Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability

Oracle PeopleSoft Enterprise PeopleTools contains a missing authentication for critical function vulnerability which could allow an unauthenticated attacker to obtain takeover of PeopleSoft Enterprise PeopleTools...

CVE-2026-50245 Brickcom Cameras Missing Authentication for Critical Function

Brickcom cameras allow unauthenticated access to live snapshot images via the /ONVIF endpoint and no authentication is required to retrieve still images from the camera feed...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via unauthenticated access to the /debug/pprof endpoints. An attacker can retrieve sensitive runtime information, including in-memory state, call stacks, and authentication cache data, or...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the storagesvc HTTP router, which registers the /v1/archive and /v1/archives endpoints without authentication or authorization checks. An attacker can enumerate, download, upload, or dele...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the storagesvc HTTP router, which registers the /v1/archive and /v1/archives endpoints without authentication or authorization checks. An attacker can enumerate, download, upload, or dele...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the storagesvc HTTP router, which registers the /v1/archive and /v1/archives endpoints without authentication or authorization checks. An attacker can enumerate, download, upload, or dele...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the DELETE endpoint at /api/v1/sources, which does not enforce proper authorization or filtering. An attacker can remove all tenant data, including sources, agents, and assessments, by...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the DELETE endpoint at /api/v1/sources, which does not enforce proper authorization or filtering. An attacker can remove all tenant data, including sources, agents, and assessments, by...

PT-2026-50812

Name of the Vulnerable Software and Affected Versions pgAdmin 4 versions 6.9 through 9.15 Description In server mode, two state-mutating endpoints in the SQL Editor blueprint are missing the @pga login required authentication decorator, allowing them to be accessed without an authenticated sessio...

CVE-2026-50512

Missing authentication for critical function in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

EUVD-2026-35771

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-50507

Missing authentication for critical function in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

The vulnerability of the OAuth protocol implementation of the artificial intelligence-based platform LibreChat, which allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the OAuth protocol implementation of the artificial intelligence-based LibreChat platform is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

CVE-2026-32962

SD-330AC and AMC Manager provided by silex technology, Inc. contain a missing authentication for critical function issue. The device configuration may be altered without authentication...

CVE-2026-8602

In ScadaBR version 1.2.0, a Missing Authentication for Critical Function vulnerability could allow an unauthenticated attacker to send a HTTP GET requests to the SCADA system and inject arbitrary sensor readings...

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

cve-2026...

PT-2026-46912

Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Redline WR3200: from 7.1.3 before 7.1.8...

Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp

CVE-2025-32433 분석 포트폴리오 Erlang/OTP SSH 사전인증 원격 코드 실행 취약점 분석...

Gladinet Triofox Server Agent Missing Authentication for Critical Function (CVE-2026-8364)

Binary data gladinettriofoxserveragentcve-2026-8364.nbin...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the resolveAuth function of the Webhook Verification Handler. An attacker can gain unauthorized access and potentially compromise confidentiality, integrity, and availability by sending...