210754 matches found
CVE-2026-111623
Xiaozhi-esp32-server-java through 6.1.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid device WebSocket tokens by requesting /api/device/ota with any MAC address. Attackers can open a victim device's WebSocket channel to read private role...
CVE-2026-111623 Xiaozhi-esp32-server-java through 6.1.0 Authentication Bypass via OTA Endpoint Token Issuance
Xiaozhi-esp32-server-java through 6.1.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid device WebSocket tokens by requesting /api/device/ota with any MAC address. Attackers can open a victim device's WebSocket channel to read private role...
CVE-2026-111623 Xiaozhi-esp32-server-java through 6.1.0 Authentication Bypass via OTA Endpoint Token Issuance
Xiaozhi-esp32-server-java through 6.1.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid device WebSocket tokens by requesting /api/device/ota with any MAC address. Attackers can open a victim device's WebSocket channel to read private role...
EUVD-2026-103045
Xiaozhi-esp32-server-java through 6.1.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid device WebSocket tokens by requesting /api/device/ota with any MAC address. Attackers can open a victim device's WebSocket channel to read private role...
CVE-2026-111617
WHartTest through 2.8.1 contains a missing authentication vulnerability that allows unauthenticated attackers to connect to the /ws/ui/web/ and /ws/ui/actuator/ WebSocket endpoints because UiAutomationConsumer accepts every connection. Attackers can register an actuator with a client-supplied id ...
EUVD-2026-103039
WHartTest through 2.8.1 contains a missing authentication vulnerability that allows unauthenticated attackers to connect to the /ws/ui/web/ and /ws/ui/actuator/ WebSocket endpoints because UiAutomationConsumer accepts every connection. Attackers can register an actuator with a client-supplied id ...
CVE-2026-111617 WHartTest through 2.8.1 Missing Authentication on UI-Automation WebSocket Endpoints
WHartTest through 2.8.1 contains a missing authentication vulnerability that allows unauthenticated attackers to connect to the /ws/ui/web/ and /ws/ui/actuator/ WebSocket endpoints because UiAutomationConsumer accepts every connection. Attackers can register an actuator with a client-supplied id ...
CVE-2026-111617
WHartTest through 2.8.1 contains a missing authentication vulnerability in its UI-Automation WebSocket endpoints . Specifically, the UiAutomationConsumer accepts all connections, allowing unauthenticated attackers to connect to the /ws/ui/web/ and /ws/ui/actuator/ endpoints. An attacker can regis...
CVE-2026-111617 WHartTest through 2.8.1 Missing Authentication on UI-Automation WebSocket Endpoints
WHartTest through 2.8.1 contains a missing authentication vulnerability that allows unauthenticated attackers to connect to the /ws/ui/web/ and /ws/ui/actuator/ WebSocket endpoints because UiAutomationConsumer accepts every connection. Attackers can register an actuator with a client-supplied id ...
CVE-2026-111617 WHartTest through 2.8.1 Missing Authentication on UI-Automation WebSocket Endpoints
WHartTest through 2.8.1 contains a missing authentication vulnerability that allows unauthenticated attackers to connect to the /ws/ui/web/ and /ws/ui/actuator/ WebSocket endpoints because UiAutomationConsumer accepts every connection. Attackers can register an actuator with a client-supplied id ...
EUVD-2026-102953
Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate privileges over a network...
CVE-2026-80092
The Microsoft Identity Web component is affected by an authentication bypass vulnerability caused by assumed-immutable data . This flaw allows an authorized attacker to achieve privilege elevation over a network. The vulnerability is associated with CWE-302 . No specific exploit details or remedi...
SUSE CVE-2026-102946
joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to 1.7.4, joserfc.jws.deserializejson accepts a JWS General JSON Serialization with an empty signatures array as authenticated. The verifygeneraljson loop performs no...
Thorsten Rinne phpMyFAQ Authorization Issues Vulnerability
Thorsten Rinne’s phpMyFAQ version 4.2.0-alpha.2 to 4.2.0-beta had an authorization issue. This vulnerability stems from the lack of a brute-force cracking protection mechanism in the removeTwoFactorConfig function, which handles the removal of two-factor authentication. Certified attackers who...
Thorsten Rinne phpMyFAQ Authorization Issues Vulnerability
Thorsten Rinne’s phpMyFAQ version prior to 4.2.0-beta and 4.2.0-alpha versions contain an authorization issue vulnerability. This vulnerability stems from authentication bypasses. Keycloak users can take control of local accounts by matching preferredusername or email. Attackers can manipulate...
Thorsten Rinne phpMyFAQ Authorization Issues Vulnerability
Thorsten Rinne reported an authorization issue in versions of phpMyFAQ between 3.2.0 and 4.1.9, as well as between 4.2.0-alpha and 4.2.0-beta. The issue stems from the GET /admin/api/user/data/userId API, which contains an insecure direct object reference. No checks are performed on SuperAdmin or...
Thorsten Rinne phpMyFAQ Authorization Issues Vulnerability
In versions of Thorsten Rinne’s phpMyFAQ before 4.1.9, versions 3.2.0-alpha and 4.2.0-alpha before 4.2.0-beta, there was an authorization issue vulnerability. This vulnerability stemmed from authentication bypasses in Keycloak and Entra ID SSO callbacks. It allowed users who had been authenticate...
Exploit for CVE-2026-92209
CVE-2026-92209 An improper authentication vulnerability in th...
CVE-2026-105667 J4Care dcm4che Missing Authentication for Critical Function
In the default configuration, the HL7 listener accepts ADT^A40 patient-merge messages without authenticating the sending application. A remote sender can reassign studies and related workflow records from one patient identity to another. The archive's unmerge does not reverse this...
CVE-2026-105667 J4Care dcm4che Missing Authentication for Critical Function
In the default configuration, the HL7 listener accepts ADT^A40 patient-merge messages without authenticating the sending application. A remote sender can reassign studies and related workflow records from one patient identity to another. The archive's unmerge does not reverse this...