Tag
CVE-2026-48390: Adobe Bridge Privilege Escalation via Incorrect Authorization
2 TTPs 1 CVEA critical privilege escalation vulnerability, CVE-2026-48390, in Adobe Bridge allows an attacker to gain unauthorized read and write access if a victim opens a specially crafted malicious file, leading to potential system compromise.
Adobe Commerce Incorrect Authorization Vulnerability (CVE-2026-34646)
2 rules 2 TTPs 1 CVEAdobe Commerce versions 2.4.9-beta1 and earlier are vulnerable to an Incorrect Authorization issue (CVE-2026-34646) that allows attackers to bypass security features and gain unauthorized write access without user interaction.
Esri Portal for ArcGIS Incorrect Authorization Vulnerability (CVE-2026-33519)
2 rules 1 TTP 1 CVECVE-2026-33519 is a critical vulnerability in Esri Portal for ArcGIS 11.4, 11.5, and 12.0, where incorrect authorization checks on developer credentials can lead to unauthorized privilege escalation on Windows, Linux, and Kubernetes deployments.
XenForo OAuth2 Unauthorized Scope Request Vulnerability
2 rules 1 TTP 1 CVEXenForo before 2.3.5 allows OAuth2 client applications to request unauthorized scopes, potentially allowing client applications to gain access beyond their intended authorization level due to improper authorization checks.
Vitals ESP Incorrect Authorization Vulnerability (CVE-2026-4639)
2 rules 1 TTPCVE-2026-4639 is an Incorrect Authorization vulnerability in Galaxy Software Services' Vitals ESP, allowing authenticated remote attackers to perform administrative functions and escalate privileges.