Lucene search
+L

519 matches found

Cvelist
Cvelist
added 2026/08/27 9:50 p.m.36 views

CVE-2026-76943 Xiiaozet LK100W Authentication Bypass Using an Alternate Path or Channel

Xiiaozet LK100Wt contains an authentication weakness within an administrative service that may allow an attacker to bypass intended access controls and obtain command execution capabilities. Successful exploitation could allow unauthorized interaction with privileged functionality and may lead to...

9.8CVSS0.00674EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/27 9:50 p.m.23 views

CVE-2026-76943

CVE-2026-76943 affects the Xiiaozet LK100W (LK100Wt) device, which contains an authentication weakness in an administrative service that allows an attacker to bypass access controls and obtain command execution capabilities. Successful exploitation could lead to unauthorized interaction with priv...

9.8CVSS5.6AI score0.00674EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/25 11:16 p.m.8 views

CVE-2026-16639

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. This issue affects Internationalization Single Sign-On versions: from 0.0.0 to 1.8.0...

9.8CVSS0.00346EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/25 10:22 p.m.34 views

CVE-2026-16639 Internationalization Single Sign-On - Critical - Access bypass - SA-CONTRIB-2026-081

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. This issue affects Internationalization Single Sign-On versions: from 0.0.0 to 1.8.0...

0.00346EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/25 10:22 p.m.24 views

CVE-2026-16639

CVE-2026-16639 is a critical authentication bypass in the Drupal Internationalization Single Sign-On module (versions 0.0.0 through 1.8.0). The module, used in multilingual websites with separate domain names per language, fails to sufficiently validate a short-lived token , allowing an attacker ...

9.8CVSS5.3AI score0.00346EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/12 12:19 p.m.25 views

CVE-2026-70468

A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiManager Cloud 7.2.5 through 7.2.9 may allow attacker ...

8.1CVSS5.3AI score0.00695EPSS
SaveExploits0References2Affected Software2
CVE
CVE
added 2026/08/12 12:19 p.m.247 views

CVE-2026-70468

CVE-2026-70468 affects Fortinet FortiManager and FortiManager Cloud versions listed (7.6.1; 7.4.3–7.4.5; 7.2.5–7.2.9). The issue is an authentication bypass that enables improper access control via an attack path described as an alternate path or channel. Impact is rated HIGH for confidentiality,...

8.1CVSS5.3AI score0.00695EPSS
SaveExploits0References1Affected Software2
Positive Technologies
Positive Technologies
added 2026/08/12 12:00 a.m.14 views

PT-2026-71064

Name of the Vulnerable Software and Affected Versions FortiManager version 7.6.1 FortiManager versions 7.4.3 through 7.4.5 FortiManager versions 7.2.5 through 7.2.9 FortiManager Cloud version 7.6.1 FortiManager Cloud versions 7.4.3 through 7.4.5 FortiManager Cloud versions 7.2.5 through 7.2.9...

8.1CVSS5.2AI score0.00695EPSS
SaveExploits0References3
CISA KEV Catalog
CISA KEV Catalog
added 2026/08/04 12:00 a.m.22 views

N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

N-able N-central contains an authentication bypass using an alternate path or channel that allows for authentication bypass...

8.2CVSS5.8AI score0.40158EPSS
SaveIn wildExploits0
CISA KEV Catalog
CISA KEV Catalog
added 2026/08/03 12:00 a.m.29 views

N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

N-able N-central contains an authentication bypass using an alternate path or channel allows for authentication bypass and account takeover in N-central. This vulnerability is the result of an incomplete patch for CVE-2026-18556...

8.2CVSS5.8AI score0.54068EPSS
SaveIn wildExploits2
NVD
NVD
added 2026/08/01 8:16 p.m.16 views

CVE-2026-18556

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1...

8.2CVSS0.40158EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/01 7:59 p.m.20 views

EUVD-2026-51918

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1...

8.2CVSS5.5AI score0.40158EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/01 12:00 a.m.23 views

PT-2026-67134

Name of the Vulnerable Software and Affected Versions N-able N-central versions prior to 2026.1 Description An authentication bypass issue exists that allows an attacker to gain unauthorized access to administrative accounts by using an alternate path or channel. Recommendations Update N-able...

8.2CVSS5.8AI score0.40158EPSS
SaveExploits0References23
NVD
NVD
added 2026/07/30 8:18 p.m.24 views

CVE-2026-66756

Improper Protection of Alternate Path vulnerability in Apache Tika. This issue affects Apache Tika: from 4.0.0-alpha-1 before 4.0.0-beta-1. Users are recommended to upgrade to version 4.0.0-beta-1, which fixes the issue...

9.8CVSS0.00445EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/07/30 8:18 p.m.9 views

CVE-2026-66756

Improper Protection of Alternate Path vulnerability in Apache Tika. This issue affects Apache Tika: from 4.0.0-alpha-1 before 4.0.0-beta-1. Users are recommended to upgrade to version 4.0.0-beta-1, which fixes the issue...

9.8CVSS5.4AI score0.00445EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/30 8:18 p.m.11 views

UBUNTU-CVE-2026-66756

Improper Protection of Alternate Path vulnerability in Apache Tika. This issue affects Apache Tika: from 4.0.0-alpha-1 before 4.0.0-beta-1. Users are recommended to upgrade to version 4.0.0-beta-1, which fixes the issue...

9.8CVSS5.4AI score0.00445EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/30 7:18 p.m.50 views

CVE-2026-66756

CVE-2026-66756 affects Apache Tika, specifically the 4.0.0-alpha-1 series up to, but not including, 4.0.0-beta-1. The issue is described as an Improper Protection of Alternate Path vulnerability. Affected versions are listed as 4.0.0-alpha-1 through before 4.0.0-beta-1; the recommended remediatio...

9.8CVSS5.8AI score0.00445EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/07/30 7:18 p.m.17 views

EUVD-2026-51279

Improper Protection of Alternate Path vulnerability in Apache Tika. This issue affects Apache Tika: from 4.0.0-alpha-1 before 4.0.0-beta-1. Users are recommended to upgrade to version 4.0.0-beta-1, which fixes the issue...

6.9CVSS5.8AI score0.00445EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/07/30 7:18 p.m.29 views

CVE-2026-66756

Improper Protection of Alternate Path vulnerability in Apache Tika. This issue affects Apache Tika: from 4.0.0-alpha-1 before 4.0.0-beta-1. Users are recommended to upgrade to version 4.0.0-beta-1, which fixes the issue...

9.8CVSS5.4AI score0.00445EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/30 12:00 a.m.23 views

PT-2026-66571

Improper Protection of Alternate Path vulnerability in Apache Tika. This issue affects Apache Tika: from 4.0.0-alpha-1 before 4.0.0-beta-1. Users are recommended to upgrade to version 4.0.0-beta-1, which fixes the issue...

6.9CVSS5.8AI score0.00445EPSS
SaveExploits0References3
Rows per page
Query Builder