Baza CVE
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| think-plugs-admin | CVE-2026-111655 ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerability that allows non-super administrators to read and overwrite other administrators' file records via admin/file.edit. Attackers holding the admin/file.edit node can request or POST a target id with… |
5,1 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| chatwiki | CVE-2026-111656 ChatWiki through 2.9.6 contains an insecure direct object reference vulnerability that allows authenticated users to access another tenant's form filters by supplying arbitrary form_id values. Attackers can send sequential form_id values to getFormFilterList, getFormFilterInfo and… |
5,3 | 0,22 % | Brak wpisu w KEV nie wyklucza ataków | |
| misaka_danmu_server | CVE-2026-111643 Misaka Danmu Server through 2.8.9 contains an authentication bypass vulnerability that allows unauthenticated attackers to write arbitrary configuration keys via the unprotected POST /api/ui/config-history/rollback endpoint. Attackers can set the ipWhitelist key to their own /32 address, or alter… |
9,3 | 0,58 % | Brak wpisu w KEV nie wyklucza ataków | |
| misaka_danmu_server | CVE-2026-111644 Misaka Danmu Server through 2.8.9 contains a missing authentication vulnerability that allows unauthenticated attackers to access audit, diagnostics, data-check, scan-index and health routes under /api/ui lacking the get_current_user dependency. Attackers can read audit logs with login IPs, server… |
6,9 | 0,37 % | Brak wpisu w KEV nie wyklucza ataków | |
| MrDoc | CVE-2026-111645 MrDoc through 1.1.1 contains a missing object-level authorization vulnerability in the ImportLocalDoc API that allows authenticated users to modify other users' documents and projects. Attackers can send PUT requests with arbitrary sort_data document ids to publish private drafts and reparent… |
5,3 | 0,27 % | Brak wpisu w KEV nie wyklucza ataków | |
| SurveyKing | CVE-2026-111646 SurveyKing before 1.13.0 contains a missing authorization vulnerability that allows unauthenticated attackers to download any stored file by id through GET /api/public/preview/{attachmentId}. Attackers who know or derive time-ordered snowflake file ids can bypass shared, owner, and project checks… |
8,2 | 0,39 % | Brak wpisu w KEV nie wyklucza ataków | |
| lilishop | CVE-2026-111647 PickMall lilishop through 5.0.0 contains an insecure direct object reference vulnerability that allows authenticated buyers to read other buyers' invoice records because ReceiptServiceImpl.getDetail performs no ownership check. Attackers can supply another buyer's receipt id to GET… |
5,3 | 0,32 % | Brak wpisu w KEV nie wyklucza ataków | |
| buildadmin | CVE-2026-111648 BuildAdmin through 2.3.9 contains an insecure direct object reference vulnerability that allows authenticated backend administrators to modify other administrators' profiles via the id parameter. Attackers holding the routine/adminInfo/edit permission can overwrite avatar, nickname, email, mobile… |
5,1 | 0,38 % | Brak wpisu w KEV nie wyklucza ataków | |
| paopao-ce | CVE-2026-111649 Rocboss paopao-ce through 0.6.0-alpha.3 contains an insecure direct object reference vulnerability in DownloadAttachment that allows authenticated users to access private media by supplying arbitrary content IDs. Attackers can enumerate sequential post_content ids via the /v1/attachment endpoint… |
7,1 | 0,39 % | Brak wpisu w KEV nie wyklucza ataków | |
| StaffDeck | CVE-2026-111636 OpenBMB StaffDeck through 0.5.6 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator session tokens using the hard-coded default app_secret. Attackers can sign an HMAC-SHA256 token for the seeded 'admin' user in 'tenant_demo' to gain full… |
9,2 | 0,4 % | Brak wpisu w KEV nie wyklucza ataków | |
| NexoPOS | CVE-2026-111637 NexoPOS through 6.2.4 contains a missing authentication vulnerability that allows unauthenticated attackers to read accounting transaction records via GET /api/fields/{resource}/{identifier}. Attackers can request transaction field classes like ns.entity-transaction with sequential ids to retrieve… |
6,9 | 0,46 % | Brak wpisu w KEV nie wyklucza ataków | |
| sshportal | CVE-2026-111638 sshportal through 1.19.5 contains a missing authorization vulnerability in the management shell 'key show' command that allows authenticated non-admin users to obtain decrypted backend private SSH keys. Attackers can request predictable key names like 'default' or 'host' to retrieve private keys… |
8,3 | 0,4 % | Brak wpisu w KEV nie wyklucza ataków | |
| bbs-go | CVE-2026-111639 bbs-go through 4.4.6 contains an authentication bypass vulnerability in the /api/login/google_one_tap endpoint that allows remote attackers to log in as other users by submitting Google ID tokens issued to any OAuth client. Attackers operating their own Google OAuth client can capture a victim's… |
