AUTHORIZATION 7

• CVE-2026-82411 - Objects API Cross-object-type Authorization Bypass Oct 28, 2026
• CVE-2026-102298 - Insufficient Authorization and User Boundary Validation in Omada Controller MSP Oct 14, 2026
• CVE-2026-102298 - Insufficient Authorization and User Boundary Validation in Omada Controller MSP Oct 14, 2026
• CVE-2026-97368 - chillzhuang SpringBlade Vulnerability Sep 24, 2026
• CVE-2026-16195 - Sipeed PicoClaw Group Message Authorization Flaw Jul 18, 2026
• The Red Agent POV Exploiting Broken Object-Level Authorization in an Airline GraphQL API Jun 29, 2026
• Critical Next.js Framework Vulnerability Let Attackers Bypass Authorization Sep 1, 2025