Incorrect authorization in django-guest
Teaser from the source
CVSSv3 Score: 8.2 An incorrect authorization vulnerability [CWE-863] in FortiAuthenticator may allow an unauthenticated attacker to cause a denial of service via HTTP requests. Revised on 2026-11-10 00:00:00
This is the RSS-feed teaser. Read the full article at the original source.
Read at Fortinet PSIRTMore on authorization
Other advisories
- Not ratedosv:CLEANSTART-2026-WY33496Symfony Routing components CompiledUrlMatcher and UrlMatcher interpret the host and path information differently, allowing path-based authorization rules to be bypassed in Symfony versions prior to 5
- HighCVE-2026-71531PrestaShop before 8.2.9 and 9.2.1 contains an authorization flaw in the Webservice API that allows an attacker holding a key restricted to one shop to act on…
- HighCVE-2026-110279IBM ContextForge MCP Gateway 1.0.0 through 1.1.0 is vulnerable to improper credential handling because the X-Upstream-Authorization request header can overri…
- MediumCVE-2026-110195IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 could allow an authenticated caller to bypass upstream credential-level authorization policies due to an in…
- CriticalCVE-2026-124021Control Web Panel (CWP) before webpanel_version 1.30.6 contains an authorization bypass vulnerability in the validate() function of api/v1/index.php that all…
- MediumCVE-2026-124716Incorrect Authorization vulnerability in Apache APISIX.
- HighCVE-2026-124680Interpretation Conflict, resulting in (Incorrect Authorization) vulnerability in Apache APISIX.
- MediumCVE-2026-124723Interpretation Conflict, leading to Incorrect Authorization vulnerability in Apache APISIX.
Other news entries
- Your Endpoint Management Platform Could Be Your Biggest Security RiskNewsBleepingComputer
- Recently Patched Barracuda Vulnerabilities Exploited in AttacksNewsSecurityWeek
- Cisco Identity Services Engine Authorization Bypass VulnerabilitiesNewsCisco PSIRT
- Incorrect authorization in rest-apiNewsFortinet PSIRT
- Incorrect authorizationNewsFortinet PSIRT
- Authorization bypass through user-controlled keyNewsFortinet PSIRT
- Authorization bypass through user-controlled key in GUINewsFortinet PSIRT
- Incorrect authorizationNewsFortinet PSIRT
Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-264
ID