ROS-20261026-73-0027

The vulnerability in openssh is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

Web Authentication DoS

The vulnerability in the Web Authentication component of Google Chrome and Microsoft Edge web browsers is related to use-after-free memory usage. Exploitation of this vulnerability allows a remote attacker to cause a denial of service by sending a specially crafted HTML page...

Web Authentication Component Compromise

The vulnerability in the Web Authentication component of Google Chrome and Microsoft Edge is related to improper authorization. Exploitation of this vulnerability may allow a remote attacker to compromise the integrity of protected information...

PT-2026-123215

Pleasanter provided fails to properly verify passwords in LDAP authentication when processing specially crafted requests under certain configurations. If exploited, an attacker may bypass LDAP authentication by providing only a valid Login ID, without a password. As a result, an attacker may view...

RHEL 10 : httpd (RHSA-2026:89860)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:89860 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: httpd: HTTP...

NVDA Remote 2.6.4 / Tele NVDA Remote 2025.3.3 Weak Password Authentication

NVDA Remote version 2.6.4 and Tele NVDA Remote version 2025.3.3 accept weak connection passwords without additional authentication or computer verification, allowing remote system access when an attacker guesses the password...

Fortinet FortiSandbox: CVE-2026-107656: Improper access control and session management in the web management interface

An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all versions, FortiSandbox PaaS 5.0.0 through 5.0.6, FortiSandbox PaaS 4.4 all versions, FortiSandbox PaaS 4.2 all versions ma...

OrayDuck router input validation error vulnerability

The OrayDuck router version 7.6.1 contains an input validation error vulnerability. This vulnerability stems from improper handling of the Username parameter by the L2TP Authentication component, potentially leading to CRLF injection. Attackers can exploit this flaw remotely...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 26.7.2, Apple iPadOS versions prior to 26.7.2, Apple iOS versions prior to 27.2, and Apple iPadOS versions prior to 27.2. This vulnerability stems from improper state management leading to authentication issues, which may allow...

PT-2026-125522

Name of the Vulnerable Software and Affected Versions OpenPanel versions prior to 3.0.0 Description Missing authentication allows unauthenticated attackers to access the Bull Board dashboard served on the worker HTTP port. Attackers can query the '/api/queues' endpoint and call mutating Bull Boar...

Apple MacOS: CVE-2026-112430: OS X update for Security

An authentication issue was addressed with improved validation of user attributes. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges...

PT-2026-123401

Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow pre-authentication out-of-bounds read in SNMP processing...

ROS-20261026-73-0143

The vulnerability in openssh is related to insufficient authentication checks. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

Maccmspro Maccms10 authorization issue vulnerability

Maccmspro versions 2021.1000.2000 and earlier, as well as versions prior to 2026.1000.4054, contain an authorization issue vulnerability. This vulnerability arises because checkmsg fails to compare msgto, allowing authentication bypass. Unauthenticated attackers can send a user/findpassmsg reques...

PT-2026-135878

Уязвимость программного обеспечения для управления платформой Eclipse ioFog Operator связана с ошибками процедуры подтверждения подлинности сертификата. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, обойти существующие механизмы безопасности...

PT-2026-123323

Name of the Vulnerable Software and Affected Versions MacCMS versions prior to 2026.1000.4054 Description An authentication bypass allows unauthenticated attackers to reset any member's password. This occurs because the check msg function fails to compare the msg to variable. An attacker can...

PT-2026-123170

A weakness has been identified in NocoDB up to 2026.07.0. The affected element is the function validatePassword of the file /auth/user/signup. Executing a manipulation can lead to improper restriction of excessive authentication attempts. It is possible to launch the attack remotely. This attack ...

PT-2026-123342

A security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust configuration could allow an attacker who obtains the matching private key to authenticate to an affected device via SSH as root. This vulnerability affects only devices...

PT-2026-123275

A vulnerability was determined in BillaBear up to 2025.01.03. Affected by this issue is the function processInstall of the file src/BillaBear/Controller/InstallController.php of the component Installation Handler. This manipulation causes missing authentication. Remote exploitation of the attack ...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, and Apple tvOS versions prior to 27.2. This vulnerability stems from inadequate authentication mechanisms and may allow physically proximate...