CVE-2025-45620

Issue details Camera model PTC310UV2 running firmware version 0.1.0000.59. The vulnerability is found in the web interface that is used to access the camera. The vulnerability was found during a penetration test, thus, certain information in the PoC screenshots have been redacted. Description Thi...

EUVD-2026-95893

Use of Client-Side authentication vulnerability in Hayat Health Facilities Inc. Hayat Hospital Hayat Mobile allows Authentication Bypass. This issue affects Hayat Mobile: from 3.3.0 before 3.4.0...

CVE-2026-90983 OTP Code Exposure in Hayat Hospital's Hayat Mobile

Use of Client-Side authentication vulnerability in Hayat Health Facilities Inc. Hayat Hospital Hayat Mobile allows Authentication Bypass. This issue affects Hayat Mobile: from 3.3.0 before 3.4.0...

PT-2026-108971

Use of Client-Side authentication vulnerability in Hayat Health Facilities Inc. Hayat Hospital Hayat Mobile allows Authentication Bypass. This issue affects Hayat Mobile: from 3.3.0 before 3.4.0...

CVE-2026-90983: Use of Client-Side Authentication

Use of Client-Side authentication vulnerability in Hayat Health Facilities Inc. Hayat Hospital Hayat Mobile allows Authentication Bypass. This issue affects Hayat Mobile: from 3.3.0 before 3.4.0...

Skype for Business Instant Messaging Spoofing

The vulnerability of the Skype for Business Server’s instant messaging program relates to the possibility of using client-side authentication. Exploiting this vulnerability could allow attackers to carry out spoofing attacks remotely...

CVE-2026-89175 Kingdom Communication Associated｜Smart Video Intercom System - Client-Side Authentication

Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values...

CVE-2026-89175

The Smart Video Intercom System developed by Kingdom Communication Associated contains a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values. The CVSS 3.1 score is 5.3 (MEDIUM)...

EUVD-2026-76002

Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values...

CVE-2026-89175: Client-Side Enforcement of Server-Side Security

Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values...

PT-2026-89798

Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values...

CVE-2026-66305

Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network...

CVE-2026-66305

CVE-2026-66305 is a spoofing vulnerability in Skype for Business Server (Subscription Edition, 2019, and 2015) caused by the use of client-side authentication , which allows an authorized attacker to perform spoofing over a network. The CVSS v3.1 score is 7.1 (HIGH) , with high integrity impact a...

EUVD-2026-73937

Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network...

Skype for Business Spoofing Vulnerability

Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network...

CVE-2026-66305: Use of Client-Side Authentication

Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network...

PT-2026-88284

Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network...

CVE-2026-76945 Ebyte NE2-D11 Use of Client-Side Authentication

The affected Ebyte device relies on client-managed authentication tokens without sufficient server-side validation. An attacker may replay or manipulate authentication tokens to gain unauthorized access to administrative functionality...

CVE-2026-76945 Ebyte NE2-D11 Use of Client-Side Authentication

The affected Ebyte device relies on client-managed authentication tokens without sufficient server-side validation. An attacker may replay or manipulate authentication tokens to gain unauthorized access to administrative functionality...

CVE-2026-76945

CVE-2026-76945 affects the Ebyte NE2-D11 device. The root cause is client-managed authentication tokens without sufficient server-side validation , allowing an attacker to replay or manipulate tokens to gain unauthorized access to administrative functionality . The primary impact is confidentiali...