Authorization Bypass Through User-Controlled Key

Vulnerability

Threat entity extracted from intelligence sources

Frequency

4

occurrences

First Seen

December 12, 2025

Last Seen

September 8, 2026

Overview

Recent Events

Related Clusters (4)

Microsoft September 2026 Patch Tuesday: Record 974 Vulnerabilities Addressed

2d ago·76 sources

Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching

Feb 9·1495 sources

IDOR Vulnerability in Frappe Framework Exposes User Email Configurations

Jun 13·3 sources

2025 CWE Top 25 Most Dangerous Software Weaknesses Released

Dec 11·10 sources

Related Articles (4)

Microsoft Patch Tuesday for September 2026

Blog.Talosintelligence·2d ago

CVE-2026-44207 CVE Vulnerability Disclosures / 1d Frappe is a full-stack web application framework. Prior to versions 15.107.0 and 16.17.0, an IDOR vulnerability allows authenticated users to access other users' email configuration details. This issue has been patched in versions 15.107.0 and 16.17.0.

cve.report·Jun 13

CVE-2026-7201 TheHackerWire / 6h Attack Vector How the vulnerability can be exploited Network Successful exploitation requires knowledge of values that are not generally exposed to low-privileged users.

www.thehackerwire.com·Jun 3

MITRE shares 2025's top 25 most dangerous software weaknesses

Bleepingcomputer·Dec 12

Related Entities

Elevation Of Privilege Improper Authentication Cisco Ivanti Palo Alto CVE-2026-44207 CVE-2026-58599 CVE-2026-62906 CVE-2026-62916 CVE-2026-65669 CVE-2026-65772 CVE-2026-65818