CVE-2026-101916 @grpc/grpc-js: In certain configurations, getAuthContext can return unauthorized certificates as though they were authorized

@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.6 and 1.14.5, getAuthContext does not distinguish authorized from unauthorized peer certificates when server credentials set requireClientCertificate to false. When applications use th...

GHSA-88H9-XGVX-HVF2 @grpc/grpc-js: The exact path match matcher incorrectly only applies a prefix match for case-insensitive matches

Impact When using RBAC to apply authentication rules, the exact path method name matcher applies a prefix match instead of an exact match for case-insensitive matches. As a result, if a service has a method with a name that is a prefix of the name of a different method, and they have different...

@grpc/grpc-js: The exact path match matcher incorrectly only applies a prefix match for case-insensitive matches

Impact When using RBAC to apply authentication rules, the exact path method name matcher applies a prefix match instead of an exact match for case-insensitive matches. As a result, if a service has a method with a name that is a prefix of the name of a different method, and they have different...

CVE-2026-75973

A flaw was found in Apache Tomcat. When Jakarta Authentication is configured with SimpleAuthConfigProvider as the default provider and multiple web applications utilize it, an improper authentication vulnerability arises. This issue causes the authentication realm established for the first web...

CVE-2026-101073

A security flaw has been discovered in Netcore NR289-GE 1.4.5102. Impacted is an unknown function of the file /bin/boa of the component CGI Dispatcher. Performing a manipulation results in improper authentication. The attack may be initiated remotely. The exploit has been released to the public a...

EUVD-2026-88293

A security flaw has been discovered in Netcore NR289-GE 1.4.5102. Impacted is an unknown function of the file /bin/boa of the component CGI Dispatcher. Performing a manipulation results in improper authentication. The attack may be initiated remotely. The exploit has been released to the public a...

CVE-2026-101073 Netcore NR289-GE CGI Dispatcher boa improper authentication

A security flaw has been discovered in Netcore NR289-GE 1.4.5102. Impacted is an unknown function of the file /bin/boa of the component CGI Dispatcher. Performing a manipulation results in improper authentication. The attack may be initiated remotely. The exploit has been released to the public a...

CVE-2026-101073

A security flaw in the CGI Dispatcher component of Netcore NR289-GE 1.4.5102 allows for improper authentication via an unknown function in the /bin/boa file. This vulnerability can be triggered through remote manipulation, potentially allowing unauthorized access. While the documents confirm that...

CVE-2026-101073 Netcore NR289-GE CGI Dispatcher boa improper authentication

A security flaw has been discovered in Netcore NR289-GE 1.4.5102. Impacted is an unknown function of the file /bin/boa of the component CGI Dispatcher. Performing a manipulation results in improper authentication. The attack may be initiated remotely. The exploit has been released to the public a...

CVE-2026-52749 Improper Authentication in Kaon AR2140X

The Kaon AR2140X router improperly issues session cookies in responses to unauthenticated HTTP requests. This vulnerability allows a remote attacker to obtain a valid session identifier without providing credentials, resulting in an authentication bypass. With this access, the attacker can perfor...

CVE-2026-52749 Improper Authentication in Kaon AR2140X

The Kaon AR2140X router improperly issues session cookies in responses to unauthenticated HTTP requests. This vulnerability allows a remote attacker to obtain a valid session identifier without providing credentials, resulting in an authentication bypass. With this access, the attacker can perfor...

Exploit for Improper Authentication in Openprinting Cups

CVE-2026-34990-POC Technical analysis and proof-of-concept res...

CVE-2017-7921-EXPLOIT

CVE-2017-7921 - Hikvision カメラシリーズにおける不適切な認証の脆弱性 CVE-2017-7921 として識別されるセキュリティ上の欠陥で、Hikvision カメラのさまざまなモデルに影響を与えます。この脆弱性は、DS-2CD2xx2F-I シリーズ（V5.2.0 build 140721 から V5.4.0 build 160530）、DS-2CD2xx0F-I シリーズ（V5.2.0 build 140721 から V5.4.0 Build 160401）、DS-2CD2xx2FWD シリーズ（V5.3.1 build 150410 から V5.4.4...

Improper Authentication

org.apache.tomcat, tomcat-catalina is vulnerable to Improper Authentication. The vulnerability is due to improper authentication handling in certain authentication mechanisms, which allows an attacker to be authenticated even when the user does not exist in the configured DataSourceRealm...

EUVD-2026-88050

A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build202604241011. The affected element is an unknown function of the component Debug Service. Such manipulation leads to improper authentication. The attack may be launched remotely. The exploit is publicly availabl...

CVE-2026-101916: Improper Certificate Validation

@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.6 and 1.14.5, getAuthContext does not distinguish authorized from unauthorized peer certificates when server credentials set requireClientCertificate to false. When applications use th...

PT-2026-99900

A security flaw has been discovered in Netcore NR289-GE 1.4.5102. Impacted is an unknown function of the file /bin/boa of the component CGI Dispatcher. Performing a manipulation results in improper authentication. The attack may be initiated remotely. The exploit has been released to the public a...

CVE-2026-101073: Improper Authentication

A security flaw has been discovered in Netcore NR289-GE 1.4.5102. Impacted is an unknown function of the file /bin/boa of the component CGI Dispatcher. Performing a manipulation results in improper authentication. The attack may be initiated remotely. The exploit has been released to the public a...

PT-2026-102346

Name of the Vulnerable Software and Affected Versions @grpc/grpc-js versions prior to 1.13.6 @grpc/grpc-js versions prior to 1.14.5 Description The getAuthContext function fails to distinguish between authorized and unauthorized peer certificates when server credentials have...

CVE-2026-100886

A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build202604241011. The affected element is an unknown function of the component Debug Service. Such manipulation leads to improper authentication. The attack may be launched remotely. The exploit is publicly availabl...