CWE-862: Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
Also known as AuthZ.
A kind of CWE-285 Improper Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- unknown court reservationCourt Reservation < 1.12.4 - Unauthenticated Arbitrary Challenge Deletion5.3 Medium
- masaakitanaka booking packageBooking Package < 1.7.33 - Unauthenticated Verification Email Sending to Arbitrary Recipient5.3 Medium
- bplugins animated text block – add typing and looping text effectsAnimated Text Block <= 1.2.6 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'id' Shortcode Attribute7.5 High
- growi, inc. growiGROWI contains a missing authorization check vulnerability in its collaborative editing feature....6.9 Medium
- google chromeUse after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...8.8 High
- google chromeMissing authorization in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker...9.3 Critical
- jhuckaby cronicleCronicle: Non-admin uid/gid injection in create_event/update_event → run-as-arbitrary-user (incl. root) — sibling of CVE-2026-394018.8 High
- membershipworksMembershipWorks WordPress Plugin < 6.17 Information Disclosure via WordPress REST API8.7 High
- strapi open source and enterprise headless cmsCVE-2026-1181716.5 Medium
- strapi open source and enterprise headless cmsCVE-2026-1181709.1 Critical
- tanium complyTanium addressed an improper access controls vulnerability in Comply.6.0 Medium
- tanium enforceTanium addressed an improper access controls vulnerability in Enforce.4.3 Medium
- openwisp openwisp-controllerOpenWISP Controller CA CRL REST API does not scope requests to managed organizations5.3 Medium
- grafana enterprise, oss +1 moreCVE-2026-16491 CVE Record6.5 Medium
- watchguard fireware osFireware OS Missing Authentication in FireCluster Sync Allows Privilege Escalation8.7 High
- watchguard fireware osFireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injection9.2 Critical
- hwk-fr advanced custom fields: extendedAdvanced Custom Fields: Extended <= 0.9.2.6 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via Email Action Dynamic File Field4.8 Medium
- opnsense coreREDAXO before 5.21.4 Missing Authorization in Version and History Previews7.1 High
- opnsense coreREDAXO before 5.21.5 Privilege Escalation via Backup Export of Authentication Tables7.7 High
- opnsense coreREDAXO core before 5.21.5 Missing Authorization in rex_api_package API6.1 Medium
- semantic-mediawiki semantic mediawiki, semanticmediawiki +1 moreSemantic MediaWiki 7.3.0 before 7.3.1 Missing Authorization via smwtask Update Task6.9 Medium
- semantic-mediawiki semantic mediawiki, semanticmediawiki +1 moreSemantic MediaWiki 2.5.0 before 7.3.1 Missing Authorization via Is edit protected7.1 High
- semantic-mediawiki semantic mediawiki, semanticmediawiki +1 moreSemantic MediaWiki 7.3.0 Missing Authorization via smwtask API run-joblist and update6.9 Medium
- google compute engineMissing Authorization in Compute Engine allows Cross-Project Disk Exfiltration8.3 High
- esaqa gmbh psonoFile-transfer type confusion permits unauthorized repository writes in Psono Server5.4 Medium
- code-projects simple content management systemcode-projects Simple Content Management System Admin welcome.php authorization6.9 Medium
- apple ipados, macos, visionos +2 more +4 moreAn authorization issue was addressed with improved state management. This issue is fixed in iOS...5.5 Medium
- apple ipados, macos, visionos +2 more +4 moreAn authorization issue was addressed with improved access control. This issue is fixed in iOS 27...5.5 Medium
- apple macosAn authorization issue was addressed with improved state management. This issue is fixed in macOS...5.5 Medium
- apple ipados, ios and ipados, iphone os +2 moreAn authorization issue was addressed with improved entitlement checks. This issue is fixed in iOS...5.5 Medium
- apple macosAn authorization issue was addressed with improved state management. This issue is fixed in macOS...5.5 Medium
- apple macosAn authorization issue was addressed with improved access control. This issue is fixed in macOS...7.8 High
- apple ipados, macos, visionos +2 more +4 moreThis issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.7.2...7.5 High
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...4.4 Medium
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...4.9 Medium
- apple ipados, ios and ipados, iphone os +2 moreAn authorization issue was addressed with improved state management. This issue is fixed in iOS...5.5 Medium
- apple ipados, tvos, visionos +3 more +5 moreThis issue was addressed with additional entitlement checks. This issue is fixed in iOS 27.2 and...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreThis issue was addressed with additional entitlement checks. This issue is fixed in iOS 27.2 and...7.5 High
- apple ipados, macos, tvos +4 more +6 moreAn authorization issue was addressed with improved state management. This issue is fixed in iOS...5.5 Medium
- apple ipados, macos, visionos +3 more +5 moreAn authorization issue was addressed with improved state management. This issue is fixed in iOS...5.5 Medium
- apple ipados, macos, visionos +2 more +4 moreThis issue was addressed with improved checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7...6.1 Medium
- apple ipados, macos, visionos +2 more +4 moreAn authorization issue was addressed with improved state management. This issue is fixed in iOS...5.5 Medium
- apple ipados, macos, visionos +2 more +4 moreAn authorization issue was addressed with improved state management. This issue is fixed in iOS...5.5 Medium
- apple macosA logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2,...5.5 Medium
- apple ipados, ios and ipados, iphone os +2 moreAn authorization issue was addressed with improved state management. This issue is fixed in iOS...5.5 Medium
- apple ipados, ios and ipados, iphone os +2 moreThis issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2....5.5 Medium
- apple ipados, tvos, visionos +3 more +5 moreA permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7.2...5.5 Medium
- apple macosThis issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreAn authorization issue was addressed with improved state management. This issue is fixed in iOS...5.5 Medium
- apple macosAn authorization issue was addressed with improved state management. This issue is fixed in macOS...5.5 Medium
- Show moreLoading…