← Back
CWE-284

8,746 CVEs • Abstraction: Pillar

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

JSON object

Loading...

CVEs (8,746)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-91005
-
-
Sep 17, 2026
Sep 15, 2026
2.1 LOW· v4
6.3 MEDIUM· v3
6.5 MEDIUM· v2
A vulnerability was found in SourceCodester Online Faculty Clearance System 1.0. This affects the function move_uploaded_file of the file production/edit_picture.php of the component Profile Picture Upload. Performing a...Show more
A vulnerability was found in SourceCodester Online Faculty Clearance System 1.0. This affects the function move_uploaded_file of the file production/edit_picture.php of the component Profile Picture Upload. Performing a manipulation of the argument File results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made public and could be used.Show less
CVE-2026-90881
-
-
Sep 17, 2026
Sep 15, 2026
5.5 MEDIUM· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
A weakness has been identified in D-Link DIR-882 up to 20260814. Impacted is the function main of the file /HNAP1/dllog.cgi of the component CGI Binary. Executing a manipulation can lead to information disclosure. The at...Show more
A weakness has been identified in D-Link DIR-882 up to 20260814. Impacted is the function main of the file /HNAP1/dllog.cgi of the component CGI Binary. Executing a manipulation can lead to information disclosure. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.Show less
CVE-2026-90857
-
-
Sep 15, 2026
Sep 15, 2026
2.1 LOW· v4
6.3 MEDIUM· v3
6.5 MEDIUM· v2
A vulnerability was detected in SourceCodester College Notes Gallery Management System 1.0. Affected is an unknown function of the file /dashboard/userprofile.php of the component Profile Upload. Performing a manipulatio...Show more
A vulnerability was detected in SourceCodester College Notes Gallery Management System 1.0. Affected is an unknown function of the file /dashboard/userprofile.php of the component Profile Upload. Performing a manipulation of the argument image results in unrestricted upload. The attack may be initiated remotely. The exploit is now public and may be used.Show less
CVE-2026-90851
-
-
Sep 15, 2026
Sep 15, 2026
2.1 LOW· v4
6.3 MEDIUM· v3
6.5 MEDIUM· v2
A flaw has been found in PHPGurukul Hostel Management System 3.0. This affects an unknown part of the file /admin/includes/checklogin.php. This manipulation of the argument ID causes improper access controls. Remote expl...Show more
A flaw has been found in PHPGurukul Hostel Management System 3.0. This affects an unknown part of the file /admin/includes/checklogin.php. This manipulation of the argument ID causes improper access controls. Remote exploitation of the attack is possible. The exploit has been published and may be used.Show less
CVE-2026-86905
1Apple
4Ipados
Iphone OsMacos+1 more
Sep 16, 2026
Sep 14, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to delete credentials stored in Keychain.
CVE-2026-84585
1Apple
1Macos
Sep 16, 2026
Sep 14, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A permissions issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access local network devices without user consent.
CVE-2026-84574
1Apple
1Macos
Sep 18, 2026
Sep 14, 2026
N/A· v4
4.4 MEDIUM· v3
N/A· v2
A permissions issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to bypass Privacy preferences.
CVE-2026-84573
1Apple
1Macos
Sep 17, 2026
Sep 14, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.
CVE-2026-84555
1Apple
1Macos
Sep 16, 2026
Sep 14, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An authorization issue was addressed with improved access control. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8. An app may be able to access sensitive user data.
CVE-2026-84535
1Apple
1Macos
Sep 16, 2026
Sep 14, 2026
N/A· v4
8.2 HIGH· v3
N/A· v2
An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to break out of its sandbox.
CVE-2026-84491
1Apple
6Ipados
Iphone OsMacos+3 more
Sep 16, 2026
Sep 14, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access...Show more
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.Show less
CVE-2026-65403
1Apple
5Ipados
Iphone OsMacos+2 more
Sep 18, 2026
Sep 14, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
This issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. An app may be abl...Show more
This issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. An app may be able to access sensitive user data.Show less
CVE-2026-65383
1Apple
1Macos
Sep 17, 2026
Sep 14, 2026
N/A· v4
4.4 MEDIUM· v3
N/A· v2
This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may bypass Gatekeeper checks.
CVE-2026-65380
1Apple
1Macos
Sep 16, 2026
Sep 14, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue existed in the handling of snapshots. The issue was resolved with improved permissions logic. This issue is fixed in macOS Golden Gate 27. An app may be able to access protected user data.
CVE-2026-65362
1Apple
1Macos
Sep 15, 2026
Sep 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.
CVE-2026-65361
1Apple
1Macos
Sep 18, 2026
Sep 14, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.
CVE-2026-65345
1Apple
3Ipados
Iphone OsMacos
Sep 17, 2026
Sep 14, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to acc...Show more
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access user-sensitive data.Show less
CVE-2026-64712
1Apple
1Macos
Sep 15, 2026
Sep 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.
CVE-2026-43762
1Apple
4Ipados
Iphone OsMacos+1 more
Sep 17, 2026
Sep 14, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
The issue was addressed with improved checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6. An app may be able to access user-sensitive data.
CVE-2026-43741
1Apple
1Macos
Sep 16, 2026
Sep 14, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access protected user data.