Lucene search
+L

923 matches found

RedhatCVE
RedhatCVE
added 2026/04/04 4:59 a.m.7 views

CVE-2026-32211

Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network...

9.1CVSS5.8AI score0.00827EPSS
SaveExploits0References1
CVE
CVE
added 2026/04/03 8:20 p.m.14 views

CVE-2026-28766

CVE-2026-28766 refers to Gardyn Cloud API missing authentication for a critical function. The initial description and related documents confirm that a specific endpoint exposes all user account information for registered Gardyn users without requiring authentication, enabling potential confidenti...

9.3CVSS5.9AI score0.00436EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/03 8:20 p.m.4 views

CVE-2026-28766 Gardyn Cloud API Missing Authentication for Critical Function

A specific endpoint exposes all user account information for registered Gardyn users without requiring authentication...

9.3CVSS5.9AI score0.00436EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2026/04/03 8:18 p.m.26 views

CVE-2026-28767 Gardyn Cloud API Missing Authentication for Critical Function

A specific administrative endpoint notifications is accessible without proper authentication...

6.9CVSS0.00377EPSS
SaveExploits1References3
Snyk
Snyk
added 2026/04/03 6:31 p.m.1 views

Missing Authentication for Critical Function

Overview mlflow is a platform to streamline machine learning development, including tracking experiments, packaging code into reproducible runs, and sharing and deploying models. Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the FastAPI...

9.8CVSS7.7AI score0.04392EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/04/03 12:31 a.m.7 views

EUVD-2026-18560

Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network...

9.1CVSS5.8AI score0.00827EPSS
SaveExploits0References2
NVD
NVD
added 2026/04/03 12:16 a.m.5 views

CVE-2026-32211

Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network...

9.1CVSS0.00827EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2026/04/02 2:0 p.m.7 views

Azure MCP Server Information Disclosure Vulnerability

Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network...

9.1CVSS5.8AI score0.00827EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/04/02 12:0 a.m.7 views

PT-2026-29904

Name of the Vulnerable Software and Affected Versions Azure Web Apps affected versions not specified Description An issue exists in Azure MCP Server where missing authentication for a critical function allows an unauthorized attacker to disclose information over a network. Recommendations At the...

9.1CVSS5.8AI score0.00827EPSS
SaveExploits0References14
Snyk
Snyk
added 2026/04/01 9:5 p.m.4 views

Missing Authentication for Critical Function

Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to the absence of authentication checks in the list.json.php template used by multiple plugin endpoints. An attack...

7.5CVSS5.8AI score0.00376EPSS
SaveExploits1References2
Snyk
Snyk
added 2026/04/01 6:33 a.m.8 views

Missing Authentication for Critical Function

Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the key-management endpoints due to improper enforcements of proxy-admin, team-admin, org-admin, or ownership checks. An...

6CVSS5.9AI score
SaveExploits0References3
Snyk
Snyk
added 2026/03/31 8:11 p.m.7 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the MCP server insecure CORS configuration and lack of authentication in the MCP interface. An attacker can gain unauthorized control over all active sessions and exfiltrate sensitive data...

8.8CVSS5.9AI score0.00396EPSS
SaveExploits1References2
Snyk
Snyk
added 2026/03/31 8:11 p.m.4 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the MCP server insecure CORS configuration and lack of authentication in the MCP interface. An attacker can gain unauthorized control over all active sessions and exfiltrate sensitive data...

8.8CVSS5.9AI score0.00396EPSS
SaveExploits1References2
Snyk
Snyk
added 2026/03/30 8:26 p.m.3 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the mcpmessage endpoint due to missing authentication checks and an empty default IP whitelist, which is treated as allowing all connections. An attacker can gain full control over the Ngi...

9.8CVSS6AI score0.38477EPSS
SaveExploits4References2
RedhatCVE
RedhatCVE
added 2026/03/28 10:51 a.m.7 views

CVE-2026-33366

Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication...

6.9CVSS6.1AI score0.0034EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2026/03/27 3:57 p.m.301 views

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

A script for C...

9.8CVSS6AI score0.45026EPSS
SaveExploits36
GithubExploit
GithubExploit
added 2026/03/27 3:57 p.m.173 views

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

No d...

9.8CVSS5.8AI score0.45026EPSS
SaveExploits36
GithubExploit
GithubExploit
added 2026/03/27 2:14 p.m.181 views

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

CVE-2026-23744 python script for exploiting CVE-2026-23744...

9.8CVSS6AI score0.45026EPSS
SaveExploits36
NVD
NVD
added 2026/03/27 6:16 a.m.6 views

CVE-2026-33366

Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication...

6.9CVSS0.0034EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/03/27 5:25 a.m.41 views

CVE-2026-33366

Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication...

6.9CVSS0.0034EPSS
SaveExploits0References2
Rows per page
Query Builder