CWE-266

1,014 vulnerabilities with CWE-266

CVE-2026-8241 MEDIUM

Industrial Application Software IAS Canias ERP RMI iasGetServerInfoEvent improper authorization

CVSS 5.3

CVE-2026-8233 MEDIUM

Dotouch XproUPF access control

CVSS 4.6

CVE-2026-8148 HIGH

NAVER MYBOX Explorer < 3.0.11.160 - Privilege Escalation via Registry Manipulation

CVSS 7.8

CVE-2026-8127 MEDIUM

eladmin Users API Endpoint UserController.java checkLevel access control

CVSS 6.3

CVE-2026-43510 MEDIUM

CISA manage.get.gov insecure portfolio administrative privileges

CVSS 5.9

CVE-2026-43535 MEDIUM

OpenClaw < 2026.4.14 - Authorization Context Reuse in Collect-Mode Queue Batches

CVSS 6.8

CVE-2026-42368 CRITICAL

GeoVision LPC2011/LPC2211 Web Interface privilege escalation vulnerability

CVSS 9.9

CVE-2026-7713 MEDIUM

crocodilestick Calibre-Web-Automated Kobo auth-token Route kobo_auth.py generate_auth_token improper authorization

CVSS 6.3

CVE-2026-7709 MEDIUM

janeczku Calibre-Web Endpoint kobo_auth.py generate_auth_token improper authorization

CVSS 6.3

CVE-2026-7686 MEDIUM

eyeo Adblock Plus Legacy Premium Activation premium.preload.js postMessage access control

CVSS 5.3

CVE-2026-7644 HIGH

ChatGPTNextWeb NextChat actions.ts addMcpServer improper authorization

CVSS 7.3

CVE-2026-7631 MEDIUM

code-projects Online Hospital Management System Registration improper authorization

CVSS 5.4

CVE-2026-7602 MEDIUM

JeecgBoot FillRuleUtil edit improper authorization

CVSS 6.3

CVE-2026-7505 HIGH

nextlevelbuilder GoClaw/GoClaw Lite RPC improper authorization

CVSS 7.3

CVE-2026-7468 HIGH

1024-lab smart-admin Demo Site index.html access control

CVSS 7.3

CVE-2026-5141 HIGH

Improper Access Control in TUBITAK BILGEM's Pardus Software Center

CVSS 8.8

CVE-2026-7292 MEDIUM

o2oa NodeAgent NodeAgent.java syncFile improper authorization

CVSS 5.6

CVE-2026-7142 MEDIUM

Wooey API Endpoint scripts.py add_or_update_script improper authorization

CVSS 6.3

CVE-2026-22337 CRITICAL

WordPress Directorist Social Login plugin < 2.1.4 - Privilege Escalation vulnerability

CVSS 9.8

CVE-2026-7109 MEDIUM

code-projects Invoice System in Laravel API Endpoint item improper authorization

CVSS 5.3

CVE-2026-7093 MEDIUM

code-projects Invoice System in Laravel Invoice Endpoint invoice improper authorization

CVSS 6.3

CVE-2026-7092 MEDIUM

code-projects Invoice System in Laravel Profile profile improper authorization

CVSS 6.3

CVE-2026-7091 MEDIUM

code-projects Invoice System in Laravel User Management user improper authorization

CVSS 6.3

CVE-2026-6977 HIGH

vanna-ai vanna Legacy Flask API improper authorization

CVSS 7.3

CVE-2026-33519 CRITICAL

Incorrect privilege assignment in Portal for ArcGIS

CVSS 9.8