authorization bypass

Everything Patch Observer has reported about authorization bypass: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

On-prem and Cloud Unblu Spark Users Face Config Tampering via CVE-2026-9589 in Versions Before 8.37.0

A critical flaw in Unblu Spark allows authenticated attackers to read and modify configuration data for other users and accounts across on-premises and cloud deployments.

Oct 20, 2026

Vulnerabilities

QNAP Video Station patch fixes high-severity remote data leak vulnerability

QNAP releases Video Station 5.8.8 to fix CVE-2026-44084, an authorization bypass allowing remote attackers to access sensitive data on affected NAS devices.

Oct 15, 2026