Search: “acl”

15 items

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 82 Exploit / PoC 29 Ransomware 29 Malware 15 Threat actor 13 Industry 12 Data breach 7 Policy & legal 6 Advisory 6 AI safety & security 4 AI tools & infra 3 Research 3 AI research 2 Tools 1

SeverityAll critical 101 high 45 medium 44 low 15 info 7

ACL and Rsam unveil new brand and product platform

Help Net SecurityMay 14, 00:00 UTC · May 14, 2019Industry

[20260809] - Core - Improper ACL checks when injection schema.org contact data

Joomla fixed CVE-2026-73372, an improper ACL check that leaks inaccessible contact items' data into schema.org snippets, affecting CMS 5.1.0-5.4.7 and 6.0.0-6.1.2.

Joomla security advisory 20260809 describes CVE-2026-73372, an incorrect access control issue when injecting schema.org contact data. Improper access checks inject contact information for inaccessible contact items into schema.org snippets, exposing restricted data. Affected versions are 5.1.0-5.4.7 and 6.0.0-6.1.2; fixes ship in 5.4.8 and 6.1.3. The issue was reported by Stefan Wendhausen on 2026-07-31.

Joomla Security CentreAug 17, 14:00 UTC · Aug 17, 2026Advisory CVE-2026-73372

[20260808] - Core - Improper ACL checks for batch copy actions

Joomla fixed CVE-2026-73371, an improper ACL check letting unauthorized users batch-copy uneditable items in Joomla CMS 4.0.0-5.4.7 and 6.0.0-6.1.2.

Joomla security advisory 20260808 describes CVE-2026-73371, an incorrect access control issue in batch copy actions. The flaw allows unauthorized users to perform copy batch operations on items they cannot edit. Affected versions are 4.0.0-5.4.7 and 6.0.0-6.1.2; fixes ship in 5.4.8 and 6.1.3. The issue was reported by Sabuhi Mammadov on 2026-07-28.

Joomla Security CentreAug 17, 14:00 UTC · Aug 17, 2026Advisory CVE-2026-73371

Adalanche: Open-source Active Directory ACL visualizer, explorer

Help Net SecurityApr 9, 17:28 UTC · Apr 9, 2024Tools

Amazon S3 to apply security best practices for all new buckets

Help Net SecurityApr 20, 08:41 UTC · Apr 20, 2026Industry

Redis 6.0 and Redis Enterprise 6.0 offer customers new security and operational capabilities

Help Net SecurityMay 5, 00:00 UTC · May 5, 2020Industry

CVE-2026-82437: Apache Storm Logviewer: Log Access Controls Not Enforced by Logviewer

Apache Storm Logviewer ignores logs.users and logs.groups ACLs for daemon logs, letting unauthorized users read sensitive logs.

CVE-2026-82437 (severity: moderate) affects Apache Storm Logviewer (storm-webapp) versions 3.0.0 before 3.1.0. The Logviewer offers logs.users and logs.groups settings for operators to control who may read log content, but for daemon logs the access decision combined the "this is a daemon log" flag with the authorizer result in a way that discarded the authorizer's answer. As a result, configured access controls were not enforced and unauthorized users could read daemon log content.