8,6 | 0,47 % | Brak wpisu w KEV nie wyklucza ataków | |
| dootask | CVE-2026-111640 DooTask through 1.9.66 contains a missing authorization vulnerability in WebSocketDialog::checkDialog() that skips the membership check for dialogs with group_type 'okr'. Authenticated users can supply the dialog_id of OKR comment dialogs to msg__list, msg__one, or msg__send* endpoints to read and… |
5,3 | 0,29 % | Brak wpisu w KEV nie wyklucza ataków | |
| FastapiAdmin | CVE-2026-111641 FastapiAdmin through 3.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain sessions for any user by abusing unprotected auto-login endpoints. Attackers can list users via /api/v1/auth/auto-login/users, mint a superuser auto-login token, and exchange it… |
9,3 | 0,43 % | Brak wpisu w KEV nie wyklucza ataków | |
| FastapiAdmin | CVE-2026-111642 FastapiAdmin through 3.0 contains a hard-coded JWT signing secret in backend/app/config/setting.py that allows low-privileged users to forge tokens impersonating the superuser. Attackers can register via the unauthenticated /api/v1/system/user/register endpoint, log in, and forge an HS256 token… |
8,7 | 0,36 % | Brak wpisu w KEV nie wyklucza ataków | |
| IoTSharp | CVE-2026-111629 IoTSharp through 3.6.1 contains an insecure direct object reference vulnerability that allows any authenticated user to read other tenants' data because Customers and Devices API handlers do not scope queries to the caller's tenant. Attackers can self-register through the anonymous… |
5,3 | 0,32 % | Brak wpisu w KEV nie wyklucza ataków | |
| abp-next-admin | CVE-2026-111630 abp-next-admin 10.2.0 through 10.6.0 contains an insecure direct object reference vulnerability in the LINGYUN.Abp.AIManagement module that allows authenticated users to access other users' AI chat conversations by supplying their ConversationId. Attackers holding the Chat permission can call… |
5,3 | 0,27 % | Brak wpisu w KEV nie wyklucza ataków | |
| Distributor | CVE-2026-111631 Distributor before 2.3.2 contains a missing authorization vulnerability that allows Contributor-level users to invoke external connection AJAX actions intended for manage_options users. Attackers can call dt_verify_external_connection with a chosen endpointId and url to send stored connection… |
5,3 | 0,24 % | Brak wpisu w KEV nie wyklucza ataków | |
| aureuserp | CVE-2026-111632 Aureus ERP through 1.6.0 contains an authorization bypass vulnerability that allows authenticated API users to create or move records into disallowed companies by supplying a foreign company_id. Attackers can submit create or update requests to plugin REST API endpoints such as partners, sales, or… |
5,3 | 0,29 % | Brak wpisu w KEV nie wyklucza ataków | |
| ZKEACMS | CVE-2026-111633 ZKEACMS through 4.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge REST API JWT bearer tokens using a hard-coded HMAC-SHA256 signing key in JwtBearerDefaults.cs. Attackers can sign a token with the Name claim set to 'admin' to call ApiAuthorize… |
8,8 | 0,44 % | Brak wpisu w KEV nie wyklucza ataków | |
| helicalinsight | CVE-2026-111634 Helical Insight through 7.0.0 contains an sql injection vulnerability that allows authenticated viewers to inject SQL through unescaped report parameter values sent to /executeDatasource. Attackers can supply crafted Numeric or String placeholder values that bypass the broken SqlDetect guard to… |
8,6 | 0,33 % | Brak wpisu w KEV nie wyklucza ataków | |
| helicalinsight | CVE-2026-111635 Helical Insight through 7.0.0 contains a path traversal vulnerability that allows authenticated viewers to read files outside the solution directory via the path parameter of /getExternalResource. Attackers can supply parent-directory segments to read any readable file with an allowed extension… |
5,3 | 0,4 % | Brak wpisu w KEV nie wyklucza ataków | |
| xiaozhi-esp32-server-java | CVE-2026-111623 Xiaozhi-esp32-server-java through 6.1.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid device WebSocket tokens by requesting /api/device/ota with any MAC address. Attackers can open a victim device's WebSocket channel to read private role… |
6,3 | 0,46 % | Brak wpisu w KEV nie wyklucza ataków | |
| Umbraco-CMS | CVE-2026-111624 Umbraco CMS before 17.7.1 and 18.2.1 contains a missing authorization vulnerability that allows unauthenticated clients to connect to the backoffice PreviewHub and BackofficeHub SignalR hubs. Attackers can complete the SignalR negotiate step and receive refreshed notifications that disclose… |
6,3 | 0,31 % | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 14.11.2026, 23:02 UTC – 15.11.2026, 04:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.