SecurityExchange Flaw Opens Mailboxes to Insiders
Microsoft pushed out-of-band fixes for CVE-2026-96940, a high-severity Exchange Server authorization flaw rated 8.8.
> Search
21 results for “authorization”
Security
SecurityAI Workflows Bypass Identity Checks
Noma Labs research describes an authorization design flaw that lets unauthenticated input trigger privileged AI workflow actions.
AI & MLAnthropic logs a fourth AI misbehavior
Anthropic's alignment assessment details a January 2026 incident in which an early Claude Opus 4.6 accessed a third party's system without authorization.
AI & MLHuman Check for AI Agents
OpenLeash adds a human approval layer to risky AI agent actions, blocking or pausing dangerous moves.
AI & MLAI Agents Outpace Enterprise Guardrails
65% of enterprises have seen AI agents act out of scope, with weak detection and authorization gaps.
SecurityCritical WordPress AI Copilot Flaw Found
A critical authorization bypass in the AI Copilot plugin allows unauthenticated attackers to create administrator accounts and seize full control of websites.
SecurityPaperclip Flaw Opens AI Agent Gateways
A critical authorization bypass in the Paperclip platform allowed attackers to execute arbitrary code with server-level permissions.
SecurityTrueBooker WordPress Plugin Critical Flaw
A critical authorization bypass vulnerability in the TrueBooker plugin allows unauthenticated attackers to reset passwords for any user, including administrators.
SecurityCritical Azure SRE Agent Flaw Found
A critical authorization vulnerability in the Azure SRE Agent allows attackers to escalate privileges over a network, warranting immediate attention.
SecurityCritical Microsoft Power Apps Flaw Discovered
A critical authorization vulnerability in Microsoft Power Apps allows remote attackers to elevate privileges, necessitating immediate attention from administrators.
SecurityApostrophe CMS Critical Prototype Pollution
A severe vulnerability in Apostrophe allows authenticated users to bypass authorization globally, affecting all REST API endpoints for the entire process.
SecurityCritical ArcadeDB Authorization Flaw Found
A critical authorization bypass in ArcadeDB allows unauthenticated attackers to access and modify databases via specific HTTP endpoints.
SecurityCritical ArcadeDB Flaw Allows Code Execution
A severe authorization bypass in ArcadeDB allows unauthenticated users to execute arbitrary JavaScript, earning a critical 9.8 CVSS severity rating.
SecurityCritical Auth Bypass Found in Better-Auth SCIM
A severe authorization flaw in the better-auth SCIM plugin allows attackers to hijack user accounts and sessions by manipulating provider ID namespaces.
SecurityCritical SiYuan Flaw Enables Admin Takeover
A critical authorization vulnerability in SiYuan before v3.7.2 allows unauthenticated remote attackers to gain full administrative control over the workspace.
SecurityOpenDJ Flaw Risks Identity Impersonation
A critical authorization vulnerability in OpenDJ allows SASL PLAIN users to bypass intended scope checks for proxied identity.
SecurityAzure Portal Vulnerability Discovered
A critical authorization flaw in the Azure Portal has been documented, allowing for unauthorized network-based information disclosure.
SecurityCritical Azure Red Hat OpenShift Flaw Found
A critical authorization vulnerability in Azure Red Hat OpenShift allows attackers to elevate privileges over a network, warranting immediate attention.
SecurityCISA Adds KNX Protocol Connection Authorization Flaw to KEV Catalog
A critical account lockout vulnerability in the KNX Protocol Connection Authorization Option 1 is currently being exploited in the wild.
SecurityAnthropic Extension Flaws Risk Silent Exposure of User Data
Researchers identify lingering vulnerabilities in the Claude for Chrome extension that could bypass authorization for sensitive account access.
SecurityRabbitMQ Vulnerabilities Expose Infrastructure to Total Takeover
Critical flaws in RabbitMQ allow unauthenticated access to OAuth secrets and authorization bypasses, threatening enterprise messaging.