← Back
CWE-862

11,680 CVEs • Abstraction: Class • Likelihood of Exploit: High

Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

JSON object

Loading...

CVEs (11,680)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-9820
1Mattermost
1Mattermost Server
Jul 13, 2026
Jul 13, 2026
N/A· v4
3.8 LOW· v3
N/A· v2
Mattermost versions 11.7.x <= 11.7.2, 10.11.x <= 10.11.19 fail to sanitize team objects returned by the scheme teams endpoint, which allows a user with the User Manager role to obtain invite links for private teams and u...Show more
Mattermost versions 11.7.x <= 11.7.2, 10.11.x <= 10.11.19 fail to sanitize team objects returned by the scheme teams endpoint, which allows a user with the User Manager role to obtain invite links for private teams and use them to join or share access to those teams via the scheme teams API endpoint.. Mattermost Advisory ID: MMSA-2026-00671Show less
CVE-2026-14934
-
-
Jul 13, 2026
Jul 13, 2026
9.4 CRITICAL· v4
N/A· v3
N/A· v2
A Missing Authorization vulnerability in the repository creation functionality in Google Cloud BigQuery, Dataform and Colab Enterprise, in the versions between October 2025 and May 10th, 2026, on Google Cloud Platform, a...Show more
A Missing Authorization vulnerability in the repository creation functionality in Google Cloud BigQuery, Dataform and Colab Enterprise, in the versions between October 2025 and May 10th, 2026, on Google Cloud Platform, allows an authenticated attacker to escalate privileges and perform cross-tenant repository takeover. This vulnerability was patched on 10 May 2026, and no customer action is needed.Show less
CVE-2026-61985
-
-
Oct 24, 2026
Jul 13, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in magepeopleteam Car Rental Manager car-rental-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Car Rental Manager: from n/a through...Show more
Missing Authorization vulnerability in magepeopleteam Car Rental Manager car-rental-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Car Rental Manager: from n/a through <= 1.3.7.Show less
CVE-2026-61983
-
-
Oct 24, 2026
Jul 13, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in andy_moyle Church Admin church-admin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Church Admin: from n/a through <= 5.0.30.
CVE-2026-61968
-
-
Oct 24, 2026
Jul 13, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through <= 3.1.2.
CVE-2026-61958
-
-
Oct 24, 2026
Jul 13, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in Saad Iqbal License Manager for WooCommerce license-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects License Manager...Show more
Missing Authorization vulnerability in Saad Iqbal License Manager for WooCommerce license-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects License Manager for WooCommerce: from n/a through <= 3.0.17.Show less
CVE-2026-61952
-
-
Oct 24, 2026
Jul 13, 2026
N/A· v4
4.9 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in Jose Vega WooCommerce Bulk Edit Products – WP Sheet Editor woo-bulk-edit-products allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooComme...Show more
Missing Authorization vulnerability in Jose Vega WooCommerce Bulk Edit Products – WP Sheet Editor woo-bulk-edit-products allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Bulk Edit Products – WP Sheet Editor: from n/a through <= 1.8.21.Show less
CVE-2026-59523
-
-
Oct 24, 2026
Jul 13, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appoint...Show more
Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a through 1.6.11.11.Show less
CVE-2026-57812
-
-
Oct 24, 2026
Jul 13, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appoint...Show more
Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a through <= 1.6.12.4.Show less
CVE-2026-57797
-
-
Oct 24, 2026
Jul 13, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in ThemeMove EduMall edumall allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EduMall: from n/a through <= 4.5.1.
CVE-2026-57782
-
-
Oct 24, 2026
Jul 13, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in PressTigers Universal Clocks universal-clocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Universal Clocks: from n/a through <= 1.2.0.
CVE-2026-57781
-
-
Oct 24, 2026
Jul 13, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in Sovlix MeetingHub meetinghub allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MeetingHub: from n/a through <= 1.25.10.
CVE-2026-57779
-
-
Oct 24, 2026
Jul 13, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in themebeez Fascinate fascinate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fascinate: from n/a through <= 1.1.5.
CVE-2026-57778
-
-
Oct 24, 2026
Jul 13, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in wpdevart Booking calendar, Appointment Booking System booking-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking calendar, A...Show more
Missing Authorization vulnerability in wpdevart Booking calendar, Appointment Booking System booking-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking calendar, Appointment Booking System: from n/a through <= 3.2.36.Show less
CVE-2026-57776
-
-
Oct 24, 2026
Jul 13, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in vowelweb VW Wedding vw-wedding allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW Wedding: from n/a through <= 1.3.7.
CVE-2026-57774
-
-
Oct 24, 2026
Jul 13, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in vowelweb VW Food Corner vw-food-corner allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW Food Corner: from n/a through <= 1.1.0.
CVE-2026-57740
-
-
Oct 24, 2026
Jul 13, 2026
N/A· v4
7.1 HIGH· v3
N/A· v2
Missing Authorization vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AcyMailing SMTP Newslette...Show more
Missing Authorization vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AcyMailing SMTP Newsletter: from n/a through <= 10.11.1.Show less
CVE-2026-57729
-
-
Oct 24, 2026
Jul 13, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flatsome: from n/a through <= 3.20.5.
CVE-2026-57727
-
-
Oct 24, 2026
Jul 13, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Missing Authorization vulnerability in Themeum Kirki kirki allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kirki: from n/a through 6.2.0.
CVE-2026-57705
-
-
Oct 24, 2026
Jul 13, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Missing Authorization vulnerability in Nexcess Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through <= 5.28.5.