EUVD-2026-103066

Misaka Danmu Server through 2.8.9 contains a missing authentication vulnerability that allows unauthenticated attackers to access audit, diagnostics, data-check, scan-index and health routes under /api/ui lacking the getcurrentuser dependency. Attackers can read audit logs with login IPs, server...

CVE-2026-111644

Misaka Danmu Server versions through 2.8.9 are affected by a missing authentication vulnerability (CWE-306) located under the /api/ui routes. The root cause is the lack of the get_current_user dependency on specific endpoints, including audit, diagnostics, data-check, scan-index, and health route...

CVE-2026-111643

The Misaka Danmu Server (versions through 2.8.9 ) contains an authentication bypass vulnerability (CWE-306) due to an unprotected POST /api/ui/config-history/rollback endpoint. This flaw allows unauthenticated attackers to write arbitrary configuration keys. Specifically, attackers can modify the...

CVE-2026-111644 Misaka Danmu Server through 2.8.9 Missing Authentication on /api/ui Routes

Misaka Danmu Server through 2.8.9 contains a missing authentication vulnerability that allows unauthenticated attackers to access audit, diagnostics, data-check, scan-index and health routes under /api/ui lacking the getcurrentuser dependency. Attackers can read audit logs with login IPs, server...

CVE-2026-111643 Misaka Danmu Server through 2.8.9 Authentication Bypass via Config-History Rollback

Misaka Danmu Server through 2.8.9 contains an authentication bypass vulnerability that allows unauthenticated attackers to write arbitrary configuration keys via the unprotected POST /api/ui/config-history/rollback endpoint. Attackers can set the ipWhitelist key to their own /32 address, or alter...

EUVD-2026-103063

FastapiAdmin through 3.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain sessions for any user by abusing unprotected auto-login endpoints. Attackers can list users via /api/v1/auth/auto-login/users, mint a superuser auto-login token, and exchange i...

CVE-2026-111641

FastapiAdmin versions through 3.0 are vulnerable to an authentication bypass due to unprotected auto-login endpoints. An unauthenticated attacker can exploit this by listing users via /api/v1/auth/auto-login/users, minting a superuser auto-login token , and exchanging it for a JWT session . This ...

CVE-2026-111641 FastapiAdmin through 3.0 Authentication Bypass via Auto-Login Endpoints

FastapiAdmin through 3.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain sessions for any user by abusing unprotected auto-login endpoints. Attackers can list users via /api/v1/auth/auto-login/users, mint a superuser auto-login token, and exchange i...

CVE-2026-111641 FastapiAdmin through 3.0 Authentication Bypass via Auto-Login Endpoints

FastapiAdmin through 3.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain sessions for any user by abusing unprotected auto-login endpoints. Attackers can list users via /api/v1/auth/auto-login/users, mint a superuser auto-login token, and exchange i...

CVE-2026-111639

bbs-go through 4.4.6 contains an authentication bypass vulnerability in the /api/login/googleonetap endpoint that allows remote attackers to log in as other users by submitting Google ID tokens issued to any OAuth client. Attackers operating their own Google OAuth client can capture a victim's...

EUVD-2026-103061

bbs-go through 4.4.6 contains an authentication bypass vulnerability in the /api/login/googleonetap endpoint that allows remote attackers to log in as other users by submitting Google ID tokens issued to any OAuth client. Attackers operating their own Google OAuth client can capture a victim's...

CVE-2026-111639

The bbs-go application (through version 4.4.6 ) contains an authentication bypass vulnerability in the /api/login/google_one_tap endpoint. The root cause is a failure to verify the aud claim in Google-signed ID tokens, allowing remote attackers to replay tokens issued to any OAuth client. By usin...

CVE-2026-111639 bbs-go through 4.4.6 Account Takeover via Google One Tap Login

bbs-go through 4.4.6 contains an authentication bypass vulnerability in the /api/login/googleonetap endpoint that allows remote attackers to log in as other users by submitting Google ID tokens issued to any OAuth client. Attackers operating their own Google OAuth client can capture a victim's...

CVE-2026-111636 OpenBMB StaffDeck through 0.5.6 Authentication Bypass via Hard-Coded Session Secret

OpenBMB StaffDeck through 0.5.6 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator session tokens using the hard-coded default appsecret. Attackers can sign an HMAC-SHA256 token for the seeded 'admin' user in 'tenantdemo' to gain full tena...

EUVD-2026-103059

NexoPOS through 6.2.4 contains a missing authentication vulnerability that allows unauthenticated attackers to read accounting transaction records via GET /api/fields/resource/identifier. Attackers can request transaction field classes like ns.entity-transaction with sequential ids to retrieve...

EUVD-2026-103058

OpenBMB StaffDeck through 0.5.6 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator session tokens using the hard-coded default appsecret. Attackers can sign an HMAC-SHA256 token for the seeded 'admin' user in 'tenantdemo' to gain full tena...

CVE-2026-111637

NexoPOS versions through 6.2.4 are vulnerable to an unauthenticated transaction disclosure flaw via the /api/fields/{resource}/{identifier} endpoint. The root cause is a missing authentication vulnerability where attackers can bypass the nexopos.read.transactions permission. By requesting transac...

CVE-2026-111636

OpenBMB StaffDeck versions through 0.5.6 are vulnerable to an authentication bypass due to a hard-coded default app_secret (CWE-322). This flaw allows unauthenticated attackers to forge HMAC-SHA256 session tokens for the seeded 'admin' user in the 'tenant_demo' tenant. Successful exploitation gra...

CVE-2026-111636 OpenBMB StaffDeck through 0.5.6 Authentication Bypass via Hard-Coded Session Secret

OpenBMB StaffDeck through 0.5.6 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator session tokens using the hard-coded default appsecret. Attackers can sign an HMAC-SHA256 token for the seeded 'admin' user in 'tenantdemo' to gain full tena...

CVE-2026-111637 NexoPOS through 6.2.4 Unauthenticated Transaction Disclosure via /api/fields Endpoint

NexoPOS through 6.2.4 contains a missing authentication vulnerability that allows unauthenticated attackers to read accounting transaction records via GET /api/fields/resource/identifier. Attackers can request transaction field classes like ns.entity-transaction with sequential ids to retrieve...