Incorrect authorization in django-guest
Teaser from the source
CVSSv3 Score: 8.2 An incorrect authorization vulnerability [CWE-863] in FortiAuthenticator may allow an unauthenticated attacker to cause a denial of service via HTTP requests. Revised on 2026-11-10 00:00:00
This is the RSS-feed teaser. Read the full article at the original source.
Read at Fortinet PSIRTMore on authorization
Other advisories
- Not ratedCVE-2026-129131Gameyfin before 2.6.2 contains a missing authorization vulnerability that allows unauthenticated attackers to bypass login-required mode by calling Hilla end…
- Not ratedCVE-2026-124278Authorization Bypass Through User-Controlled Key vulnerability in elixir-grpc grpc_server and grpc allows an attacker to make a handler act on a resource oth…
- HighCVE-2026-124267Missing Authorization vulnerability in Noor Alam Gmail SMTP gmail-smtp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff…
- MediumCVE-2026-121776Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
- MediumCVE-2026-125858Missing Authorization vulnerability in CleverReach CleverReach® WP cleverreach-wp allows Exploiting Incorrectly Configured Access Control Security Levels.Thi…
- MediumCVE-2026-125853Missing Authorization vulnerability in Everestthemes Everest Backup everest-backup allows Exploiting Incorrectly Configured Access Control Security Levels.Th…
- HighCVE-2026-107522Dell PowerStore contains an Improper Authorization vulnerability. An authenticated user could exploit this vulnerability, potentially leading to privilege es…
- MediumCVE-2026-125825Missing Authorization vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Exploiting Incorrectly Configured Access Control Security Lev…
Other news entries
- Your Endpoint Management Platform Could Be Your Biggest Security RiskNewsBleepingComputer
- Recently Patched Barracuda Vulnerabilities Exploited in AttacksNewsSecurityWeek
- Cisco Identity Services Engine Authorization Bypass VulnerabilitiesNewsCisco PSIRT
- Incorrect authorization in rest-apiNewsFortinet PSIRT
- Incorrect authorizationNewsFortinet PSIRT
- Authorization bypass through user-controlled key in dmserverNewsFortinet PSIRT
- Authorization bypass through user-controlled keyNewsFortinet PSIRT
- Incorrect authorizationNewsFortinet PSIRT
Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-264
ID