CVE-2026-79938

Dell PowerProtect Cyber Recovery, versions prior to 20.3, contain an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2026-79938

Dell PowerProtect Cyber Recovery , versions prior to 20.3 , is affected by an Improper Authentication vulnerability. A low-privileged attacker with remote network access can exploit this flaw to achieve unauthorized access . The CVSS 3.1 score is 7.6 (HIGH) , with the primary impact on integrity ...

CVE-2017-7921

CVE-2017-7921 CVE-2017-7921 è una vulnerabilità critica punteggio CVSS: 9.8 che colpisce diversi modelli di telecamere IP e DVR Hikvision, resa nota per la prima volta nel 2017. Deriva da un difetto di autenticazione impropria che consente a utenti remoti non autenticati di aggirare i meccanismi ...

CVE-2025-63667

CVE-2025-63667 — Evidenza di vulnerabilità per telecamere IP basate su Vatilon Sanitizzata Riepilogo Diverse telecamere IP basate su Vatilon marchi osservati: SIMICAM, KEVIEW, ASECAM rilasciano token Session-Id senza verificare la correttezza delle credenziali. Questa falla consente a utenti non...

DEBIAN-CVE-2026-68569

Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances e.g. CLIENT-CERT, SPNEGO that a user would be authenticated even if the user did not exist in the DataSourceRealm. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through...

CVE-2026-68569

Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances e.g. CLIENT-CERT, SPNEGO that a user would be authenticated even if the user did not exist in the DataSourceRealm. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through...

CVE-2026-68569

Apache Tomcat contains an improper authentication flaw in the DataSourceRealm principal lookup. Under specific authentication methods—CLIENT-CERT and SPNEGO —a user could be authenticated even if they did not exist in the DataSourceRealm, effectively a fail-open condition. The issue affects 11.0....

CVE-2026-68569 Apache Tomcat: Principal lookup can fail open in some cases

Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances e.g. CLIENT-CERT, SPNEGO that a user would be authenticated even if the user did not exist in the DataSourceRealm. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through...

CVE-2026-68569

Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances e.g. CLIENT-CERT, SPNEGO that a user would be authenticated even if the user did not exist in the DataSourceRealm. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through...

CVE-2026-68569 Apache Tomcat: Principal lookup can fail open in some cases

Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances e.g. CLIENT-CERT, SPNEGO that a user would be authenticated even if the user did not exist in the DataSourceRealm. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through...

CVE-2026-24170

NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component, where an authenticated user could cause improper authentication by sending specially crafted HTTP requests. A successful exploit of this vulnerability might lead to code execution and escalation of...

CVE-2026-24170

NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component, where an authenticated user could cause improper authentication by sending specially crafted HTTP requests. A successful exploit of this vulnerability might lead to code execution and escalation of...

EUVD-2026-65608

NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component, where an authenticated user could cause improper authentication by sending specially crafted HTTP requests. A successful exploit of this vulnerability might lead to code execution and escalation of...

CVE-2026-24170

NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component that allows an attacker on an adjacent network to send specially crafted HTTP requests, leading to improper authentication . A successful exploit may result in code execution and privilege escalation , wit...

CVE-2026-78885

A vulnerability was identified in liketrek TREK up to 3.0.22. The impacted element is the function findOrCreateUser of the file server/src/services/oidcService.ts of the component OIDC Service. Such manipulation leads to improper authentication. It is possible to launch the attack remotely. The...

CVE-2026-57910

Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges...

CVE-2026-78885

CVE-2026-78885 affects liketrek TREK up to version 3.0.22 , specifically the findOrCreateUser function in server/src/services/oidcService.ts (OIDC Service component). The vulnerability is an improper authentication flaw that can be exploited remotely, though it requires a high level of attack com...

CVE-2026-78885 liketrek TREK OIDC Service oidcService.ts findOrCreateUser improper authentication

A vulnerability was identified in liketrek TREK up to 3.0.22. The impacted element is the function findOrCreateUser of the file server/src/services/oidcService.ts of the component OIDC Service. Such manipulation leads to improper authentication. It is possible to launch the attack remotely. The...

EUVD-2026-65473

A vulnerability was identified in liketrek TREK up to 3.0.22. The impacted element is the function findOrCreateUser of the file server/src/services/oidcService.ts of the component OIDC Service. Such manipulation leads to improper authentication. It is possible to launch the attack remotely. The...

CVE-2026-78885 liketrek TREK OIDC Service oidcService.ts findOrCreateUser improper authentication

A vulnerability was identified in liketrek TREK up to 3.0.22. The impacted element is the function findOrCreateUser of the file server/src/services/oidcService.ts of the component OIDC Service. Such manipulation leads to improper authentication. It is possible to launch the attack remotely. The...