← Back
CWE-862

11,685 CVEs • Abstraction: Class • Likelihood of Exploit: High

Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

JSON object

Loading...

CVEs (11,685)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-57660
-
-
Oct 25, 2026
Jun 26, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Unauthenticated Broken Access Control in Booking and Rental Manager <= 2.7.1 versions.
CVE-2026-57654
-
-
Oct 25, 2026
Jun 26, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Affiliate Broken Access Control in Affiliates Manager <= 2.9.49 versions.
CVE-2026-57649
-
-
Oct 25, 2026
Jun 26, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Subscriber Broken Access Control in Shoppable Images Lite <= 1.3 versions.
CVE-2026-57648
-
-
Oct 25, 2026
Jun 26, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Contributor Broken Access Control in Nelio Content <= 4.3.4 versions.
CVE-2026-57645
-
-
Oct 25, 2026
Jun 26, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
newsletters_subscribers Broken Access Control in Newsletters <= 4.13 versions.
CVE-2026-57640
-
-
Oct 25, 2026
Jun 26, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Subscriber Broken Access Control in MasterStudy LMS <= 3.7.30 versions.
CVE-2026-57632
-
-
Oct 25, 2026
Jun 26, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Subscriber Broken Access Control in Email Marketing for WooCommerce by Omnisend <= 1.19.0 versions.
CVE-2026-57622
-
-
Oct 25, 2026
Jun 26, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Subscriber Broken Access Control in WPCafe <= 3.0.14 versions.
CVE-2026-57430
-
-
Oct 25, 2026
Jun 26, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Contributor Broken Access Control in SEOPress PRO <= 9.1.1 versions.
CVE-2026-57324
-
-
Oct 25, 2026
Jun 26, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Unauthenticated Broken Access Control in GIFT4U <= 1.0.10 versions.
CVE-2026-57323
-
-
Oct 25, 2026
Jun 26, 2026
N/A· v4
5.8 MEDIUM· v3
N/A· v2
Unauthenticated Broken Access Control in Flash & HTML5 Video <= 2.11.0 versions.
CVE-2026-56773
-
-
Oct 25, 2026
Jun 26, 2026
8.7 HIGH· v4
8.8 HIGH· v3
N/A· v2
Teable's v2 REST API controller lacks @Permissions metadata on ORPC endpoints, allowing any authenticated user to bypass authorization checks. Attackers can read table schemas, create tables, and modify or delete records...Show more
Teable's v2 REST API controller lacks @Permissions metadata on ORPC endpoints, allowing any authenticated user to bypass authorization checks. Attackers can read table schemas, create tables, and modify or delete records across bases and tables via endpoints like GET /api/v2/tables/get and POST /api/v2/tables/updateRecords.Show less
CVE-2026-56063
-
-
Oct 25, 2026
Jun 26, 2026
N/A· v4
8.3 HIGH· v3
N/A· v2
Unauthenticated Broken Access Control in MailChimp Block <= 1.1.15 versions.
CVE-2026-56061
-
-
Oct 25, 2026
Jun 26, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Unauthenticated Broken Access Control in Subscriptions for WooCommerce <= 1.9.5 versions.
CVE-2026-56038
-
-
Oct 25, 2026
Jun 26, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Contributor Privilege Escalation in Frisbii Pay <= 1.8.2 versions.
CVE-2026-56025
-
-
Oct 25, 2026
Jun 26, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Unauthenticated Broken Access Control in Paymob for WooCommerce <= 4.1.2 versions.
CVE-2026-54847
-
-
Oct 25, 2026
Jun 26, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Unauthenticated Broken Access Control in Stylish Cost Calculator <= 8.3.9 versions.
CVE-2026-54846
-
-
Oct 25, 2026
Jun 26, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Unauthenticated Broken Access Control in Syncee Premium Dropshipping &amp; Wholesale <= 1.0.27 versions.
CVE-2026-54840
-
-
Oct 25, 2026
Jun 26, 2026
N/A· v4
7.3 HIGH· v3
N/A· v2
Unauthenticated Broken Access Control in Newsletters <= 4.13 versions.
CVE-2026-54837
-
-
Oct 25, 2026
Jun 26, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Unauthenticated Broken Access Control in Intranet &amp; Private Site &#8211; All-In-One Intranet <= 1.8.1 versions.