Baza CVE
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| Apache Airflow Keycloak provider | CVE-2026-92228 The Apache Airflow Keycloak provider's multi-team provisioning (`_attach_team_permissions`) granted every team role global read access to audit logs. Deployments that enable multi-team mode with the Keycloak auth manager and provision teams through it are affected: any authenticated member of one… |
6,5 | 0,26 % | Brak wpisu w KEV nie wyklucza ataków | |
| ClassroomIO | CVE-2026-111369 ClassroomIO through 1.0.0 contains an incorrect authorization vulnerability in the PUT and DELETE /:lessonId lesson routes that allows any course member, including students, to modify lessons. Authenticated students can supply arbitrary lesson ids to change titles and stored HTML content or delete… |
7,1 | 0,25 % | Brak wpisu w KEV nie wyklucza ataków | |
| bisheng | CVE-2026-111363 BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to read other users' parsed documents by supplying arbitrary file_id values. Attackers can enumerate sequential file ids against GET /api/v1/knowledge/file_bbox to… |
7,1 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| MinDoc | CVE-2026-111364 MinDoc through 2.2-beta.2 contains an insecure direct object reference vulnerability in DocumentController.Content that allows authenticated users to read documents from unauthorized books. Attackers holding a non-observer role on any book can name that book and iterate sequential document ids to… |
7,1 | 0,24 % | Brak wpisu w KEV nie wyklucza ataków | |
| cool-admin-midway | CVE-2026-111365 cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows non-superadmin admins to read, modify, or delete other admins' roles by supplying arbitrary role ids. Attackers holding ordinary sys:role permissions can call /admin/sys/role/info, update, or delete with… |
7,0 | 0,33 % | Brak wpisu w KEV nie wyklucza ataków | |
| cool-admin-midway | CVE-2026-111366 cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows department-limited admins to manage users outside their departments by supplying arbitrary user ids. Attackers holding sys:user:* permissions can call /admin/sys/user/info, update, or delete to read records,… |
8,6 | 0,53 % | Brak wpisu w KEV nie wyklucza ataków | |
| BillionMail | CVE-2026-111367 BillionMail through 4.9 contains a hard-coded cryptographic key vulnerability that allows unauthenticated attackers to forge unsubscribe and subscribe-confirm JWTs by computing the key from shipped configuration constants. Attackers can submit forged tokens to /api/unsubscribe,… |
6,9 | 0,33 % | Brak wpisu w KEV nie wyklucza ataków | |
| ClassroomIO | CVE-2026-111368 ClassroomIO through 1.0.0 contains an insecure direct object reference vulnerability in the Hono API course submission routes that allows course tutors or admins to modify submissions in other courses. Attackers can supply their own course id with another course's submission UUID to PUT or DELETE… |
6,1 | 0,29 % | Brak wpisu w KEV nie wyklucza ataków | |
| ThinkCMF | CVE-2026-111352 ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController that allows restricted backend administrators to call every admin REST API endpoint because Auth::check() fails open when no admin_api rule exists. Attackers with a valid admin-type API token can… |
8,7 | 0,46 % | Brak wpisu w KEV nie wyklucza ataków | |
| peppermint | CVE-2026-111353 Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any authenticated user to create time entries and attachments as other users by supplying a user id in the request body. Attackers can send POST requests to /api/v1/time/new or… |
5,3 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| crmeb_java | CVE-2026-111354 crmeb_java through 3.1 contains an authorization bypass vulnerability that allows authenticated members to read other members' orders by supplying their order numbers. Attackers can request /api/front/order/express/{orderId} or /api/front/order/apply/refund/{orderId} to view victims' tracking… |
2,3 | 0,32 % | Brak wpisu w KEV nie wyklucza ataków | |
| Admin.Core | CVE-2026-111355 zhontai Admin.Core through 10.1.0 contains an authorization bypass vulnerability that allows authenticated users to ignore department DataScope restrictions by supplying out-of-scope record ids. Attackers holding user or organization module permissions with Dept or Self scope can call UserService… |
5,3 | 0,28 % | Brak wpisu w KEV nie wyklucza ataków | |
| MacCMS | CVE-2026-111356 MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthenticated attackers to take over member accounts. Attackers knowing a victim's email or phone can request a code and brute-force findpass_reset to overwrite the member's password. |
