Pending AI Enrichment

This vulnerability was recently detected via the live feed and has not yet been processed by Precogs AI's context enrichment engine. The data below represents raw telemetric data.

RAW NVD TELEMETRY

CVE-2026-105121

CVSS Base Score
4.9 MEDIUM
Primary Weakness
CWE-285
Published Date
Oct 3, 2026
Data Source
NVD API

OpenAM before 16.1.3 contains an improper authorization vulnerability that allows delegated administrators to destroy sessions outside their realms because realm checks use the requester's realm. Authenticated accounts holding the iplanet-am-session-destroy-sessions attribute can supply a target session identifier or handle to forcibly log out users in any realm.

Related Vulnerabilitiesvia CWE-285

CVE-2026-3310510 CRITICAL

Improper Authorization in Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network

CWE-285CWE-863
CVE-2026-340515.4 MEDIUM

Broken Access Control in OpenEMR Import/Export functionality before 8.0.0.3. Unauthorized users can perform direct requests to trigger data extraction and manipulation despite UI restrictions.

CWE-285
CVE-2026-340567.7 HIGH

Broken Access Control in OpenEMR up to 8.0.0.3 allows low-privilege users to view and download eRx error logs. This flaw compromises confidentiality by exposing sensitive patient information.

CWE-285
CVE-2026-331869.1 CRITICAL

gRPC-Go is the Go language implementation of gRPC.

CWE-285
CVE-2026-318368.1 HIGH

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations.

CWE-269CWE-285
CVE-2026-318690 UNKNOWN

Discourse is an open-source discussion platform.

CWE-200CWE-285CWE-639

Is your system affected?

Precogs AI detects CVE-2026-105121 in compiled binaries, LLMs, and application layers — even without source code access.

Request Deep AnalysisBook a demo