Incorrect authorization in rest-api
Teaser from the source
CVSSv3 Score: 8.6 An Incorrect Authorization vulnerability [CWE-863] in FortiAuthenticator may allow an unauthenticated attacker to bypass authorization checks and gain unauthorized access to restricted functionality. Revised on 2026-11-10 00:00:00
This is the RSS-feed teaser. Read the full article at the original source.
Read at Fortinet PSIRTMore on authorization
Other advisories
- Not ratedCVE-2024-58405Zipline through 3.7.9 contains an improper authorization vulnerability in the /api/auth/register endpoint, which enforces invite codes only when user registr…
- Not ratedCVE-2025-71460Zipline before 4.2.1 contains a missing authorization vulnerability in the /api/user/files/transaction endpoint that allows authenticated users to modify oth…
- Not ratedCVE-2026-126281NocoDB before 2026.08.0 contains a missing authorization vulnerability in the copy-from branch of integration creation in integrations.service.ts that decryp…
- Not ratedCVE-2026-126283NocoDB before 2026.08.0 contains an incorrect authorization vulnerability that lets base-scoped API tokens act as account-wide credentials because the token'…
- Not ratedCVE-2026-126307Nezha Dashboard before 2.6.0 contains multiple authorization, tenant isolation, and resource exhaustion vulnerabilities that allow members or unauthenticated…
- Not ratedCVE-2026-126313Frappe HRMS 16.0.0 before 16.20.1 contains an authorization bypass because an ownership check is missing on a record type that employees can create. Authenti…
- Not ratedCVE-2026-126317Frappe HRMS from 16.0.0 before 16.20.1 contains a missing authorization vulnerability that allows authenticated users to read company details outside their p…
- Not ratedCVE-2026-126318REDAXO before 5.21.6 contains an authorization bypass vulnerability that allows editors without the version[live_version] permission to modify live article v…
Other news entries
- Your Endpoint Management Platform Could Be Your Biggest Security RiskNewsBleepingComputer
- Recently Patched Barracuda Vulnerabilities Exploited in AttacksNewsSecurityWeek
- Cisco Identity Services Engine Authorization Bypass VulnerabilitiesNewsCisco PSIRT
- Incorrect authorizationNewsFortinet PSIRT
- Incorrect authorizationNewsFortinet PSIRT
- Authorization bypass through user-controlled keyNewsFortinet PSIRT
- Authorization bypass through user-controlled keyNewsFortinet PSIRT
- Authorization bypass through user-controlled key in dmserverNewsFortinet PSIRT
Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-253
ID