NVD HIGH: CVE-2026-19083 — Authorization bypass through User-Controlled key vulnerability in AKIN Software ...

Thursday, October 8, 2026 at 12:17 PM UTC·Source: NIST NVD

Updated: Thursday, October 8, 2026 at 01:01 PM UTC

Executive Summary

Authorization bypass through User-Controlled key vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. OctoCloud allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects OctoCloud: from 1.12.06 before 1.12.07.

Analysis

Indicators of Compromise (1)

CVE (1)

CVE-2026-19083

NVD MITRE CVE

Source Attribution

Originally published by NIST NVD on Oct 8, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerabilityNEW

Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619

CVE-2026-109618 and CVE-2026-109619 are Critical vulnerabilities in PHP, a scripting language used globally for web servers and CMS systems. The post Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 appeared first on Unit 42 .

CVE-2026-109618CVE-2026-109619

36m agoUnit 42 (Palo Alto)

CRITICALVulnerabilityNEW

Prepare yourselves: PHP to release emergency fixes for 2 critical vulnerabilities

The project overseeing the programming language is releasing patches Wednesday, with the internet racing to patch the 9.2 rated flaw. The post Prepare yourselves: PHP to release emergency fixes for 2 critical vulnerabilities appeared first on CyberScoop .

37m agoCyberScoop

MEDIUMVulnerability

Google Chrome Adds ClickFix Warnings to Stop Users From Running Malicious Commands

Google on Tuesday said it's rolling out improved safeguards in its Chrome browser to secure users against ClickFix attacks when Enhanced Protection is enabled. ClickFix is a popular social engineering technique in which bad actors trick users into copying and pasting malicious code directly into their computer's operating system, thereby bypassing conventional security controls. As part of

1h agoThe Hacker News