Threats Tagged 'cve-2026-80348'
View all threats tagged with 'cve-2026-80348'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-80348'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-80348 is a high-severity vulnerability in TarsCloud TarsWeb versions up to and including 3.0.16. It involves missing authorization checks in four methods of the PatchController.js, allowing authenticated users with limited roles to perform unauthorized actions across applications. These actions include uploading and deploying packages to any server, downloading or deleting packages from any application, and changing the default deployed package. The vulnerability arises because some methods do not call the AuthService to enforce per-application role restrictions, enabling privilege escalation within the TarsWeb console. Join the discussion | CVE Database V5 | 08/26/2026, 10:09:48 UTC Added: 08/26/2026, 10:22:53 UTC |
Showing 1 to 1 of 1 result