emailflare before commit cf31f33 Missing Authorization via /api/keys Routes

emailflare before commit cf31f33 contains a missing authorization vulnerability in the inbox service /api/keys routes that allows any authenticated member to list, create and revoke API keys. Attackers can mint a global live API key accepted by /v1/send to send mail from any domain, or revoke existing keys to disable integrations.

Wazuh 4.9.0 before 4.14.9 Authorization Header Override via /api/request

Wazuh dashboard plugins from 4.9.0 before 4.14.9 contain an authorization bypass vulnerability that allows authenticated dashboard users to override the Manager API Authorization header via the /api/request proxy endpoint. Attackers can supply nested body.headers.Authorization values that replace the server-side session Bearer token, letting them act as another Manager API identity or send unauthenticated upstream requests.

Quest Foglight for Databases runScript Incorrect Authorization Remote Code Execution Vulnerability

Quest Foglight for Databases runScript Incorrect Authorization Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is required to exploit this vulnerability. The specific flaw exists within the runScript function. The issue results from incorrect authorization prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-29192.

In JetBrains YouTrack before 2026.2.19562 missing authorization in the saved query endpoint allowed disclosure of issue descriptions

Information Disclosure via User Search Queries in JetBrains Hub

In JetBrains Hub before 2026.2.52519 information disclosure via user search queries was possible

Privilege Escalation via Unchecked Visibility Changes in JetBrains YouTrack

In JetBrains YouTrack before 2026.2.19656 users without update permission could change issue visibility

Information Disclosure via Shared Mailbox Message History in JetBrains YouTrack Before 2026.2.19562

In JetBrains YouTrack before 2026.2.19562 information disclosure via shared mailbox message history was possible

Authorization flaw in JetBrains YouTrack scripts debugger enables script disclosure and suspension

In JetBrains YouTrack before 2026.2.19197 incorrect authorisation in the scripts debugger allowed workflow script disclosure and suspension

Read‑Only Users Can Modify Authentication Module Group Mappings Without Proper Authorization

In JetBrains Hub before 2026.2.52519 missing authorisation allowed users with read-only access to modify auth module group mappings

RStudio Server / Posit Workbench localhost port-proxy does not enforce per-session port ownership

Authorization bypass through user-controlled key in the localhost port-proxy (/p/<token>/) in Posit Software, PBC RStudio Server and Posit Workbench before 2026.08.0 allows remote authenticated users to reach web applications and other services bound to 127.0.0.1 under a different user's session, and to view their live rendered content and data, via a proxy URL constructed from the attacker's own port token for an arbitrary port number. The port token is a documented obfuscation measure and not an authorization boundary, and the proxy does not verify that the requested port belongs to the requesting user's session. NOTE: exploitation requires an authenticated account on the same multi-user server and a target service listening on localhost at the time of access. Impact may be greater on hosts that co-locate additional privileged localhost services, and the bypass is not prevented by allow-shell=false; no setting restricts the port-proxy without disabling all application proxying.

Remote Code Execution via Fork Updates in JetBrains Junie GitHub Action

In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updates

Certificate Name Authorization Bypass

Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows a client that holds a CA-signed certificate whose name extends or shortens an authorized hostname to be authorized as that host. This enables impersonation of other nodes and, in Puppet Enterprise, access to certificate-authority administration and remote command execution on managed nodes. Exploitation requires a certificate with a colliding name, which the certificate authority issues by approval or autosign.

Privilege Escalation via Deletion of Cross-Project VCS Integrations in JetBrains YouTrack

In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another project

In JetBrains YouTrack before 2026.2.19562 sprint creation allowed moving issues from inaccessible projects between sprints

Missing Authorization Enables Project Admin to Modify VCS Hosting Configurations

In JetBrains YouTrack before 2026.2.19562 missing authorization allowed Project Admin to manage VCS hosting server configurations

YouTrack Article Visibility Bypass in Restricted Articles

In JetBrains YouTrack before 2026.2.19197 article editors could change visibility of restricted child articles

Authorization bypass allowing visibility changes in JetBrains YouTrack

In JetBrains YouTrack before 2026.2.19562 missing authorization allowed users with read-only access to change issue visibility settings

Missing Authorization Allows Arbitrary Tag Assignment in JetBrains YouTrack

In JetBrains YouTrack before 2026.2.19562, 2026.1.14137, 2025.3.169041 missing authorization allowed attaching tags to any issue via the tag issues collection

Tanium addressed an improper access controls vulnerability in Discover.

Tanium addressed an improper access controls vulnerability in Discover.

Tanium addressed an improper access controls vulnerability in Discover.

Tanium addressed an improper access controls vulnerability in Discover.