CWE-862 - Missing Authorization - Cwe

Related Threat Clusters

• Critical Zero-Day Vulnerability CVE-2026-20182 Exploited in Cisco SD-WAN Systems

  Cisco has disclosed a critical authentication bypass vulnerability, CVE-2026-20182, affecting its Catalyst SD-WAN Controller and Manager. This flaw allows unauthenticated remote attackers to bypass authentication and…

  131 articles · Updated May 14, 2026
• Critical Joomla JCE Vulnerability Under Active Exploitation

  A critical vulnerability in the Joomla Content Editor (JCE), tracked as CVE-2026-48907, allows unauthenticated attackers to execute remote code on affected Joomla sites. This flaw affects JCE versions below 2.9.99.6 and…

  33 articles · Updated June 17, 2026
• Critical Unauthenticated RCE Vulnerability in LiteLLM Exploited in the Wild

  A critical command injection vulnerability, CVE-2026-42271, in LiteLLM, an open-source AI gateway, allows unauthenticated remote code execution (RCE) when chained with CVE-2026-48710, a Host header validation bypass in…

  17 articles · Updated June 9, 2026
• CISA Alerts on Critical Flaws in SimpleHelp, Samsung MagicINFO, and D-Link Devices

  On April 24, 2026, CISA added four actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog. The affected products include SimpleHelp remote management software, Samsung MagicINFO 9 Server, and…

  3 articles · Updated April 26, 2026
• OceanLotus Shifts Focus to Domestic Espionage with SPECTRALVIPER Attacks

  From mid-2024 to early 2026, the Vietnam-aligned APT group OceanLotus has intensified its focus on domestic espionage, utilizing the SPECTRALVIPER backdoor in two major campaigns. The first campaign targeted a…

  17 articles · Updated June 11, 2026
• Critical Vulnerability in Cline Kanban Exposes AI Coding Agents to Hijacking

  A critical vulnerability (CVSS 9.7) in the Cline Kanban server allows any website a developer visits to silently exfiltrate workspace data and inject commands into the AI agent's terminal. This flaw affects version…

  5 articles · Updated May 7, 2026
• Israeli Emergency Agencies Exposed by Cybersecurity Failures, State Comptroller Reports

  A report by Israel's State Comptroller reveals significant cybersecurity gaps in emergency agencies and government ministries, leaving them vulnerable to Iranian cyber threats. The report highlights a 55% increase in…

  4 articles · Updated May 27, 2026
• Critical Auth Bypass Vulnerability in SUSE Elemental Systems (CVE-2026-33186)

  A significant authorization bypass vulnerability (CVE-2026-33186) has been identified in multiple SUSE Elemental systems, including the elemental-system-agent, elemental-toolkit, and elemental-register. This flaw arises…

  52 articles · Updated June 9, 2026
• Amazon Q Developer Vulnerability Enables Cloud Credential Theft

  A high-severity vulnerability (CVE-2026-12957) in Amazon Q Developer for Visual Studio Code allowed attackers to execute arbitrary code and steal AWS credentials by automatically loading malicious MCP server…

  11 articles · Updated June 26, 2026
• Critical WP Maps Pro Vulnerability Exposes 15,000 WordPress Sites to Admin Takeover

  A critical vulnerability (CVE-2026-8732) in the WP Maps Pro WordPress plugin allows unauthenticated attackers to create administrator accounts on affected sites. The flaw affects all versions up to 6.1.0 and was…

  16 articles · Updated May 31, 2026

Recent Intelligence Reports

• Broadcom warns in a security advisory — support.broadcom.com · July 17, 2026
• CC-4814 — Digital.Nhs.Uk · July 15, 2026
• CVE-2026-57221 — nvd.nist.gov · July 15, 2026
• Full Broker Takeover No Login Required Miggo Discovers Critical Rabbitmq Vulnerabilities Putting Application Data At Risk — www.miggo.io · July 15, 2026
• openSUSE Tomcat11 Moderate Security Update for CVE-2026 — Linuxsecurity · July 15, 2026
• openSUSE Tomcat Moderate Security Concern - Advisory 2026-21327 — Linuxsecurity · July 15, 2026
• SFPD drone livestreams exposed operations online for months, investigation shows — Abc7News · July 14, 2026
• Mageia ImageMagick Critical Code Injection Buffer Overflow Vuln 2026 — Linuxsecurity · July 14, 2026

Related Entities