Search: management.as

A vulnerability in the Linux kernel's EDAC altera driver (altr_portb_setup) was fixed by correctly anchoring device resource management to the parent device. This ensures consistent resource allocation and teardown by using the parent device for devres groups and managed IRQ requests.

CVE-2026-111990 is a medium severity SQL injection vulnerability in the kishan0725 Hospital Management System affecting the Appointment Cancellation Handler component. The flaw exists in the mysqli_query function within admin-panel.php, allowing remote attackers to manipulate the ID argument to execute SQL injection. Public exploit code is available. The vendor has been notified but has not yet responded or issued a fix.

CVE-2026-110031 is a privilege escalation vulnerability in the Salon Booking System WordPress plugin versions from 10.17 up to but not including 10.31.11. It allows users with the custom salon staff role to assign arbitrary capabilities to other accounts when editing a customer, enabling escalation to administrator privileges and full site takeover.

Vikunja version 2.6.0 has an improper privilege management vulnerability in the getProjectAccessForUser function. This flaw causes the system to incorrectly calculate a user's effective project permissions by taking the maximum permission across the project hierarchy, overriding explicit lower permissions on sub-projects. As a result, a collaborator with write access on a parent project but only read access on a child project can improperly modify tasks and content in the child project.

phpMyFAQ versions prior to 4.1.9 have a missing authorization vulnerability in the deleteUser() API. Authenticated users with delete_user permission but without superadmin privileges can delete superadmin accounts by sending a crafted DELETE request. This flaw allows removal of administrative accounts other than the default superadmin user with ID 1, potentially disrupting administrative control.

phpMyFAQ versions 3.2.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta have an authorization bypass vulnerability. This flaw allows delegated administrators with user-management rights to access any user's full faquserdata, including the live TOTP secret, without proper SuperAdmin or protected-target checks. As a result, they can generate valid two-factor authentication codes and bypass 2FA protections.

phpMyFAQ versions from 4.2.0-alpha up to but not including 4.2.0-beta contain a privilege escalation vulnerability. Delegated administrators with category restrictions can exploit this flaw to assign categories outside their allowed scope, effectively granting unrestricted category access to groups. This occurs via a POST request to /admin/api/group/category-restrictions with out-of-scope or empty categoryIds.

phpMyFAQ versions from 4.2.0-alpha.2 up to but not including 4.2.0-beta contain a privilege escalation vulnerability in the group permission API. This flaw allows non-superadmin administrators with GROUP_EDIT rights to escalate privileges by granting themselves unrestricted FAQ create, edit, and publish access across all languages and categories. The vulnerability arises because permission checks do not consider language or category scope, enabling unauthorized broad access.

phpMyFAQ versions from 4.2.0-alpha.2 up to but not including 4.2.0-beta contain a privilege escalation vulnerability. The flaw exists in the UserController::updateUserRights function, where language restrictions on user rights are improperly dropped when rights are re-granted. This allows administrators with USER_EDIT privileges to escalate their access by submitting language-scoped rights for themselves, gaining unrestricted create, edit, and publish permissions across all languages.

Tektronix 3 Series MDO devices before version 1.21.1 contain a path traversal vulnerability in their web management interface. This flaw allows remote attackers to read arbitrary files accessible to the application by exploiting insufficient validation of user-supplied file paths. Exploitation may be possible without authentication depending on the device configuration. The vulnerability has a high severity rating with a CVSS score of 7.5.

A vulnerability identified as CVE-2026-101025 affects the NGINX ngx_http_js_module, specifically version 3.0. The vulnerability is associated with CWE-401, which relates to improper management of memory leading to potential resource leaks. No CVSS score or detailed impact information is provided. There is no indication of known exploits in the wild or available patches at this time.

CVE-2026-92392 is a use-after-free vulnerability related to HTTP/2 upload handling in Microsoft software version 3.0. The vulnerability involves improper memory management that could potentially lead to memory corruption.

CVE-2026-17491 is a medium severity vulnerability in IBM i versions 7.3, 7.4, 7.5, and 7.6. It involves improper privilege management where a remote authenticated attacker could bypass security restrictions due to incorrect enforcement of the ChrootDirectory configuration directive. The vulnerability has a CVSS score of 5.4, indicating a moderate impact on confidentiality and integrity without affecting availability.

IBM i versions 7.3, 7.4, 7.5, and 7.6 contain a vulnerability (CWE-269) that allows an authenticated attacker to elevate their privileges to QSECOFR/Root authority. This could enable the attacker to perform high-impact operations on the system without proper authorization. The vulnerability has a high severity with a CVSS score of 7.8.

CVE-2026-111723 is a missing authorization vulnerability in LingGuoAI's LingGuo-Drama product up to commit 8a6924a. It allows any registered user to access the /admin/v1/admins API, which is protected only by AuthAdminJWT, enabling unauthorized management of all accounts. Exploitation permits attackers to self-register, read bcrypt password hashes of all accounts, reset the bootstrap administrator's password, escalate their authority level, and delete accounts.

Netcore NR256CN devices up to version 1.5.140116 have an authentication bypass vulnerability. This flaw allows unauthenticated attackers to access protected management CGI handlers by prefixing the URI with certain public routes such as l7_web_auth.cgi or .ico paths. The vulnerability enables attackers to invoke management functions without valid credentials. The CVSS 4.0 base score is 6.9, indicating a medium severity risk.

Netcore NR256CN devices up to version 1.5.140116 have a NULL pointer dereference vulnerability in the Boa web server's user_auth() function. This flaw allows unauthenticated attackers to crash the server by sending a malformed Basic Authorization header lacking a colon, such as one decoding to a single character. Exploiting this vulnerability results in denial of access to the device's management interface by killing the main Boa process.

CVE-2026-111708 is a critical authentication bypass vulnerability in WhaTicket Community (canove project) version 0. It allows unauthenticated attackers to self-register as administrators by exploiting the POST /auth/signup endpoint, either by omitting the profile field or setting it to 'admin'. This grants full administrative privileges including user management, settings modification, and access to all tickets, contacts, messages, and WhatsApp connections.

Simple Admin Core versions up to 1.8.7 contain a critical authentication bypass vulnerability due to a hard-coded cryptographic key. This flaw allows unauthenticated attackers to forge super administrator tokens by exploiting the hard-coded Auth.AccessSecret in the configuration file. By signing a JWT with this secret and a specific roleId claim, attackers can gain full administrative control over the system, including user, role, menu, API authority, configuration, and token management.

CVE-2026-111683 is a missing authorization vulnerability in Allegro Ralph versions up to 20260902.1. Authenticated staff users can bypass rack model permissions due to RalphPermission skipping checks for views without a queryset. This allows attackers to access and modify rack and server room data, including asset hostnames, serial numbers, and management IPs.