CVE-2026-21078

Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity...

CVE-2026-21023

The vulnerability CVE-2026-21023 affects PackageManagerService prior to SMR Mar-2026 Release 1, enabling local attackers to modify installation restrictions on specific apps. Root cause: insufficient verification of data authenticity in PackageManagerService. Impact per the sources: trivial local...

Trusted Execution Environment Privilege Escalation

The vulnerability of the trusted execution environment for Virtualization-Based Security VBS in Windows operating systems is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow attackers to enhance their privileges...

Virtualization-Based Security Enclave Bypass

The vulnerability of the trusted execution environment for Virtualization-Based Security VBS in Windows operating systems is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...

Google Chrome Microsoft Edge Privilege Escalation

The vulnerability of Google Chrome and Microsoft Edge browsers is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created link...

Dawn Component Code Execution

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge browsers on Android operating systems is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created HTML page from...

scanLib.bin Buffer Overflow Privilege Escalation

The vulnerability of the scanLib.bin library in the microprogramming software for AutomationDirect P3-550E controllers is related to insufficient data authenticity checks. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...

Fortinet Antivirus Bypass Security Restrictions

The vulnerability of Fortinet’s antivirus software for FortiOS operating systems and the FortiMail email protection system is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions using MIME content wi...

OPC UA Modicon Communication Module DoS

The vulnerability of the microprogramming software for the OPC UA Modicon Communication Module BMENUA0100 and the X80 advanced RTU Communication Module BMENOR2200H is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker operating remotely ...

Safety Builder Protocol Code Execution

The vulnerability of the implementation of the Safety Builder protocol for Safety Manager controllers is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code...

PLC Software Insufficient Data Authenticity

The vulnerabilities of microprogrammed software in programmable logic controllers such as AXC 1050, AXC 1050 XC, AXC 3050, FC 350 PCI ETH, ILC1x0, ILC1x1, ILC 1x1 GSM/GPRS, ILC 3xx, PC WORX RT BASIC, PC WORX SRT, RFC 430 ETH-IB, RFC 450 ETH-IB, RFC 460R PN 3TX, RFC 460R PN 3TX-S, RFC 470 PN 3TX,...

PuTTY SSH Unauthorized Access

The vulnerability of the SSH protocol implementation in the cryptography security tool PuTTY is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Apache HTTP Server mod_remoteip mod_rewrite IP Replacement

The vulnerability of the modremoteip and modrewrite modules in the Apache HTTP Server is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to perform IP address substitution attacks...