https://poc.intelseclab.com/tags/authorization-bypass/Latest proof-of-concept entries.Hugoen-usSun, 09 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/cloud/2026-08-09_cve-2026-64640-apache-polaris-cross-tenant-credential-vending/Sun, 09 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/cloud/2026-08-09_cve-2026-64640-apache-polaris-cross-tenant-credential-vending/High severity (CVSS 8.1) — cloud · CVE-2026-64640. Status: Patched. Affects: Apache Polaris (Apache Iceberg REST catalog), registerTable and registerView endpoints. Tags: apache-polaris, iceberg, apache-iceberg, credential-vending, confused-deputy, authorization-bypass, cross-tenant, s3, storage, allowed-locations, CWE-441, CWE-639, CWE-918, ssrf, server-side-read, information-disclosure, register-table, register-view.cloudHighapache-polarisicebergapache-icebergcredential-vendingconfused-deputyauthorization-bypasscross-tenants3storageallowed-locationsCWE-441CWE-639CWE-918ssrfserver-side-readinformation-disclosureregister-tableregister-viewhttps://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-33186-grpc-go-rbac-authz-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-33186-grpc-go-rbac-authz-bypass/High severity — network · CVE-2026-33186 (GHSA-p77j-4mvh-x3m3). Status: PoC. Affects: google.golang.org/grpc (grpc-go) authz package (SDK-level RBAC). Tags: grpc, grpc-go, rbac, authorization-bypass, http2, path-normalization, golang, access-control.networkHighgrpcgrpc-gorbacauthorization-bypasshttp2path-normalizationgolangaccess-controlhttps://poc.intelseclab.com/pocs/network/2026-07-03_rustdesk-session-permission-bypass/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-03_rustdesk-session-permission-bypass/High severity — network · None assigned as of 2026-07-03. Status: PoC. Affects: RustDesk (rustdesk/rustdesk) — client relay/session setup and server-side connection dispatcher. Tags: rustdesk, remote-desktop, session-downgrade, authorization-bypass, protocol, relay, filetransfer, rust.networkHighrustdeskremote-desktopsession-downgradeauthorization-bypassprotocolrelayfiletransferrusthttps://poc.intelseclab.com/pocs/cloud/2026-07-03_nextcloud-federated-share-bearer-token-leak/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/cloud/2026-07-03_nextcloud-federated-share-bearer-token-leak/High severity — cloud · None assigned as of 2026-07-03. Status: PoC. Affects: Nextcloud Server — federated file sharing, OCM token exchange, WebDAV bearer authentication. Tags: nextcloud, federated-sharing, ocm, bearer-token, webdav, token-scope, authorization-bypass, oauth-like-flow.cloudHighnextcloudfederated-sharingocmbearer-tokenwebdavtoken-scopeauthorization-bypassoauth-like-flowhttps://poc.intelseclab.com/pocs/web/2026-07-03_cve-2026-45115-mybb-acp-privilege-escalation/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-03_cve-2026-45115-mybb-acp-privilege-escalation/High severity — web · None assigned as of 2026-07-03 (see Notes — CVE-2026-45115 identifies a separate, already-patched MyBB issue). Status: PoC. Affects: MyBB forum software, Admin CP add-user flow. Tags: mybb, privilege-escalation, admin-cp, authorization-bypass, forum-software, php, access-control.webHighmybbprivilege-escalationadmin-cpauthorization-bypassforum-softwarephpaccess-controlhttps://poc.intelseclab.com/pocs/web/2026-07-03_discourse-scoped-api-key-route-bypass/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-03_discourse-scoped-api-key-route-bypass/High severity — web · None assigned as of 2026-07-03. Status: PoC. Affects: Discourse (forum platform). Tags: discourse, authorization-bypass, api-key-scope, rails, middleware, privilege-escalation, route-confusion.webHighdiscourseauthorization-bypassapi-key-scoperailsmiddlewareprivilege-escalationroute-confusionhttps://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-i18n-middleware-bypass/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-i18n-middleware-bypass/High severity (CVSS 7.5) — web · CVE-2026-44573. Status: Weaponized. Affects: Next.js Pages Router with i18n configuration. Tags: middleware-bypass, i18n, _next/data, Pages-Router, authorization-bypass, information-disclosure, Next.js, unauthenticated.webHighmiddleware-bypassi18n_next/dataPages-Routerauthorization-bypassinformation-disclosureNext.jsunauthenticatedhttps://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-segment-prefetch-middleware-bypass/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-segment-prefetch-middleware-bypass/High severity (CVSS 7.5) — web · CVE-2026-44575. Status: Weaponized. Affects: Next.js App Router applications that rely on middleware.ts matchers to protect routes. Tags: authorization-bypass, middleware-bypass, App-Router, segment-prefetch, RSC, Next.js, unauthenticated.webHighauthorization-bypassmiddleware-bypassApp-Routersegment-prefetchRSCNext.jsunauthenticated