CWE-862: Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
Also known as AuthZ.
A kind of CWE-285 Improper Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- unknown nexi xpay buildNexi XPay Build <= 7.6.2 - Unauthenticated Payment Completion and Order Key Disclosure8.2 High
- unknown integration for epos now and woocommerceIntegration for Epos Now and WooCommerce 4.6.0 - 4.11.1 - Unauthenticated Action Scheduler Queue Disclosure5.9 Medium
- wolfsshwolfSSH SSH client accepts unsolicited forwarded-tcpip channel opens without an authorization check6.3 Medium
- @backstage plugin-techdocs-backend, backstage, linuxfoundation backstage\/plugin-techdocs-backend +2 moreBackstage: Improper authorization enforcement for TechDocs static content6.5 Medium
- elastic kibanaMissing Authorization in Kibana Leading to Information Disclosure4.3 Medium
- github enterprise serverMissing authorization in GitHub Enterprise Server allowed repository writers to replace default branches via GraphQL6.0 Medium
- multiversx labs s.r.l. multisig-improvedCVE-2026-1065119.8 Critical
- google chromeMissing authorization in Media in Google Chrome on on Windows prior to 155.0.8059.39 allowed a...5.3 Medium
- google chromeMissing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote...6.5 Medium
- google chromeMissing authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote...5.4 Medium
- google chromeMissing authorization in Web Authentication (Passkeys & Security Keys) in Google Chrome prior to...5.4 Medium
- google chromeMissing authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote...6.5 Medium
- google chromeMissing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote...4.2 Medium
- google chromeMissing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote...5.4 Medium
- google chromeMissing authorization in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker...6.5 Medium
- google chromeMissing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker...5.4 Medium
- google chromeMissing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker...8.3 High
- google chromeMissing authorization in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39...4.6 Medium
- google chromeMissing authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote...6.5 Medium
- google chromeMissing authorization in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed...5.9 Medium
- google chromeMissing authorization in DataTransfer in Google Chrome prior to 155.0.8059.39 allowed a remote...5.3 Medium
- google chromeMissing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed a remote...8.1 High
- google chromeMissing authorization in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a...8.4 High
- google chromeMissing authorization in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed...8.1 High
- google chromeMissing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote...4.2 Medium
- google chromeMissing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a...8.8 High
- google chromeMissing authorization in FedCM in Google Chrome prior to 155.0.8059.39 allowed a remote attacker...6.5 Medium
- google chromeMissing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a...5.4 Medium
- google chromeMissing authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote...8.2 High
- google chromeMissing authorization in Navigation in Google Chrome on on iOS prior to 155.0.8059.39 allowed a...7.6 High
- google chromeMissing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote...3.1 Low
- google chromeMissing authorization in BrowserTag in Google Chrome prior to 155.0.8059.39 allowed a remote...4.2 Medium
- google chromeMissing authorization in FullScreen in Google Chrome prior to 155.0.8059.39 allowed a remote...8.3 High
- google chromeMissing authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote...8.8 High
- google chromeMissing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote...4.3 Medium
- google chromeMissing authorization in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote...6.5 Medium
- google chromeMissing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote...6.5 Medium
- google chromeMissing authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote...8.3 High
- google chromeMissing authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker...6.1 Medium
- google chromeMissing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed...9.6 Critical
- google chromeMissing authorization in Translate in Google Chrome prior to 155.0.8059.39 allowed a remote...4.2 Medium
- devolutions serverMissing authorization in the global vault in Devolutions Server 2026.3.7.0 and earlier allows an...7.1 High
- payloadcms payloadPayload: Tenant authorization bypass in Multi-Tenant Plugin7.1 High
- payloadcms payloadPayload: Unauthorized update to collection documents9.8 Critical
- spip crayons pluginSPIP Crayons Plugin < 3.5.0 Authorization Bypass RCE9.3 Critical
- payloadcms payloadPayload relationship-query authorization bypass6.9 Medium
- payloadcms payloadPayload: API key disclosure through ordinary document reads7.7 High
- @payloadcms plugin-stripe, payloadcms payload +1 morePayload: Insufficient Access Control in Stripe REST Proxy6.4 Medium
- @payloadcms plugin-mcp, payloadcms payload +1 morePayload: Improper access control for MCP API keys8.6 High
- dell container storage modulesDell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authorization...6.1 Medium
- Show moreLoading…