CVE-2024-9106

CVE-2024-9106 Wechat Social login 플러그인 = 1.3.0 - 인증 우회 설명: WordPress용 Wechat Social login 플러그인은 버전 1.3.0까지 인증 우회에 취약합니다. 이는 소셜 로그인 중 제공되는 사용자 검증이 불충분하기 때문입니다. 이를 통해 인증되지 않은 공격자가 사용자 ID에 접근할 수 있는 경우 사이트의 기존 사용자예: 관리자로 로그인할 수 있습니다. 이는 앱 시크릿이 설정되지 않은 경우에만 악용 가능하며, 기본값은 빈 값입니다. uid=1을 추가하거나 로그인하려는 계정...

CVE-2026-76144

An unrestricted file upload vulnerability caused by insufficient file extension and integrity verification in Genian SSL PNS allows an attacker to upload a dangerous file that is not an official patch...

EUVD-2026-90486

An unrestricted file upload vulnerability caused by insufficient file extension and integrity verification in Genian SSL PNS allows an attacker to upload a dangerous file that is not an official patch...

CVE-2026-102140 Kiteworks Core Insufficient Verification of Data Authenticity

An authenticated administrator could initiate an administrative import using a file whose contents were not fully verified, because the import validated only the file's header rather than the complete file. This could allow unverified or forged content to be accepted and processed, affecting the...

CVE-2026-102140

In Kiteworks Core , an authenticated administrator can exploit a vulnerability where administrative imports only validate the file header instead of the entire file content. This insufficient verification of data authenticity allows for the acceptance and processing of unverified or forged conten...

cve-2026-47777

CVE-2026-47777 — Mastodon 추천 컬렉션 인가 우회 개요 저는 Mastodon의 실험적 추천 컬렉션Featured Collections 연합 파이프라인에 영향을 미치는 고심각도 인가 우회Authorization Bypass 취약점을 책임 있는 공개responsible disclosure 방식으로 보고했습니다. CVE ID: CVE-2026-47777 영향을 받는 구성 요소 ActivityPub::VerifyFeaturedItemService 취약점 유형 CWE-345 — 데이터 진위성 검증 불충분 CWE-86...

CVE-2026-102275: Insufficient Verification of Data Authenticity

PyJWT is a Python implementation of JSON Web Token standards. From 2.1.0 until 2.15.0, PyJWT OKPAlgorithm.fromjwk in jwt/algorithms.py is affected because private-JWK import path does not compare the public key derived from d with x. This occurs when an OKP private JWK supplies non-corresponding ...

SolarWinds Observability Self-Hosted < 2026.2.3 Multiple Vulnerabilities

The version of SolarWinds Observability Self-Hosted installed on the remote host is prior to 2026.2.3. It is, therefore, affected by multiple vulnerabilities: - An insufficient verification of data authenticity vulnerability that could allow an unauthenticated, remote attacker to execute arbitrar...

CVE-2026-81630 Botslab G980H Dashcams Insufficient Verification of Data Authenticity

The Botslab G980H dash camera firmware does not adequately verify the authenticity of firmware updates. The update process retrieves firmware through an unprotected connection and relies on an integrity value supplied with the firmware instead of a trusted cryptographic signature. A suitably...

CVE-2026-81630

The Botslab G980H dash camera firmware is vulnerable due to insufficient verification of data authenticity during the firmware update process. The device retrieves updates via an unprotected connection and validates them using a supplied integrity value rather than a trusted cryptographic signatu...

CVE-2026-81630 Botslab G980H Dashcams Insufficient Verification of Data Authenticity

The Botslab G980H dash camera firmware does not adequately verify the authenticity of firmware updates. The update process retrieves firmware through an unprotected connection and relies on an integrity value supplied with the firmware instead of a trusted cryptographic signature. A suitably...

CVE-2026-81630: Insufficient Verification of Data Authenticity

The Botslab G980H dash camera firmware does not adequately verify the authenticity of firmware updates. The update process retrieves firmware through an unprotected connection and relies on an integrity value supplied with the firmware instead of a trusted cryptographic signature. A suitably...

CVE-2026-92400: Insufficient Verification of Data Authenticity

The Payment Gateway for PayPal on WooCommerce WordPress plugin before 9.2.1 does not verify that an incoming payment notification was confirmed in the store's configured payment environment or paid to the store's own merchant account before marking an order complete, allowing unauthenticated user...

ROS-20260921-73-0110

The vulnerability of the GPO group policy management component of the Samba software is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker, operating remotely, to circumvent existing security restrictions...

EUVD-2026-82596

Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-62874

Azure Billing is affected by an elevation of privilege vulnerability caused by insufficient verification of data authenticity , allowing an unauthorized attacker to elevate privileges over a network with no prior access or user interaction. The vulnerability is rated CRITICAL (CVSS 3.1: 10.0) wit...

CVE-2026-91017: Insufficient Verification of Data Authenticity

The Robokassa payment gateway for Woocommerce WordPress plugin before 1.8.9 does not verify the authenticity of incoming payment notifications when its non-default deferred-payment feature is enabled, allowing unauthenticated attackers to forge a notification and mark arbitrary WooCommerce orders...

CVE-2026-62874: Insufficient Verification of Data Authenticity

Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-54581: Insufficient Verification of Data Authenticity

mport is the MidnightBSD Package Manager. Prior to 2.7.8, the mportfetchbootstrapindex function in libmport/fetch.c could return success when bootstrap index hash verification encountered a missing or invalid hash because the failure path did not preserve a fatal result. A network attacker or...

CVE-2026-78296: Insufficient Verification of Data Authenticity

Insufficient Verification of Data Authenticity vulnerability in WP ManageNinja LLC FluentAuth allows Identity Spoofing. This issue affects FluentAuth: from n/a through 2.1.2...