Known Vulnerabilities for Access by Bosch
Listed below are 2 of the newest known vulnerabilities associated with "Access" by "Bosch".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-126545 json | WWBN AVideo through 29.7.1 contains a missing authorization vulnerability in API::get_api_tags() in plugin/API/API.php that a... | Not Provided | 2026-11-11 | 2026-11-11 |
| CVE-2026-126136 json | For Exchange accounts using EWS or Microsoft Graph with OAuth2 authentication, Thunderbird sent the OAuth2 access token to th... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-126129 json | The Auth0 ASP.NET Core Authentication SDK incorrectly determines a session's OIDC Back-Channel Logout status, which may resul... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-126128 json | The Management API client in the Auth0 Node.js SDK improperly neutralizes path parameters, allowing a request and its attache... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-126123 json | BeeS Software Solutions ERP before 04 September 2026 allows any low-privileged user to navigate directly to the administrativ... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-126083 json | Action Pack is a framework for handling and responding to web requests. From 8.1 until 8.1.4.1, Since Rails 8.1.0, ActionDisp... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-125754 json | Dolibarr 20.0.0 through 23.0.4 and 24.x before 24.0.2 contains an insecure direct object reference vulnerability in api_expen... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-125753 json | ABP Framework 2.9.0 before 10.6.2 and 10.7.0 pre-releases before 10.7.0 contain a path traversal vulnerability in DefaultBlob... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-125745 json | Custom Post Types and Custom Fields creator (WCK) before 2.4.1 contains a missing authorization vulnerability that allows aut... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-125744 json | Our API endpoint for changing ticket layouts did not properly check permissions of the requesting user or API token. An attac... | Not Provided | 2026-11-10 | 2026-11-10 |