Missing authorization check in the upload_azure, upload_sftp, and upload_smb VQL plugins allows an authenticated analyst-role user can initiate attacker-controlled outbound network connections from the Velociraptor server, bypassing the NETWORK ACL permission boundary. This enables internal network reconnaissance via port oracle and potential data exfiltration to external endpoints.
In affected TP-Link Aginet devices, insufficient
authorization validation allows authenticated low-privileged users to execute higher-privileged
operations.
An attacker
may perform administrative actions such as creating privileged accounts or
modifying critical configuration settings.
Vault’s ACL policy engine did not consistently enforce a wildcard (glob) deny rule against LIST requests made with a trailing slash on the denied path. This may allow a token holding a broader allow rule alongside a narrower wildcard deny rule to enumerate the names of entries beneath a path it was intended to be denied access to. This vulnerability (CVE-2026-12624) is fixed in Vault Community Edition 2.0.3 and Vault Enterprise 2.0.3, 1.21.8, 1.20.13, and 1.19.19.
CVE-2026-21077 is an incorrect authorization vulnerability in Samsung Health versions prior to 7.0.0. It allows local attackers to access sensitive information without proper authorization. The vulnerability has a medium severity with a CVSS 4.0 base score of 6.9. No official patch or remediation guidance has been provided yet by the vendor. There are no known exploits in the wild at this time.
CVE-2026-21076 is an incorrect authorization vulnerability in Samsung Health versions prior to 7.0.0. This flaw allows local attackers to access sensitive information without proper authorization. The vulnerability has a medium severity rating with a CVSS score of 6.9. No official patch or remediation guidance is currently provided by the vendor. There are no known exploits in the wild at this time.
The Pinpoint Booking System WordPress plugin through 2.9.9.7.1 does not validate the booking price on the server side, allowing unauthenticated users to create bookings at an arbitrary price (including zero) and, by selecting a specific payment method, obtain an instantly-approved reservation.
The RSS Aggregator by Feedzy WordPress plugin before 5.2.6 does not verify that the requesting user owns or is allowed to edit the import job named in the request, allowing users with author-level access and above to permanently delete the posts created by another user's import job, reset its deduplication and scheduling state, disable it, or clear its error log. One of the affected actions performs no object-type check either, so arbitrary posts and pages can also be unpublished regardless of who owns them.
Adobe Genuine Software Integrity Service on Windows is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user interaction, but requires the attacker to access the target desktop system locally (e.g., keyboard, console), or remotely (e.g., SMB).
Nexus Repository 3 CE/Pro versions 3.0.0 through 3.94.x contain an incorrect authorization vulnerability (CWE-863) in the repository-creation user interface. An individual user account holding a delegated repository-admin privilege scoped to a specific repository format could create a repository of a different, unauthorized format, because authorization was checked against one request field while a separate, attacker-controlled field determined the repository format actually created. This does not affect the anonymous user, which cannot hold this privilege by default. Fixed in version 3.95.0.
CVE-2026-48076 is an authorization vulnerability in OpenReception's appointment booking software versions 1.0.1 and earlier. The flaw allows an attacker to create new client appointments in private channels without proper authorization because the booking access token does not bind to the channel ID, and the private channel check is missing in the new-client booking flow. Private channel IDs can be enumerated via an unauthenticated endpoint, enabling anonymous attackers to book appointments in channels intended to be private. No patches or official fixes are currently available.
OpenReception appointment booking software versions prior to 1.0.6 contain an authorization flaw where deleting a staff user by a TENANT_ADMIN improperly deletes pending invites across tenants sharing the same email. This occurs because the invite cleanup query lacks tenant scoping, allowing cross-tenant invite deletion. The issue is fixed in version 1.0.6.
A vulnerability in langgraph's checkpoint saver implementations for Postgres and SQLite allows an authenticated user to access stored items belonging to other tenants or users due to improper namespace scoping. This occurs because hierarchical namespaces are persisted as dot-joined strings and reads are scoped by prefix matching, which can overlap with sibling namespaces or those containing unescaped pattern metacharacters. The issue affects versions prior to 3.1.1 and is fixed in version 3.1.1.
CVE-2025-15674 is an authorization vulnerability in the Passster WordPress plugin before version 4.3.7. It allows users with the edit_posts capability, such as Contributors or higher, to read globally password-protected content via the WordPress REST API without knowing the password when global protection is enabled. The vulnerability does not affect availability or integrity and has a low CVSS score of 2.7.
Apache Polaris contains an authorization flaw where storage locations supplied during table and view registration are not consistently validated. An authenticated user with table or view registration permissions could cause Polaris to read an Iceberg metadata file outside the allowed storage boundaries if the catalog's storage credentials permit it. This could lead to limited confidential information disclosure. No unauthorized data modification or availability impact has been demonstrated. Exploitation requires specific deployment conditions including S3 credential vending and appropriate permissions.
CVE-2026-18954 is an incorrect authorization vulnerability in the aggregation pipeline tool of Amazon AWS Labs DocumentDB MCP Server versions before 1.0.12. This flaw allows an authenticated MCP client to perform unauthorized write operations on the connected database by bypassing the read-only mode enforcement. The issue is fixed in version 1.0.12 and later.
CVE-2026-50749 is an improper authorization vulnerability in Apache Answer affecting versions prior to 2.0.2. Authenticated users without review permissions can reject arbitrary pending edit-revisions due to a missing authorization check. The issue is fixed in version 2.0.2.
Documize Community's attachment download route (domain/attachment/endpoint.go, Download function, registered via AddPublic with no auth middleware) accepts a query parameter and grants access whenever the parameter is simply non-empty (len(secureToken) > 0), without comparing it to any server-stored value.
CVE-2026-71201 is an authorization vulnerability in OpenStack Ironic up to version 38.0.0. It allows a project reader with limited privileges to craft a request that returns Portgroups assigned to Nodes owned or leased by other projects. The vulnerability has a medium severity with a CVSS score of 5. No official patch or remediation information is currently available.
In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers (X-Copy-From, X-Copy-From-Account) from S3 API requests when s3_acl=true. An attacker can inject these headers into a signed PUT request targeting their own bucket, causing Swift to perform a server-side copy from another tenant's private object. The source object authorization is bypassed because the S3API middleware has already authorized the request against the destination. The attacker can read any object whose project_id, container name, and object name are known, regardless of the source object's ACLs or ownership. This requires the non-default s3_acl=true configuration.
In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz-* headers are covered by the SigV4 signature on presigned URL requests. An attacker who obtains a presigned PUT URL can inject an unsigned X-Amz-Copy-Source header, causing Swift to perform a server-side copy from an arbitrary source object using the signer's authorization context. The attacker can read any object the signer has access to, provided the target project_id, container name, and object name are known. This affects all deployments using the default s3_acl=false configuration.