8878 matches found
CVE-2026-21004
Improper authentication in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to trigger a denial of service...
CVE-2026-20998
Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote attackers to bypass authentication...
CVE-2026-20998
Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote attackers to bypass authentication...
CVE-2026-20998
Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote attackers to bypass authentication...
CVE-2026-20998
CVE-2026-20998 concerns Samsung Smart Switch; an improper authentication flaw in versions prior to 3.7.69.15 allows remote attackers to bypass authentication. Affected product: Samsung Smart Switch (data migration tool). Root cause: improper authentication check. Impact: attackers could gain unau...
PT-2026-25608
Name of the Vulnerable Software and Affected Versions Smart Switch versions prior to 3.7.69.15 Description A flaw exists in authentication within Smart Switch that could allow an attacker in close proximity to cause a denial of service. Recommendations Update Smart Switch to version 3.7.69.15 or...
Samsung Smart Switch security vulnerabilities
SAMSUNG Smart Switch is a data migration tool developed by South Korea’s Samsung Corporation. Versions of SAMSUNG Smart Switch prior to 3.7.69.15 contained security vulnerabilities. These vulnerabilities were due to improper authentication procedures, and they could allow adjacent attackers to...
CVE-2026-21004: Undefined Security Weakness
Improper authentication in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to trigger a denial of service...
PT-2026-25603
Name of the Vulnerable Software and Affected Versions Smart Switch versions prior to 3.7.69.15 Description A flaw exists in authentication within Smart Switch that enables remote attackers to circumvent security measures. This issue allows unauthorized access, potentially compromising system...
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication via the h2c upgrade process. An attacker can gain unauthorized access by exploiting improper authentication handling during the HTTP/2 Cleartext upgrade. Remediation Upgrade...
CVE-2026-32246: Improper Authentication
Tinyauth is an authentication and authorization server. Prior to 5.0.3, the OIDC authorization endpoint allows users with a TOTP-pending session password verified, TOTP not yet completed to obtain authorization codes. An attacker who knows a user's password but not their TOTP secret can obtain...
CVE-2026-23813: Improper Authentication
A vulnerability has been identified in the web-based management interface of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable resetting the admin password...
EUVD-2026-10692
Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally...
EUVD-2026-10700
Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally...
EUVD-2026-10621
Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally...
EUVD-2026-10620
Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally...
CVE-2026-26141
Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally...
CVE-2026-26128
Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally...