A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
914 vulnerabilities with CWE-266
CVE-2026-2206
MEDIUM
Wekan < 8.21 - Improper Access Control in Administrative Repair Handler
CVSS 6.3
CVE-2026-2109
MEDIUM
jsbroks COCO Annotator <0.11.1 - Auth Bypass
CVSS 5.4
CVE-2026-2107
MEDIUM
yeqifu warehouse - Improper Authorization in Log Info Handler
CVSS 6.3
CVE-2026-2106
MEDIUM
yeqifu warehouse - Incorrect Privilege Assignment in Notice Management
CVSS 6.3
CVE-2026-2105
MEDIUM
yeqifu warehouse - Incorrect Privilege Assignment in Department Management
CVSS 6.3
CVE-2026-2079
MEDIUM
yeqifu warehouse - Incorrect Privilege Assignment in Menu Management
CVSS 6.3
CVE-2026-2078
MEDIUM
yeqifu warehouse - Incorrect Privilege Assignment in Permission Management
CVSS 6.3
CVE-2026-2077
MEDIUM
yeqifu warehouse - Incorrect Privilege Assignment in Role Management Handler
CVSS 6.3
CVE-2026-2076
MEDIUM
yeqifu warehouse < 2025-10-06 - Improper Authorization in User Management Endpoint
CVSS 6.3
CVE-2026-2075
MEDIUM
yeqifu warehouse - Incorrect Privilege Assignment in Role-Permission Binding Handler
CVSS 6.3
CVE-2026-2015
MEDIUM
Portabilis i-Educar <2.10 - Privilege Escalation
CVSS 6.3
CVE-2026-2010
MEDIUM
Sanluan PublicCMS <4.0-6.202506.d - Privilege Escalation
CVSS 4.2
CVE-2026-2009
MEDIUM
SourceCodester Gas Agency Management System 1.0 - Info Disclosure
CVSS 6.3
CVE-2026-1964
MEDIUM
Wekan < 8.21 - Improper Access Control in REST Endpoint
CVSS 4.3
CVE-2026-1963
MEDIUM
WeKan < 8.21 - Improper Access Control in Attachment Storage
CVSS 6.3
CVE-2026-1962
MEDIUM
Wekan < 8.21 - Improper Access Controls in Attachment Migration
CVSS 6.3
CVE-2026-1898
MEDIUM
Wekan < 8.21 - Improper Access Control in LDAP User Sync
CVSS 6.3
CVE-2026-1896
MEDIUM
WeKan <8.20 - Improper Access Controls
CVSS 6.3
CVE-2026-1895
MEDIUM
WeKan <8.20 - Improper Access Controls
CVSS 6.3
CVE-2026-1894
MEDIUM
Wekan < 8.21 - Improper Authorization via REST API Checklist Items Manipulation
CVSS 6.3
CVE-2026-1892
MEDIUM
Wekan < 8.21 - Improper Authorization via setBoardOrgs Function
CVSS 5.0
CVE-2026-1733
MEDIUM
crmeb < 5.6.3 - Improper Authorization via Order ID Manipulation
CVSS 4.3
CVE-2026-1702
MEDIUM
Pet Grooming Management Software 1.0 - Incorrect Privilege Assignment in User Management
CVSS 6.3
CVE-2026-1597
MEDIUM
Bdtask SalesERP <20260116 - Auth Bypass
CVSS 6.3
CVE-2026-1550
MEDIUM
PHPGurukul Hospital Management System 1.0 - Incorrect Privilege Assignment in Admin Dashboard Page
CVSS 6.3
Details
Vulnerabilities
914