CVE ID :CVE-2026-110108 Published : Oct. 13, 2026, 5:17 p.m. | 15 minutes ago Description :MateCloud through 5.0.8 contains a missing authorization vulnerability that allows any authenticated user to manage object storage by calling the unprotected /api/v1/admin/storage endpoints in...

#Sicherheitslücke #Cloud

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-110108 - MateCloud through 5.0.8 Missing Authorization via /api/v1/admin/storage API

VERWANDTEARTIKEL

Critical FortiSandbox GUI Vulnerability Allows Remote Attackers to Bypass Authentication

CVE-2026-94603 - Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation

CVE-2026-85990 - Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC Methods

CVE-2026-77459 - Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks

CVE-2026-69227 - BUG-000187331 Portal for ArcGIS has a security vulnerability

CVE-2026-55562 - Cronicle: Stored XSS in admin Activity Log via account full_name field