9,1 | 0,45 % | Brak wpisu w KEV nie wyklucza ataków | |
| sendportal-core | CVE-2026-111358 SendPortal sendportal-core through 4.0.1 contains an authorization bypass vulnerability that allows authenticated workspace members to attach subscribers to other workspaces' tags by supplying unvalidated tag IDs. Attackers can submit sequential tag IDs via the web subscriber form or CSV import to… |
5,3 | 0,32 % | Brak wpisu w KEV nie wyklucza ataków | |
| CRMEB | CVE-2026-111359 CRMEB 5.6.1 through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated storefront users to read and claim other users' orders via the gift-order API. Attackers can enumerate sequential order IDs in gift_detail to harvest buyer identities and the gift_key,… |
7,1 | 0,25 % | Brak wpisu w KEV nie wyklucza ataków | |
| zentaopms | CVE-2026-111346 ZenTao PMS through 22.6 contains an authorization bypass vulnerability in action::editComment that allows authenticated users to read and overwrite other users' comments by supplying an arbitrary actionID. Attackers can iterate sequential action ids to modify comments on bugs, stories, tasks, and… |
5,3 | 0,24 % | Brak wpisu w KEV nie wyklucza ataków | |
| go-ldap-admin | CVE-2026-111347 go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public repository, that protects encrypted login passwords. Unauthenticated attackers who capture encrypted passwords can decrypt them offline or via the /base/decryptpwd endpoint, recovering cleartext LDAP… |
8,2 | 0,5 % | Brak wpisu w KEV nie wyklucza ataków | |
| likeshop | CVE-2026-111348 Likeshop through 3.5.1 contains an insecure direct object reference vulnerability in AfterSale.php and AfterSaleLogic.php that lets authenticated users access other customers' after-sale records by supplying their ids. Attackers with self-registered accounts can call the detail, goodsInfo, cancel,… |
5,3 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| Craftplan | CVE-2026-111349 Craftplan through 0.7.5 contains a missing authorization vulnerability in the CRM Customer resource that allows unauthenticated attackers to create customer records via JSON:API and GraphQL. Attackers can send anonymous requests to POST /api/json/customers or the create_customer mutation to insert… |
6,9 | 0,37 % | Brak wpisu w KEV nie wyklucza ataków | |
| Papermark | CVE-2026-111350 Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows authenticated users to delete other teams' viewer groups and share links. Attackers who know a victim team's data room and group identifiers can send DELETE requests, read group… |
2,3 | 0,25 % | Brak wpisu w KEV nie wyklucza ataków | |
| metasfresh | CVE-2026-111351 metasfresh through 5.175 contains a missing record-level authorization vulnerability in BoardRestController that allows authenticated low-privilege users to bypass role and organization access checks. Attackers can call the getBoard, getCard, addCard, removeCard and patchCard handlers to read… |
2,3 | 0,28 % | Brak wpisu w KEV nie wyklucza ataków | |
| JuggleIM | CVE-2026-111329 JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated remote attackers to access the admin console on port 8090. Attackers can log in as administrator, even after account deletion since CheckLogin recreates it, to control tenant… |
9,3 | 0,69 % | Brak wpisu w KEV nie wyklucza ataków | |
| JuggleIM | CVE-2026-111330 JuggleIM im-server through 1.8.16 contains a weak password hashing vulnerability that stores admin console passwords as unsalted SHA-1 digests via tools.SHA1 in services/accountservice.go. Attackers who obtain the accounts table through database access or backups can crack console passwords using… |
8,2 | 0,22 % | Brak wpisu w KEV nie wyklucza ataków | |
| Dokploy | CVE-2026-111331 Dokploy through 0.30.8 contains a cross-organization authorization bypass in the port tRPC router that allows authenticated owners or admins of any organization to manage other tenants' ports because the target application's organization is never verified. Attackers supplying a known portId or… |
5,3 | 0,32 % | Brak wpisu w KEV nie wyklucza ataków | |
| OxiCloud | CVE-2026-111332 OxiCloud 0.9.1 through 0.9.3 contains an incorrect authorization vulnerability that allows anonymous visitors to keep share access after password protection is added. Attackers holding an existing oxi_shares share-ring cookie can request content via GET /api/files/{id} to read shared files or… |
6,3 | 0,35 % | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 03:02 UTC – 15.11.2026, 08:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.