CVE record · 2 sources
CVE-2026-90450
CVSS 3.1The application's role-authorization lookup defaults to granting access when a request handler's name is not present in its table of role…
- Vendor
- Microsoft
- CVSS
- 3.1
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
CISA Malcolm
The following versions of CISA Malcolm are affected: Malcolm CVSS Vendor Equipment Vulnerabilities v3 8.8 CISA CISA Malcolm Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Improper…
-
The application's role-authorization lookup defaults to granting access when a request handler's name is not present in its table of role…
The application's role-authorization lookup defaults to granting access when a request handler's name is not present in its table of role requirements, rather than defaulting to deny. Any request handler that is not explicitly…