Incorrect authorization in rest-api
Teaser from the source
CVSSv3 Score: 8.6 An Incorrect Authorization vulnerability [CWE-863] in FortiAuthenticator may allow an unauthenticated attacker to bypass authorization checks and gain unauthorized access to restricted functionality. Revised on 2026-11-10 00:00:00
This is the RSS-feed teaser. Read the full article at the original source.
Read at Fortinet PSIRTMore on authorization
Other advisories
- Not ratedCVE-2026-116438Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0 , contains a Missing Authorization vulnerability. A low privileged attacker with remote access could …
- Not ratedCVE-2026-116427Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Missing Authorization vulnerability. A low privileged attacker with remote access could p…
- Not ratedCVE-2026-126119The Streamit WordPress plugin before 1.3.10 does not perform any authorization or nonce verification on one of its unauthenticated AJAX routes, which invokes…
- Not ratedCVE-2026-118065The Advance Guest Post WordPress plugin through 1.9 does not perform any authorization or ownership check when deleting media attachments, relying only on a …
- Not ratedosv:CLEANSTART-2026-PD43830Improper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant provider in Apache CXFallows a remote attacker to obtain multiple valid access tokens from...
- MediumCVE-2026-127207Sendcloud for WooCommerce through 1.0.41 contains a missing authorization vulnerability that allows authenticated low-privileged users, including Subscribers…
- MediumCVE-2026-86323A flaw was found in Foreman’s Api::V2::MailNotificationsController, where authorization checks on user-specific mail-notification resources are insufficient.…
- HighCVE-2026-111456A missing authorization check has been found in ConsumerResource.setupOwner() function of consumer registration module in the Candlepin package. The registra…
Other news entries
- Your Endpoint Management Platform Could Be Your Biggest Security RiskNewsBleepingComputer
- Recently Patched Barracuda Vulnerabilities Exploited in AttacksNewsSecurityWeek
- Cisco Identity Services Engine Authorization Bypass VulnerabilitiesNewsCisco PSIRT
- Incorrect authorizationNewsFortinet PSIRT
- Authorization bypass through user-controlled key in dmserverNewsFortinet PSIRT
- Incorrect authorizationNewsFortinet PSIRT
- Authorization bypass through user-controlled keyNewsFortinet PSIRT
- Incorrect authorizationNewsFortinet PSIRT
Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-253
ID