authorization

• CVE-2026-58054 - MyBB limited ACP user group privilege escalation 2026-06-28
• CVE-2026-58056 - RustDesk file-transfer session control authorization bypass 2026-06-28
• CVE-2026-58056 - RustDesk file-transfer session control-scope bypass 2026-06-28
• CVE-2026-12415 - Invoice Generator unauthenticated account takeover 2026-06-27
• GHSA-q6xx-5vr8-p898 - Nezha WebSocket stream ownership bypass 2026-06-27
• CVE-2026-39833 - Go x/crypto ssh agent confirm constraint bypass 2026-06-26
• CVE-2026-46595 - Go x/crypto ssh VerifiedPublicKeyCallback auth bypass 2026-06-26
• CVE-2026-55166 - Lemur ACME SSRF and creator-equality IDOR 2026-06-26
• CVE-2026-45052 - OpenAM Liberty Discovery authz bypass 2026-06-24
• CVE-2026-48507 - Snipe-IT bulk user lockout privilege escalation 2026-06-24
• CVE-2026-54329 - Snipe-IT cross-tenant accessory injection 2026-06-24
• CVE-2026-54281 - Nest Fastify trailing-slash middleware bypass 2026-06-15
• CVE-2026-48152 - Budibase REST datasource auth exfiltration 2026-06-13
• CVE-2026-43515 - Apache Tomcat security constraints authorization bypass 2026-06-11
• CVE-2026-47724 - nebula-mesh API ownership authorization bypass 2026-06-11
• CVE-2026-46636 - Twig cached template sandbox-state bypass 2026-06-08
• CVE-2026-47412 - PraisonAI Platform workspace delete RBAC bypass 2026-06-08
• CVE-2026-47418 - PraisonAI Platform project IDOR 2026-06-08
• CVE-2026-47742 - Shopper product Livewire authorization bypass 2026-06-08
• CVE-2026-47745 - Shopper payment, currency, and carrier authorization bypass 2026-06-08
• CVE-2026-47407 - PraisonAI Platform workspace takeover 2026-06-07
• CVE-2026-47413 - PraisonAI Platform member-add owner injection 2026-06-07
• CVE-2026-47416 - PraisonAI Platform workspace owner promotion 2026-06-07
• CVE-2026-47744 - Shopper team RBAC privilege escalation 2026-06-07
• CVE-2026-48169 - PraisonAI Platform cross-workspace IDOR 2026-06-07
• GHSA-63gr-g7jc-v8rg - AgenticMail MCP HTTP auth bypass 2026-06-07
• CVE-2026-48119 - Nezha service-monitor result forgery 2026-06-06
• Source code audit - auth and tenant boundaries 2026-06-06
• CVE-2026-45395 - Open WebUI tool update authorization RCE 2026-05-15
• CVE-2026-39852 - Quarkus matrix-parameter authorization bypass 2026-05-10
• CVE-2026-45109 - Next.js segment-prefetch middleware bypass 2026-05-10
• CVE-2026-41428 - Budibase public endpoint auth bypass 2026-05-08
• CVE-2026-42274 - Heimdall policy interpretation bypass cluster 2026-05-08
• GHSA-xmxx/GHSA-mr34/GHSA-2gvc - OpenClaw gateway boundary hardening 2026-05-08
• CVE-2026-29200 - Comet Backup tenant impersonation IDOR 2026-05-04
• CVE-2026-42349 - Clerk combined authorization bypass 2026-05-03
• CVE-2026-42461 - Arcane Compose template secret disclosure 2026-05-02
• GHSA-3xx2/GHSA-47wq - Paperclip agent key tenant-boundary bypass 2026-05-02
• GHSA-xh72/GHSA-xmxx - OpenClaw agent-surface fail-closed bypasses 2026-05-02
• CVE-2026-23902 — Apache DolphinScheduler authorization bypass 2026-04-26