8831 matches found
CVE-2026-64745: Improper Authentication
This issue was addressed with additional restrictions on the lock screen. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A person with physical access to a locked device may be able to access contacts and photos...
CVE-2026-13597: Improper Authentication
The 微信二维码登陆 WordPress plugin through 1.3 does not properly validate WeChat webhook requests, as its signature check always passes, and it discloses the generated login code in the webhook response. This allows an unauthenticated attacker to forge a login event for any existing username, read the...
CVE-2026-14568: Improper Authentication
The User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration WordPress plugin before 4.3.8 does not correctly verify ownership before deleting an attachment, allowing unauthenticated attackers to permanently delete author-less attachments su...
CVE-2026-12493: Improper Authentication
The Clover Payment Gateway by Zaytech for WooCommerce WordPress plugin before 1.3.6 does not verify that an approved external payment record actually belongs to the WooCommerce order being completed, nor that the paid amount matches the order total, allowing unauthenticated users to mark arbitrar...
CVE-2026-43766: Improper Authentication
An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An attacker with physical access to a locked device may be able to view sensitive user information...
CVE-2026-13332: Improper Authentication
The Masteriyo LMS WordPress plugin before 2.3.1 does not correctly verify authorization on an unauthenticated AJAX action used to clear user sessions, allowing unauthenticated attackers to terminate the active sessions force-logout of any user on the site, including administrators...
Xerox Printers Improper Authentication (CVE-2023-46327)
Multiple MFPs multifunction printers provided by FUJIFILM Business Innovation Corp. and Xerox Corporation provide a facility to export the contents of their Address Book with encrypted form, but the encryption strength is insufficient. With the knowledge of the encryption process and the encrypti...
Exploit for Improper Authentication in Sonicwall Directory_Services_Connector
CVE-2020-5148 Forced Authentication in the SonicWall UTM SS...
Improper Authentication
Overview @budibase/backend-core is a Budibase backend core libraries used in server and worker Affected versions of this package are vulnerable to Improper Authentication in the OIDC SSO authentication process. An attacker can gain unauthorized access to an existing user account, including accoun...
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication due to the unconditional substitution of a nil AuthenticationFunc with a no-op function in the Load process. An attacker can gain unauthorized access to protected endpoints by sending unauthenticated requests, as...
CVE-2026-12504
Loytec LINX firmware (LINX-A64) products LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD are affected by an Improper Authentication (CWE-287) in PAM configuration through 8.4.16. The root cause is improper PAM authentication that allows a local attacker to authenticate as uid=0 w...
CVE-2026-62825
Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-56191
Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network...
EUVD-2026-48459
Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-62825
Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-56191
Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network...
EUVD-2026-48458
Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network...
PT-2026-64208
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Online affected versions not specified Description Improper authentication allows an unauthorized attacker to perform tampering over a network. Recommendations At the moment, there is no information about a newer version tha...