Incorrect authorization
More on authorization
Other advisories
- MediumCVE-2026-124716Incorrect Authorization vulnerability in Apache APISIX.
- HighCVE-2026-124680Interpretation Conflict, resulting in (Incorrect Authorization) vulnerability in Apache APISIX.
- MediumCVE-2026-124723Interpretation Conflict, leading to Incorrect Authorization vulnerability in Apache APISIX.
- HighCVE-2026-129143paicoding 1.0.3 contains a missing authorization vulnerability in the ArticleRestController article detail endpoint that allows unauthenticated attackers to …
- HighCVE-2026-129151SurveyKing 1.13.2 contains a missing authorization vulnerability in result lookup: the anonymous survey view leaks the lookup configuration, including its pa…
- HighCVE-2026-129153SurveyKing 1.12.0 through 1.13.2 contains an authorization bypass in the linked survey feature that fails to verify the referenced linkSurveyId belongs to th…
- MediumCVE-2026-129157ragent 1.0.0 through 1.1.0 contains a missing authorization vulnerability in RagTraceController that allows any logged-in user to view all users' RAG traces.…
- HighCVE-2026-129164Dromara free-fs 2.0.1 through 2.3.1 contains an authorization bypass vulnerability that allows attackers to access code-protected shares because share codes …
Other news entries
- Your Endpoint Management Platform Could Be Your Biggest Security RiskNewsBleepingComputer
- Recently Patched Barracuda Vulnerabilities Exploited in AttacksNewsSecurityWeek
- Cisco Identity Services Engine Authorization Bypass VulnerabilitiesNewsCisco PSIRT
- Incorrect authorization in rest-apiNewsFortinet PSIRT
- Incorrect authorizationNewsFortinet PSIRT
- Authorization bypass through user-controlled key in dmserverNewsFortinet PSIRT
- Incorrect authorizationNewsFortinet PSIRT
- Incorrect authorization in django-guestNewsFortinet PSIRT
Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-257
ID