CVE-2026-69802

The Network Device Enrollment Service (NDES) is impacted by a weak authentication vulnerability (CWE-1390). This flaw allows an unauthorized attacker to achieve remote code execution over the network. The vulnerability carries a HIGH base severity score of 8.1. While the documents confirm the imp...

CVE-2026-85922

A weak authentication vulnerability in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network. This security control bypass has a CVSS v3.1 score of 7.4 and is categorized as HIGH severity. Microsoft has released updates to address this vulnerability; users ar...

CVE-2026-85884

The Windows Health and Optimized Experiences Service is vulnerable to a privilege escalation flaw due to missing authentication for a critical function (CWE-306). An authorized attacker can exploit this to elevate privileges locally on the affected system. While the CVSS 3.1 score is 7.8 (High) ,...

CVE-2026-83840

A weak authentication vulnerability in Windows Error Reporting allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-1390 . While the CVSS v3.1 score is 7.8 (High) , the documents do not provide specific software versions, root cause detail...

CVE-2026-83511

A weak authentication vulnerability in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. The vulnerability is associated with CWE-1390 . According to the provided metrics, the issue has a High base severity score of 7.4. Specific deta...

CVE-2026-62879

A missing authentication vulnerability in Windows SmartScreen (CWE-306) allows an authorized attacker to perform tampering locally . The vulnerability impacts the integrity of the system by enabling unauthorized modifications to critical functions. No specific exploit details or in-the-wild explo...

CVE-2026-96313

A missing authentication flaw in Windows Push Notifications allows an authorized attacker to perform a local privilege escalation . The root cause is identified as CWE-307 (Missing Authentication for Critical Function). The vulnerability has a High severity base score of 7.0, indicating significa...

CVE-2020-35391-POC

Welcome to CVE-2020-35391-POC 👋 Tenda N300 Authentication Bypass via Malformed HTTP Request Header Python POC Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information possibly including an httppasswd line via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg, ...

CVE-2026-70175

A vulnerability in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network due to improper authentication . The vulnerability has a CVSS 3.1 base score of 8.1 (High) . While the technical root cause and specific versions are not detailed in the provided documents, the im...

CVE-2026-70179

A vulnerability in ASP.NET Core allows an authorized attacker to achieve elevation of privilege over a network. The root cause is an authentication bypass by spoofing (CWE-290). Exploitation details and specific affected versions are not provided in the documents, but the vulnerability carries a ...

CVE-2026-70005

Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network. This vulnerability is associated with CWE-1390 (Weak Authentication). While the base CVSS score is 5.9 (Medium) , the attack complexity is high. No spec...

CVE-2026-69982

A weak authentication vulnerability in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network. The vulnerability is associated with CWE-1390 . While the base severity score is 5.9 (Medium) , the impact is primarily on integrity (Hi...

CVE-2026-85939

A weak authentication vulnerability in the Windows Kernel allows an authorized attacker to bypass a security feature over a network. The vulnerability is associated with CWE-1390 and carries a Medium severity rating. While the impact is noted as High for integrity , the documents do not provide s...

CVE-2026-83674

A weak authentication vulnerability exists in Active Directory Federation Services (AD FS) , which may allow an unauthorized attacker to perform spoofing over a network. The vulnerability is classified with a HIGH severity base score of 8.1. No specific component-level details, exploit links, or ...

CVE-2026-88158

An out-of-bounds read vulnerability exists in Microsoft Digest Authentication . This flaw allows an authorized attacker to disclose information locally . The vulnerability is characterized by a MEDIUM severity (CVSS 3.1 score of 5.5) and involves an attack vector originating from the local system...

CVE-2026-88101

A weak authentication vulnerability in the Microsoft Input Method Editor (IME) allows an authorized attacker to perform a local elevation of privilege . The vulnerability is associated with CWE-1390 . While the base severity is rated as HIGH (7.8), the documents do not provide specific details re...

CVE-2026-85865

The Windows DHCP Server is susceptible to an improper authentication vulnerability, which allows an authorized attacker to bypass a security feature locally. The vulnerability is associated with CWE-288 (Authentication Bypass Using an Alternate Path or Channel). Exploitation details are not provi...

CVE-2026-85376

CVE-2026-85376 involves weak authentication within the Windows Print Spooler Components . This vulnerability allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.8 (High) , indicating significant impact on confidentiality, integrity, and availability. No...

CVE-2026-85323

Weak authentication in the Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network. The vulnerability is associated with CWE-1390 (Weak Authentication). No specific software versions, root causes, or exploit links are provided in the documents, bu...

CVE-2026-85328

A weak authentication vulnerability exists in the Windows Projected File System . This flaw allows an authorized attacker to perform a local privilege elevation . No specific software versions, root causes, or remediation steps are provided in the documents beyond the existence of an official fix...