CVE-2026-106195 — CVE-2026-106195 — Incorrect authorization in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote atta… (35/100)
CVE-2026-100273 — CVE-2026-100273 — In JetBrains YouTrack before 2026.2.19197 authorisation bypass in the scripts debugger allowed arbitrary code… (38/100)
CVE-2026-100277 — CVE-2026-100277 — In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature (38/100)
CVE-2026-71362 — Adobe Commerce and Magento Incorrect Authorization Vulnerability (88/100)
CVE-2026-59270 — vmware spring security: Spring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers an administra… (27/100)
CVE-2026-59318 — vmware spring ai: In Spring AI's tool calling support, the per-request tool list is advertised to the model as a boundary but i… (38/100)
CVE-2026-13738 — commvault commvault: CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operat… (35/100)
CVE-2026-68980 — CVE-2026-68980 — Apache NiFi 2.0.0 through 2.10.0 support creating, reading, and deleting Assets associated with Parameter Con… (9/100)
CVE-2026-14537 — CVE-2026-14537 — Incorrect Authorization in the direct HTTP API tool invocation endpoint in Google mcp-toolbox versions v1.3.0… (24/100)
CVE-2026-48449 — CVE-2026-48449 — Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arb… (30/100)