EUVD-2026-54474

Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2026-56793

CVE-2026-56793 affects Dell OpenManage Server Administrator, versions prior to 11.1.0.2. The issue is an improper authentication vulnerability allowing an unauthenticated attacker with remote access to obtain unauthorized access. The NVD and related records confirm the affected product and vulner...

EUVD-2026-54312

Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network...

EUVD-2026-54323

Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-62896

Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network...

CVE-2026-56162

Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-14205: Improper Authentication

The WP Events Manager WordPress plugin before 2.2.5 does not validate the requested quantity when registering for a paid event and computes the price from the attacker-controlled quantity, allowing any authenticated user to create a completed booking for a paid event without making a payment...

PT-2026-69026

Name of the Vulnerable Software and Affected Versions Dell OpenManage Server Administrator versions prior to 11.1.0.2 Description An improper authentication issue allows an unauthenticated attacker with remote access to potentially gain unauthorized access to the system. Recommendations Update De...

CVE-2026-16030: Improper Authentication

The MStore API WordPress plugin before 4.21.0 does not correctly verify the cryptographic signature of the token used to authenticate its phone-based login, allowing unauthenticated attackers who know a registered user's phone number to forge a token and take over that user's account, including...

CVE-2026-48039: Improper Authentication

Meta Ads MCP is a Model Context Protocol MCP server that lets AI assistants run Meta Ads. Prior to version 1.0.109, AuthInjectionMiddleware.dispatch at httpauthintegration.py:272 unconditionally forwards unauthenticated Streamable HTTP requests to downstream MCP tool handlers without issuing a 40...

CVE-2026-56793: Improper Authentication

Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2026-56162

Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-62896

Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network...

Azure SQL Database Elevation of Privilege Vulnerability

Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...

Microsoft Teams Elevation of Privilege Vulnerability

Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network...

Exploit for Improper Authentication in Openprinting Cups

cve-id Donate Support the maintenance of this project wit...

Security Bulletin: IBM Engineering Requirements Management DOORS Next is impacted by vulnerability in Reviews delete request

Summary Vulnerability has been identified in Review delete request, which is used in IBM Engineering Requirements Management DOORS Next. Vulnerability Details CVEID:CVE-2024-27253 DESCRIPTION: IBM Engineering Systems Design Rhapsody - Model Manager could allow an authenticated user to bypass...

CVE-2026-65400: Improper Authentication

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials...

CVE-2026-56162: Improper Authentication

Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-14547: Improper Authentication

The Estatik Real Estate Plugin WordPress plugin before 4.3.3 does not properly enforce its anti-spam check or restrict the recipient routing of its property request form, allowing unauthenticated users to send emails to arbitrary recipients with arbitrary subject, body and Reply-To, effectively...