CWE-862
Missing Authorization
Description
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-665
CVEs mapped to this weakness (9,267)
page 437 of 464| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-65537 | Med | 0.00 | 4.3 | 0.00 | Jul 23, 2026 | Subscriber Broken Access Control in Cyr to Lat reloaded – transliteration of links and file names <= 1.3.3 versions. | ||
| CVE-2026-65531 | Med | 0.00 | 4.8 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in Qubely <= 1.8.14 versions. | ||
| CVE-2026-65530 | Med | 0.00 | 4.3 | 0.00 | Jul 23, 2026 | Subscriber Broken Access Control in TemplateSpare <= 4.2.2 versions. | ||
| CVE-2026-65529 | Med | 0.00 | 5.3 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in Graphina <= 3.1.12 versions. | ||
| CVE-2026-65525 | Med | 0.00 | 5.3 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in Civi Framework <= 2.2.0 versions. | ||
| CVE-2026-65524 | Med | 0.00 | 4.3 | 0.00 | Jul 23, 2026 | Contributor Broken Access Control in Avada Custom Branding <= 1.2 versions. | ||
| CVE-2026-65506 | Med | 0.00 | 5.3 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.12 versions. | ||
| CVE-2026-65500 | Hig | 0.00 | 7.5 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in Manual - Documentation, Knowledge Base & Education WordPress Theme <= 7.5.4 versions. | ||
| CVE-2026-65499 | Med | 0.00 | 6.5 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in PeproDev Ultimate Invoice <= 2.2.6 versions. | ||
| CVE-2026-65495 | Hig | 0.00 | 7.5 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in Dokan Pro <= 5.0.3 versions. | ||
| CVE-2026-65491 | Med | 0.00 | 4.3 | 0.00 | Jul 23, 2026 | Subscriber Broken Access Control in Query Wrangler <= 1.5.57 versions. | ||
| CVE-2026-65489 | Med | 0.00 | 5.3 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in LA-Studio Element Kit for Elementor <= 1.6.2 versions. | ||
| CVE-2026-65487 | Med | 0.00 | 5.3 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in Photography <= 7.7.6 versions. | ||
| CVE-2026-65486 | Med | 0.00 | 5.3 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in Event post <= 6.0.1 versions. | ||
| CVE-2026-65485 | Med | 0.00 | 5.3 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in Content Control <= 2.6.5 versions. | ||
| CVE-2026-65484 | Med | 0.00 | 6.3 | 0.00 | Jul 23, 2026 | Contributor Broken Access Control in Style Kits <= 2.6.5 versions. | ||
| CVE-2026-65479 | Med | 0.00 | 5.4 | 0.00 | Jul 23, 2026 | Subscriber Broken Access Control in Reviewer <= 3.14.2 versions. | ||
| CVE-2026-65478 | Med | 0.00 | 5.4 | 0.00 | Jul 23, 2026 | Subscriber Broken Access Control in ListingPro <= 2.9.10 versions. | ||
| CVE-2026-65476 | Med | 0.00 | 5.3 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in Civi <= 2.2.4 versions. | ||
| CVE-2026-65472 | Med | 0.00 | 5.3 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in Kit (formerly ConvertKit) <= 3.3.5 versions. |
- risk 0.00cvss 4.3epss 0.00
Subscriber Broken Access Control in Cyr to Lat reloaded – transliteration of links and file names <= 1.3.3 versions.
- risk 0.00cvss 4.8epss 0.00
Unauthenticated Broken Access Control in Qubely <= 1.8.14 versions.
- risk 0.00cvss 4.3epss 0.00
Subscriber Broken Access Control in TemplateSpare <= 4.2.2 versions.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Broken Access Control in Graphina <= 3.1.12 versions.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Broken Access Control in Civi Framework <= 2.2.0 versions.
- risk 0.00cvss 4.3epss 0.00
Contributor Broken Access Control in Avada Custom Branding <= 1.2 versions.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Broken Access Control in MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.12 versions.
- risk 0.00cvss 7.5epss 0.00
Unauthenticated Broken Access Control in Manual - Documentation, Knowledge Base & Education WordPress Theme <= 7.5.4 versions.
- risk 0.00cvss 6.5epss 0.00
Unauthenticated Broken Access Control in PeproDev Ultimate Invoice <= 2.2.6 versions.
- risk 0.00cvss 7.5epss 0.00
Unauthenticated Broken Access Control in Dokan Pro <= 5.0.3 versions.
- risk 0.00cvss 4.3epss 0.00
Subscriber Broken Access Control in Query Wrangler <= 1.5.57 versions.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Broken Access Control in LA-Studio Element Kit for Elementor <= 1.6.2 versions.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Broken Access Control in Photography <= 7.7.6 versions.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Broken Access Control in Event post <= 6.0.1 versions.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Broken Access Control in Content Control <= 2.6.5 versions.
- risk 0.00cvss 6.3epss 0.00
Contributor Broken Access Control in Style Kits <= 2.6.5 versions.
- risk 0.00cvss 5.4epss 0.00
Subscriber Broken Access Control in Reviewer <= 3.14.2 versions.
- risk 0.00cvss 5.4epss 0.00
Subscriber Broken Access Control in ListingPro <= 2.9.10 versions.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Broken Access Control in Civi <= 2.2.4 versions.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Broken Access Control in Kit (formerly ConvertKit) <= 3.3.5 versions.