CWE-639 - Authorization Bypass Through User-Controlled Key (IDOR) - Cwe

Related Threat Clusters

• Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching

  BeyondTrust has issued a warning regarding a critical remote code execution (RCE) vulnerability in its Remote Support and Privileged Remote Access software. The flaw, tracked as CVE-2026-1731, allows unauthenticated…

  1059 articles · Updated February 9, 2026
• IDOR Vulnerability in Frappe Framework Exposes User Email Configurations

  CVE-2026-44207 is an IDOR vulnerability in the Frappe web application framework, affecting versions prior to 15.107.0 and 16.17.0. Authenticated users could exploit this flaw to access other users' email configuration…

  3 articles · Updated June 13, 2026
• Vulnerabilities in Vibe-Coded Applications Highlighted

  Recent analyses of vibe-coded applications reveal common security vulnerabilities due to the nature of AI coding agents. Tenzai's research identified 69 vulnerabilities across five popular coding agents, focusing on…

  2 articles · Updated June 1, 2026

Recent Intelligence Reports

• CVE-2026-44207 CVE Vulnerability Disclosures / 1d Frappe is a full-stack web application framework. Prior to versions 15.107.0 and 16.17.0, an IDOR vulnerability allows authenticated users to access other users' email configuration details. This issue has been patched in versions 15.107.0 and 16.17.0. — cve.report · June 13, 2026
• CVE-2026-7787 - Unauthenticated Session History Access via Public Flow Execution — Cvefeed · June 11, 2026
• CVE-2026-7201 TheHackerWire / 6h Attack Vector How the vulnerability can be exploited Network Successful exploitation requires knowledge of values that are not generally exposed to low-privileged users. — www.thehackerwire.com · June 3, 2026
• 5 Vulnerabilities in Every Vibe-Coded App — Strobes.Co · May 29, 2026

Related Entities