The vulnerability of the respond_request() function in the system for launching and managing large language models of LoLLMS (Lord of Large Language Multimodal Systems) allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the respondrequest function in the system for launching and managing large language models of LoLLMS is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to...

The vulnerability in the backend/routers/files.py script of the system for launching and managing large language models in LoLLMS (Lord of Large Language Multimodal Systems) allows a perpetrator to gain unauthorized access to protected information, upload arbitrary files, or cause service failures.

The vulnerability in the backend/routers/files.py script of the system for launching and managing large language models in LoLLMS Lord of Large Language Multimodal Systems is related to deficiencies in the authentication process when processing the /api/files/extract-text endpoint. Exploiting thi...

The vulnerability of the TM2 Monitoring platform, related to deficiencies in the authentication process, allows attackers to disclose protected information.

The vulnerability of the TM2 Monitoring platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

The vulnerability of Novakon P Series human-machine interface programming software lies in the lack of authentication procedures, allowing attackers to gain access to the upload and download of arbitrary files.

The vulnerability of Novakon P Series human-machine interface programming software is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain access to the ability to download and save any arbitrary files...

The vulnerability of Windows Admin Center’s server management tool, related to authentication procedures that allow attackers to escalate their privileges.

The vulnerability of the Windows Admin Center management tool is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability of the SSH library wolfSSH, related to deficiencies in authentication procedures, allows attackers to circumvent existing security restrictions.

The vulnerability of the SSH library wolfSSH is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

PT-2026-22266

Name of the Vulnerable Software and Affected Versions Systems utilizing WebSocket endpoints for the Open Charge Point Protocol OCPP affected versions not specified Description WebSocket endpoints lack proper authentication mechanisms, allowing attackers to perform unauthorized station impersonati...

CVE-2026-27584 ActualBudget server is Missing Authentication for SimpleFIN and Pluggy AI bank sync endpoints

Actual is a local-first personal finance tool. Prior to version 26.2.1, missing authentication middleware in the ActualBudget server component allows any unauthenticated user to query the SimpleFIN and Pluggy.ai integration endpoints and read sensitive bank account balance and transaction...

The vulnerability of the graphical interface of Netgear WiFi Range Extender software lies in the lack of authentication procedures, which allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the graphical interface of Netgear WiFi Range Extender software-related microprogramming devices is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibilit...

The vulnerability of the isAccessAllowed() function in the Podman control and execution software allows a hacker to bypass existing security restrictions and gain unauthorized access to protected information.

The vulnerability of the isAccessAllowed function in the Podman control and execution software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to bypass existing security restrictions and gain unauthorized access to protected...

The vulnerability of SolarWinds IT infrastructure management software’s Web Help Desk system, related to deficiencies in authentication procedures, allows attackers to bypass security restrictions and gain unauthorized access to protected information.

The vulnerability of the SolarWinds IT infrastructure management software’s Web Help Desk component is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to bypass security restrictions and gain unauthorized access to protected information...

The vulnerability of the Endpoint Manager web interface for managing IP telephony systems, FreePBX, allows a intruder to gain unauthorized access to the system.

The vulnerability of the Endpoint Manager web interface for managing IP telephony systems like FreePBX is related to authentication mechanisms’ deficiencies. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the system remotely...

The vulnerability of Siemens SINEMA Remote Connect, related to deficiencies in authentication procedures, allows attackers to circumvent existing security restrictions and gain unauthorized access to protected information.

The vulnerability of Siemens SINEMA Remote Connect is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and gain unauthorized access to protected information...

The vulnerability of the file_transfer() function in the software for SINEC Security Monitor allows a perpetrator to gain access to read and write any arbitrary files.

The vulnerability of the filetransfer function in the software used for SINEC Security Monitor’s security functions is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain access to read and write arbitrary files...

The vulnerability of the Modbus TCP and Modbus RTU protocols implemented in DIRIS Digiware M-70 communication gateways allows a perpetrator to cause service interruptions.

The vulnerability of the Modbus TCP and Modbus RTU protocols implemented by DIRIS Digiware M-70 communication gateways is related to the lack of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Mattermost instant messaging application, related to deficiencies in authentication procedures, allows a hacker to gain read, edit, and delete access to data.

The vulnerability of the Mattermost instant messaging application is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain read, edit, and delete privileges...

AMD Xilinx Run Time 安全漏洞

AMD Xilinx Run Time is a standardized runtime environment developed by AMD for Xilinx FPGAs that provides a unified software interface to optimize FPGA arithmetic. An elevation of privilege vulnerability exists in AMD Xilinx Run Time that stems from insufficient authentication and can be exploite...

CVE-2025-61956

Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for critical functions, such as admin access and API requests. Attackers can modify configurations without authentication, potentially manipulating active runway settings and misleading air traffic control ATC and pilots...

The vulnerability in the implementation of the OAuth protocol for the Mattermost instant messaging application allows a hacker to circumvent existing security restrictions.

The vulnerability of the OAuth implementation for the Mattermost instant messaging application is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

The vulnerability of the Samba network communication software package, related to deficiencies in authentication procedures, allows attackers to gain access to confidential data.

The vulnerability of the Samba network communication package is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to gain access to confidential data...