EUVD-2026-103055

ZKEACMS through 4.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge REST API JWT bearer tokens using a hard-coded HMAC-SHA256 signing key in JwtBearerDefaults.cs. Attackers can sign a token with the Name claim set to 'admin' to call ApiAuthorize...

CVE-2026-111633

The ZKEACMS content management system, versions through 4.4 , is vulnerable to an authentication bypass due to a hard-coded HMAC-SHA256 signing key located in JwtBearerDefaults.cs. Unauthenticated attackers can forge REST API JWT bearer tokens by setting the Name claim to 'admin'. This allows una...

CVE-2026-111633 ZKEACMS through 4.4 Authentication Bypass via Hard-Coded JWT Signing Key

ZKEACMS through 4.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge REST API JWT bearer tokens using a hard-coded HMAC-SHA256 signing key in JwtBearerDefaults.cs. Attackers can sign a token with the Name claim set to 'admin' to call ApiAuthorize...

EUVD-2026-103048

Webreaper Damselfly through 4.5.3 contains an authentication bypass vulnerability that allows unauthenticated attackers to access all /api/ routes because controller authorization attributes are commented out. Attackers can send PUT /api/users with Admin roles to create administrator accounts, or...

CVE-2026-111626

The Webreaper Damselfly software (through version 4.5.3 ) is vulnerable to an authentication bypass because controller authorization attributes are commented out. This flaw allows unauthenticated attackers to access all */api/ routes. By sending a PUT /api/users request with Admin roles, an attac...

CVE-2026-111626 Webreaper Damselfly through 4.5.3 Missing Authentication on REST API Controllers

Webreaper Damselfly through 4.5.3 contains an authentication bypass vulnerability that allows unauthenticated attackers to access all /api/ routes because controller authorization attributes are commented out. Attackers can send PUT /api/users with Admin roles to create administrator accounts, or...

CVE-2026-111626 Webreaper Damselfly through 4.5.3 Missing Authentication on REST API Controllers

Webreaper Damselfly through 4.5.3 contains an authentication bypass vulnerability that allows unauthenticated attackers to access all /api/ routes because controller authorization attributes are commented out. Attackers can send PUT /api/users with Admin roles to create administrator accounts, or...

EUVD-2026-103045

Xiaozhi-esp32-server-java through 6.1.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid device WebSocket tokens by requesting /api/device/ota with any MAC address. Attackers can open a victim device's WebSocket channel to read private role...

CVE-2026-111623

The Xiaozhi-esp32-server-java software (versions through 6.1.0 ) is vulnerable to an authentication bypass (CWE-290) in the OTA endpoint . An unauthenticated attacker can obtain valid device WebSocket tokens by requesting /api/device/ota using any arbitrary MAC address. Successful exploitation al...

CVE-2026-111623 Xiaozhi-esp32-server-java through 6.1.0 Authentication Bypass via OTA Endpoint Token Issuance

Xiaozhi-esp32-server-java through 6.1.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid device WebSocket tokens by requesting /api/device/ota with any MAC address. Attackers can open a victim device's WebSocket channel to read private role...

EUVD-2026-103039

WHartTest through 2.8.1 contains a missing authentication vulnerability that allows unauthenticated attackers to connect to the /ws/ui/web/ and /ws/ui/actuator/ WebSocket endpoints because UiAutomationConsumer accepts every connection. Attackers can register an actuator with a client-supplied id ...

CVE-2026-111617

WHartTest through 2.8.1 contains a missing authentication vulnerability in its UI-Automation WebSocket endpoints . Specifically, the UiAutomationConsumer accepts all connections, allowing unauthenticated attackers to connect to the /ws/ui/web/ and /ws/ui/actuator/ endpoints. An attacker can regis...

CVE-2026-111617 WHartTest through 2.8.1 Missing Authentication on UI-Automation WebSocket Endpoints

WHartTest through 2.8.1 contains a missing authentication vulnerability that allows unauthenticated attackers to connect to the /ws/ui/web/ and /ws/ui/actuator/ WebSocket endpoints because UiAutomationConsumer accepts every connection. Attackers can register an actuator with a client-supplied id ...

CVE-2026-111617 WHartTest through 2.8.1 Missing Authentication on UI-Automation WebSocket Endpoints

WHartTest through 2.8.1 contains a missing authentication vulnerability that allows unauthenticated attackers to connect to the /ws/ui/web/ and /ws/ui/actuator/ WebSocket endpoints because UiAutomationConsumer accepts every connection. Attackers can register an actuator with a client-supplied id ...

CVE-2026-55040

Microsoft SharePoint JWT Authentication Bypass CVE-2026-55040 Overview CVE-2026-55040.py is a proof-of-concept script to leverage the SharePoint authentication bypass vulnerability, CVE-2026-55040. For a full technical analysis, see our Rapid7 Analysis. Usage $ python CVE-2026-55040.py --help...

EUVD-2026-102953

Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate privileges over a network...

CVE-2026-80092

The Microsoft Identity Web component is affected by an authentication bypass vulnerability caused by assumed-immutable data . This flaw allows an authorized attacker to achieve privilege elevation over a network. The vulnerability is associated with CWE-302 . No specific exploit details or remedi...

EUVD-2026-102952

Origin validation error in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to disclose information over a network...

linux-explorer

This project is no longer maintained! Linux Expl0rer Easy-to-use live forensics toolbox for Linux endpoints written in Python & Flask. Capabilities ps View full process list Inspect process memory map & fetch memory strings easly Dump process memory in one click Automatically search hash in publi...

CVE-2026-77771

CVE-2026-77771 — miniOrange 2FA Free & Pro: 2FA Bypass via Session-Scoped OTP Lockout An authentication bypass in the miniOrange Two-Factor Authentication plugin for WordPress allows an attacker who already holds a victim's valid password to brute-force the second factor without limit, defeating...