Lucene search
+L

926 matches found

Vulnrichment
Vulnrichment
added 2026/02/28 11:44 a.m.4 views

CVE-2026-2844 TimePictra Authentication Bypass Vulnerability

Missing Authentication for Critical Function vulnerability in Microchip TimePictra allows Configuration/Environment Manipulation.This issue affects TimePictra: from 11.0 through 11.3 SP2...

9.3CVSS5.9AI score0.0025EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/28 11:44 a.m.26 views

CVE-2026-2844 TimePictra Authentication Bypass Vulnerability

Missing Authentication for Critical Function vulnerability in Microchip TimePictra allows Configuration/Environment Manipulation.This issue affects TimePictra: from 11.0 through 11.3 SP2...

9.3CVSS0.0025EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/28 12:0 a.m.10 views

PT-2026-22466

Missing Authentication for Critical Function vulnerability in Microchip TimePictra allows Configuration/Environment Manipulation.This issue affects TimePictra: from 11.0 through 11.3 SP2...

9.3CVSS5.9AI score0.0025EPSS
SaveExploits0References2
NVD
NVD
added 2026/02/25 1:16 p.m.14 views

CVE-2026-2624

Missing Authentication for Critical Function vulnerability in ePati Cyber ​​Security Technologies Inc. Antikor Next Generation Firewall NGFW allows Authentication Bypass. This issue affects Antikor Next Generation Firewall NGFW: from v.2.0.1298 before v.2.0.1301...

9.8CVSS0.02194EPSS
SaveExploits2References2
ATTACKERKB
ATTACKERKB
added 2026/02/25 12:39 p.m.4 views

CVE-2026-2624

Missing Authentication for Critical Function vulnerability in ePati Cyber ​​Security Technologies Inc. Antikor Next Generation Firewall NGFW allows Authentication Bypass. This issue affects Antikor Next Generation Firewall NGFW: from v.2.0.1298 before v.2.0.1301...

9.8CVSS5.4AI score0.02194EPSS
SaveExploits2References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/25 12:39 p.m.5 views

CVE-2026-2624 Authentication Bypass in ePati's Antikor NGFW

Missing Authentication for Critical Function vulnerability in ePati Cyber ​​Security Technologies Inc. Antikor Next Generation Firewall NGFW allows Authentication Bypass. This issue affects Antikor Next Generation Firewall NGFW: from v.2.0.1298 before v.2.0.1301...

9.8CVSS5.4AI score0.02194EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2026/02/25 12:39 p.m.28 views

CVE-2026-2624 Authentication Bypass in ePati's Antikor NGFW

Missing Authentication for Critical Function vulnerability in ePati Cyber ​​Security Technologies Inc. Antikor Next Generation Firewall NGFW allows Authentication Bypass. This issue affects Antikor Next Generation Firewall NGFW: from v.2.0.1298 before v.2.0.1301...

9.8CVSS0.02194EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
added 2026/02/25 12:0 a.m.9 views

PT-2026-21902

Name of the Vulnerable Software and Affected Versions ePati Cyber Security Technologies Inc. Antikor Next Generation Firewall NGFW versions prior to 2.0.1301 Description A missing authentication check for a critical function in the Antikor Next Generation Firewall NGFW allows an attacker to bypas...

9.8CVSS6AI score0.02194EPSS
SaveExploits2References6
GithubExploit
GithubExploit
added 2026/02/24 12:14 p.m.182 views

Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp

CVE-2025-32433 python ErlangSSHRCE.py...

10CVSS5.4AI score0.98594EPSS
SaveExploits37
Snyk
Snyk
added 2026/02/19 10:4 p.m.3 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the POST /api/v2/dag-runs endpoint, which accepts and executes inline YAML specifications without authentication in the default configuration. An attacker can execute arbitrary commands o...

9.8CVSS6.2AI score
SaveExploits0References3
Snyk
Snyk
added 2026/02/19 10:4 p.m.4 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the POST /api/v2/dag-runs endpoint, which accepts and executes inline YAML specifications without authentication in the default configuration. An attacker can execute arbitrary commands o...

9.8CVSS6.2AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/02/19 11:30 a.m.6 views

CVE-2025-8350

Execution After Redirect EAR, Missing Authentication for Critical Function vulnerability in Inrove Software and Internet Services BiEticaret CMS allows Authentication Bypass, HTTP Response Splitting. This issue affects BiEticaret CMS: from 2.1.13 through 19022026. NOTE: The vendor was contacted...

9.8CVSS5.5AI score0.00547EPSS
SaveExploits0References3Affected Software1
Snyk
Snyk
added 2026/02/18 5:45 p.m.9 views

Missing Authentication for Critical Function

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to missing authentication when starting sandbox browser bridge server. An attacker can gain unauthorized access to browser control...

8.5CVSS5.8AI score0.00142EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/18 12:54 a.m.5 views

Missing Authentication for Critical Function

Overview @openclaw/voice-call is an OpenClaw voice-call plugin Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the tunnel.allowNgrokFreeTierLoopbackBypass configuration option in the webhook authentication. An attacker can trigger unauthorized...

6.9CVSS5.8AI score0.0029EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/17 9:40 p.m.9 views

Missing Authentication for Critical Function

Overview @openclaw/voice-call is an OpenClaw voice-call plugin Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the verifyWebhook function. An attacker can send forged webhook requests to the Telnyx voice-call endpoint by omitting signature...

8.7CVSS5.6AI score0.00284EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/17 4:37 p.m.7 views

Missing Authentication for Critical Function

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the connect handshake in the gateway WebSocket, when auth.token is present but not validated. An attacker can gain unauthorized access by...

9.8CVSS5.7AI score0.00352EPSS
SaveExploits0References2
CVE
CVE
added 2026/02/13 1:9 p.m.28 views

CVE-2025-14349

CVE-2025-14349 affects Universal Software Inc. FlexCity/Kiosk prior to version 1.0.36. The issue is described as a privilege escalation caused by privileges defined with unsafe actions and missing authentication for a critical function, allowing access to functionality not properly constrained by...

8.8CVSS5.8AI score0.00361EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/02/13 1:9 p.m.33 views

CVE-2025-14349 Business Logic Error in Universal Software's FlexCity/Kiosk

Privilege Defined With Unsafe Actions, Missing Authentication for Critical Function vulnerability in Universal Software Inc. FlexCity/Kiosk allows Accessing Functionality Not Properly Constrained by ACLs, Privilege Escalation. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36...

8.8CVSS0.00361EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/02/11 4:17 p.m.31 views

CVE-2026-24789 ZLAN Information Technology ZLAN5143D Missing Authentication for Critical Function

An unprotected API endpoint allows an attacker to remotely change the device password without providing authentication...

9.8CVSS0.0067EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/02/11 4:17 p.m.5 views

CVE-2026-24789 ZLAN Information Technology ZLAN5143D Missing Authentication for Critical Function

An unprotected API endpoint allows an attacker to remotely change the device password without providing authentication...

9.8CVSS5.5AI score0.0067EPSS
SaveExploits0References3
Rows per page
Query Builder