containing an attacker-controlled NameID and a deliberately malformed signature value that triggers an OpenSSL processing error — bypassing verification entirely and resulting in wp_set_auth_cookie() being called for the targeted account.
The extension's frontend detail-view document lookup does not apply the current site's siteHash filter or frontend user access filter, unlike the regular search path. A visitor who can obtain or guess a valid Solr document id can retrieve documents through this lookup without the same access restrictions enforced elsewhere.
The extension fails to restrict a backend AJAX endpoint for inline editing to fields the current user is permitted to see or edit. An authenticated, low-privileged backend user can supply arbitrary table, field and record parameters, and trigger an error response that discloses the current database value of the requested field, leading to disclosure of sensitive information such as backend and frontend user password hashes. Exploitation requires a valid, authenticated TYPO3 backend user account with access to the extensions backend module.
CVE-2026-77135 is a high-severity authorization bypass vulnerability in the TYPO3 extension "femanager." It allows any visitor with access to the Detail or List plugin to retrieve another frontend user's profile data by supplying an arbitrary user ID. The vulnerability arises because the extension's user detail view does not verify that the requested user record matches the configured or logged-in target. This can expose sensitive personal information such as name, email, date of birth, and address.
CVE-2026-77140 is a high-severity authorization vulnerability in the TYPO3 extension "Telephone Directory." The extension only validates the HMAC of a frontend employee edit link when rendering the edit form, but not when persisting changes. This allows an unauthenticated attacker who knows the UID of a visible employee record to send a direct POST request to update that record without proper authorization or ownership checks.
CVE-2026-77141 is a high-severity vulnerability in the TYPO3 extension "Club Directory" that allows unauthenticated users to modify or publish club records without ownership verification. The extension fails to perform ownership checks on user-supplied record identifiers in frontend edit, update, and activate actions. This enables attackers who know a club record's UID to overwrite or publish records they do not own.
CVE-2026-77142 is a high-severity vulnerability in the TYPO3 Extension "Industry Directory" that allows unauthorized modification of company records. The frontend editing feature hides the edit form for companies a visitor does not own using a template-level visibility flag, but the server-side write operation does not verify ownership. This flaw enables an attacker who knows a company record identifier to submit update requests and overwrite data without authorization checks.
CVE-2026-77143 is a high-severity vulnerability in the TYPO3 Extension "Forum" that allows unauthorized modification of forum topics. The issue arises because the frontend topic editing process does not verify on the server side whether the visitor owns the topic being edited. An attacker who knows a topic's public identifier can submit update requests to overwrite content without ownership confirmation. This flaw requires no privileged access or special configuration to exploit.
CVE-2026-77145 is a high-severity authorization bypass vulnerability in the TYPO3 Extension "Events 2". The flaw occurs because the permission check verifies a different event than the one actually modified by the request. This allows a user with frontend event management access to modify events belonging to other organizers without proper authorization.
The WP Courses LMS plugin for WordPress contains an authorization bypass vulnerability in all versions up to and including 3.2.29. This flaw allows authenticated users with custom-level access or higher to read other users' quiz answers and scores by manipulating the 'resultID' parameter in an AJAX request. The vulnerability arises from missing validation on a user-controlled key and insufficient access control, relying only on a nonce check that is exposed to all logged-in users.
CVE-2026-5006 is an authorization bypass vulnerability in HashiCorp Vault and Vault Enterprise. An authenticated attacker can manipulate an identity value in a templated policy path, including slash characters, to gain unintended access to Vault paths. This vulnerability was fixed in Vault Community Edition 2.0.4 and Vault Enterprise versions 2.0.4, 1.21.9, 1.20.14, and 1.19.20.
CVE-2026-17527 is a high-severity vulnerability in Red Hat OpenShift Virtualization's containerized-data-importer (CDI) component. The aggregated cdi.kubevirt.io:view ClusterRole, which is intended to provide read-only access, incorrectly grants create permission on the datavolumes/source subresource. This flaw allows a user or service account with view role cluster-wide and write access to any namespace to clone and exfiltrate the contents of any PersistentVolumeClaim (PVC) across namespaces, bypassing namespace isolation. The vulnerability affects default aggregated RBAC roles in CDI and downstream consumers including OpenShift Virtualization. No fix is currently available, and mitigation involves avoiding cluster-wide binding of the vulnerable role and auditing role bindings to prevent combined view and write access across namespaces.
A critical authorization bypass vulnerability (CVE-2026-77995) exists in the miniOrange OAuth Client (free) extension for Joomla. Versions prior to 3.2.0 for miniOrange OAuth Client and prior to 1.2.2 for related OAuth Single Sign-On extensions are affected. The flaw allows an attacker to manipulate a cookie value to log in as arbitrary users, including administrators, leading to arbitrary account takeover.
CVE-2026-78365 is a critical authorization bypass vulnerability in Roskus Prospero Flow CRM versions 4.0.0 through 5.3.1. It allows any authenticated user to read and modify supplier records belonging to other companies and reassign those records to their own company by manipulating the company_id field in a PUT request to the supplier API endpoint.
CVE-2026-78278 is an authorization bypass vulnerability classified as CWE-639 affecting WP ManageNinja LLC's Fluent Boards Pro plugin versions up to and including 2.0.11. It involves insecure direct object references (IDOR) that allow unauthorized access via user-controlled keys. The vulnerability has a medium severity with a CVSS score of 5.3. No patch or remediation information is currently provided by the vendor. There are no known exploits in the wild at this time.
CVE-2026-78144 is an authorization bypass vulnerability in code-projects Barangay Resident Profiling Management System version 1.0. It allows remote attackers to bypass authorization by manipulating the ID argument in the /boarders.php file of the Boarder Management Module. The vulnerability has a moderate severity with a CVSS score of 5.3. Exploit code is publicly available, but no known exploits in the wild have been reported. No patch or remediation information is currently provided by the vendor.
CVE-2026-78142 is an authorization bypass vulnerability in code-projects Barangay Resident Profiling Management System version 1.0. It affects the Restore/Delete component, specifically the /archived_records.php file, where manipulation of the resident_id argument allows unauthorized access. The vulnerability can be exploited remotely without user interaction. An exploit has been publicly disclosed. The vulnerability has a medium severity rating with a CVSS score of 5.3.
Brave Popup Builder versions prior to 0.8.6 contain an authorization bypass vulnerability allowing any logged-in user to access popup content they should not be able to view by manipulating a post ID in the URL.
CVE-2026-14187 is a low-severity authorization bypass vulnerability in the Tutor LMS WordPress plugin versions before 4.0.6. It allows users with the instructor role to access private course content owned by other instructors due to missing per-object ownership checks.