EUVD-2026-110797

REDAXO core from 5.3.0 before 5.21.4 contains an authentication bypass vulnerability in the structure/history plugin that allows unauthenticated attackers to forge temporary login tokens. Attackers can force the session-tied secret into a predictable state and forge tokens for accounts like admin...

CVE-2026-117532

REDAXO core versions 5.3.0 through 5.21.4 are vulnerable to an authentication bypass within the structure/history plugin. This flaw allows unauthenticated attackers to force the session-tied secret into a predictable state , enabling the forgery of temporary login tokens. An attacker can leverage...

CVE-2026-117532 REDAXO Core 5.3.0 before 5.21.4 Authentication Bypass via History Plugin

REDAXO core from 5.3.0 before 5.21.4 contains an authentication bypass vulnerability in the structure/history plugin that allows unauthenticated attackers to forge temporary login tokens. Attackers can force the session-tied secret into a predictable state and forge tokens for accounts like admin...

WordPress Login with phone number plugin <= 1.8.78 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Peter Tang in WordPress Plugin Login with phone number versions = 1.8.78...

CVE-2026-82116

Missing Authentication for Critical Function Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 932:...

CVE-2026-76938

Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31...

CVE-2026-82117

Authentication Bypass by Spoofing Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 932: from 09-02...

CVE-2026-82117

The HiRDB database system is vulnerable to an Authentication Bypass by Spoofing (CWE-290) vulnerability. This flaw affects several versions, including HiRDB Server Version 10 (10-00 before 10-12-01), Version 9 (09-00 through 09-66-22), and Version 9 with Additional Function (09-00 through 09-66/V...

EUVD-2026-110668

Authentication Bypass by Spoofing Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 932: from 09-02...

CVE-2026-82117 Authentication Bypass by Spoofing Vulnerability in HiRDB

Authentication Bypass by Spoofing Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 932: from 09-02...

CVE-2026-82116 Missing Authentication for Critical Function Vulnerability in HiRDB

Missing Authentication for Critical Function Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 932:...

EUVD-2026-110667

Missing Authentication for Critical Function Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 932:...

CVE-2026-82116

This vulnerability affects HiRDB Server across multiple versions, including Version 10 (10-00 to 10-12-01), Version 9 (09-00 through 09-66-22), and several Version 9(32) and Additional Function variants. The root cause is a Missing Authentication for Critical Function (CWE-306), which could allow...

CVE-2026-76938

CVE-2026-76938 identifies an Authentication Bypass vulnerability (CWE-290) in JP1/Automatic Job Management System 3 - Manager affecting versions from 10-00 before 13-50-31. The vulnerability allows for unauthorized access, resulting in a CRITICAL base score of 9.8. It can be exploited over a NETW...

CVE-2026-76938 Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3

Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31...

EUVD-2026-110658

Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31...

CVE-2026-107147

The twofactorgauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoofed client address headers. Due to the lack of validation of the Client-IP and X-Forwarded-For headers, an attacker who obtains user's password can spoof a whitelisted IP address, resulting in the...

CVE-2026-107147

The twofactor_gauthenticator plugin for Roundcube is vulnerable to a 2FA authentication bypass due to a lack of validation for Client-IP and X-Forwarded-For headers. An attacker who possesses a user's password can spoof a whitelisted IP address to bypass the second factor. This issue was resolved...

CVE-2026-107147 Authentication bypass by spoofing in twofactor_gauthenticator

The twofactorgauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoofed client address headers. Due to the lack of validation of the Client-IP and X-Forwarded-For headers, an attacker who obtains user's password can spoof a whitelisted IP address, resulting in the...

CVE-2026-107147 Authentication bypass by spoofing in twofactor_gauthenticator

The twofactorgauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoofed client address headers. Due to the lack of validation of the Client-IP and X-Forwarded-For headers, an attacker who obtains user's password can spoof a whitelisted IP address, resulting in the...