alibaba__nacos_CVE-2021-44667_2-0-3

Nacos: Dynamic Na ming and Co nfiguration S ervice What does it do Nacos official site: nacos.io is an easy-to-use platform designed for dynamic service discovery and configuration and service management. It helps you to build cloud native applications and microservices platform easily. Service i...

EUVD-2026-108541

Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-83938

Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-83938

The Azure Kubernetes Configuration Service is affected by a vulnerability caused by missing authentication for a critical function. This flaw allows an unauthorized attacker to elevate privileges over a network. The vulnerability has been assigned a CVSS 3.1 score of 10.0 (CRITICAL) , indicating ...

Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability

Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network...

PT-2026-121678

Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-89108

SAP Manufacturing Integration and Intelligence (Configuration Service) contains a missing authorization check (CWE-862) within certain administrative functionalities. An attacker possessing MII administrator privileges can submit a specially crafted request to provision an account with elevated p...

CVE-2026-89108 Missing Authorization check in SAP Manufacturing Integration and Intelligence (Configuration Service)

SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries within certain administrative functionality. An attacker with MII administrator privileges could submit a specially crafted request to provision an account with elevated privileges on the...

CVE-2026-15316

An improper input validation vulnerability in the configuration service for processing encrypted credential data has been identified in Tapo C200 v5. An attacker can send oversized crypted ciphertext values that may trigger exception handling failures, due to insufficient validation, causing the...

CVE-2026-15316

The Tapo C200 v5 configuration service lacks validation on encrypted credential ciphertext length, allowing an attacker on the local network to crash or restart the device by sending oversized values, temporarily disrupting HTTPS management and monitoring. CVSS 7.1 (HIGH), network-adjacent, no au...

CVE-2026-15316: Improper Input Validation

An improper input validation vulnerability in the configuration service for processing encrypted credential data has been identified in Tapo C200 v5. An attacker can send oversized crypted ciphertext values that may trigger exception handling failures, due to insufficient validation, causing the...

PT-2026-78231

Name of the Vulnerable Software and Affected Versions Tapo C200 version v5 Description An improper input validation issue exists in the configuration service used for processing encrypted credential data. An attacker can send oversized crypted ciphertext values that trigger exception handling...

Improper Authentication

Apollo ConfigService is vulnerable to Improper Authentication. The vulnerability is due to improper validation of non-canonical appId values during authentication, which allows an attacker to bypass AccessKey or management key protections and gain unauthorized access to protected configuration da...

Exploit for OS Command Injection in Ivanti Standalone_Sentry

CVE-2026-10520 !Pythonhttps://img.shields.io/badge/Python...

CVE-2026-11469

A flaw has been found in jishenghua jshERP up to 3.6. Impacted is the function insertPlatformConfig of the file jshERP-boot/src/main/java/com/jsh/erp/service/PlatformConfigService.java of the component platformConfig Add Endpoint. Executing a manipulation of the argument platformValue can lead to...

CVE-2026-35223

An improper access check allows unauthorized access to comconfig webservice endpoints...

Malicious code in @timelycare/config-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc893c48f00d7000b6737fbccd385652c78342aad49e12c49134ce72b42852a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2026-18432

An authentication bypass vulnerability within the HTTP handling of the DS configuration service in TP-Link Tapo C520WS v2.6 was identified, due to inconsistent parsing and authorization logic in JSON requests during authentication check. An unauthenticated attacker can append an...

CVE-2026-34121

An authentication bypass vulnerability within the HTTP handling of the DS configuration service in TP-Link Tapo C520WS v2.6 was identified, due to inconsistent parsing and authorization logic in JSON requests during authentication check. An unauthenticated attacker can append an...

CVE-2026-34121 Authentication Bypass in DS Configuration Service via HTTP Request Parsing Differential of TP-Link Tapo C520WS

An authentication bypass vulnerability within the HTTP handling of the DS configuration service in TP-Link Tapo C520WS v2.6 was identified, due to inconsistent parsing and authorization logic in JSON requests during authentication check. An unauthenticated attacker can append an...