ROS-20261026-73-0143

The vulnerability in openssh is related to insufficient authentication checks. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

Maccmspro Maccms10 authorization issue vulnerability

Maccmspro versions 2021.1000.2000 and earlier, as well as versions prior to 2026.1000.4054, contain an authorization issue vulnerability. This vulnerability arises because checkmsg fails to compare msgto, allowing authentication bypass. Unauthenticated attackers can send a user/findpassmsg reques...

PT-2026-135878

Уязвимость программного обеспечения для управления платформой Eclipse ioFog Operator связана с ошибками процедуры подтверждения подлинности сертификата. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, обойти существующие механизмы безопасности...

PT-2026-123323

Name of the Vulnerable Software and Affected Versions MacCMS versions prior to 2026.1000.4054 Description An authentication bypass allows unauthenticated attackers to reset any member's password. This occurs because the check msg function fails to compare the msg to variable. An attacker can...

PT-2026-123170

A weakness has been identified in NocoDB up to 2026.07.0. The affected element is the function validatePassword of the file /auth/user/signup. Executing a manipulation can lead to improper restriction of excessive authentication attempts. It is possible to launch the attack remotely. This attack ...

PT-2026-123342

A security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust configuration could allow an attacker who obtains the matching private key to authenticate to an affected device via SSH as root. This vulnerability affects only devices...

RHEL 10 : httpd (RHSA-2026:89860)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:89860 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: httpd: HTTP...

PT-2026-123215

Pleasanter provided fails to properly verify passwords in LDAP authentication when processing specially crafted requests under certain configurations. If exploited, an attacker may bypass LDAP authentication by providing only a valid Login ID, without a password. As a result, an attacker may view...

OrayDuck router input validation error vulnerability

The OrayDuck router version 7.6.1 contains an input validation error vulnerability. This vulnerability stems from improper handling of the Username parameter by the L2TP Authentication component, potentially leading to CRLF injection. Attackers can exploit this flaw remotely...

PT-2026-123275

A vulnerability was determined in BillaBear up to 2025.01.03. Affected by this issue is the function processInstall of the file src/BillaBear/Controller/InstallController.php of the component Installation Handler. This manipulation causes missing authentication. Remote exploitation of the attack ...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, and Apple tvOS versions prior to 27.2. This vulnerability stems from inadequate authentication mechanisms and may allow physically proximate...

PT-2026-125536

A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file admin/delete admin.php. The manipulation of the argument ID leads to missing authentication. It is possible to initiate the attack remotely. The exploit has be...

Raj Nandan Sharma Kener encryption issue vulnerability

Versions 3.0.0 through 4.1.10 of Kener contain an encryption vulnerability stemming from authentication bypass. When KENERSECRETKEY is empty or unset, attackers can exploit the hard-coded DUMMYSECRET fallback key to forge session tokens. This allows them to issue kener-user cookies for access or...

Wolfvision Cynap input validation error vulnerability

The Wolfvision Cynap contains an input validation error vulnerability stemming from issues with the shared encryption trust configuration for its file sharing functionality. This vulnerability may allow attackers who have obtained matching private keys to log in to affected devices via SSH using...

Implem Pleasanter authorization issue vulnerability

Versions Implem Pleasanter 1.1.0.0 through 1.5.9.0 contain an authorization issue vulnerability. This vulnerability arises when LDAP authentication fails to properly verify passwords under certain configurations when processing specially crafted requests. As a result, attackers can bypass LDAP...

PT-2026-125899

Name of the Vulnerable Software and Affected Versions Qode Membership versions prior to 2.0.6.3 Description An authentication bypass exists that allows for account takeover via the qode membership check facebook user AJAX action. The issue stems from a typographic error in the qode membership log...

NocoDB authorization issue vulnerability

Versions NocoDB 2026.07.0 and earlier contain a security vulnerability. This vulnerability stems from improper handling of the validatePassword function in the file /auth/user/signup, resulting in inadequate restrictions on excessive authentication attempts...

PT-2026-123194

A vulnerability was found in 777genius agent-teams-ai up to 2.17.10. This issue affects the function doStart of the file src/main/services/infrastructure/HttpServer.ts of the component Local HTTP Service. The manipulation results in missing authentication. The attack is only possible with local...

Fortinet FortiSandbox authorization issue vulnerability

Versions 5.0.0 through 5.0.6, 4.4.0 through 4.4.9, and all versions 4.2 of Fortinet FortiSandbox are affected by an authorization issue vulnerability. This vulnerability arises from the use of alternative paths or channels, leading to authentication bypass. It may allow attackers to execute...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from authentication issues and improper validation of user attributes, potentially allowing...