CVE-2026-86134

A NULL pointer dereference vulnerability in the WatchGuard Fireware OS authentication process allows a remote, unauthenticated attacker to crash the management daemon by sending a specially request to the login interface, resulting in a denial of service...

CVE-2026-86134

A NULL pointer dereference vulnerability exists in the WatchGuard Fireware OS authentication process. This flaw allows a remote, unauthenticated attacker to crash the management daemon by sending a specially crafted request to the login interface , resulting in a denial of service (DoS). No speci...

CVE-2026-86134 Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of Service

A NULL pointer dereference vulnerability in the WatchGuard Fireware OS authentication process allows a remote, unauthenticated attacker to crash the management daemon by sending a specially request to the login interface, resulting in a denial of service...

EUVD-2026-89605

A NULL pointer dereference vulnerability in the WatchGuard Fireware OS authentication process allows a remote, unauthenticated attacker to crash the management daemon by sending a specially request to the login interface, resulting in a denial of service...

CVE-2026-86134 Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of Service

A NULL pointer dereference vulnerability in the WatchGuard Fireware OS authentication process allows a remote, unauthenticated attacker to crash the management daemon by sending a specially request to the login interface, resulting in a denial of service...

CVE-2026-86134: NULL Pointer Dereference

A NULL pointer dereference vulnerability in the WatchGuard Fireware OS authentication process allows a remote, unauthenticated attacker to crash the management daemon by sending a specially request to the login interface, resulting in a denial of service...

PT-2026-103017

A NULL pointer dereference vulnerability in the WatchGuard Fireware OS authentication process allows a remote, unauthenticated attacker to crash the management daemon by sending a specially request to the login interface, resulting in a denial of service...

CVE-2026-56592

HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability caused by inadequate account lockouts . This flaw allows an unauthenticated attacker to perform sustained brute-force attacks against the login interface, potentially leading to unauthorized system ac...

CVE-2026-56592 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, which could allow an unauthenticated attacker to execute sustained brute-force attacks against the login interface, resulting in unauthorized system access...

PT-2026-95329

Name of the Vulnerable Software and Affected Versions HCL BigFix Service Management affected versions not specified Description Improper authentication validation occurs due to inadequate account lockouts. This allows an unauthenticated attacker to perform sustained brute-force attacks against th...

CVE-2026-82610

A security flaw has been discovered in itsourcecode Online Medicine Delivery System 1.0. Affected is the function Employee::employeeAuthentication of the file /rider/login.php of the component Login Interface. The manipulation of the argument empemail results in sql injection. It is possible to...

EUVD-2026-68339

A weakness has been identified in itsourcecode Online Medicine Delivery System 1.0. Affected by this vulnerability is the function Customer::cusAuthentication of the file /login.php of the component Customer Login Interface. This manipulation of the argument UUSERNAME causes sql injection. The...

CVE-2026-82610

itsourcecode Online Medicine Delivery System 1.0 is affected by a SQL injection in the Employee::employeeAuthentication function within /rider/login.php (Login Interface component). Manipulation of the emp_email argument allows an unauthenticated remote attacker to inject SQL, resulting in low im...

EUVD-2026-68338

A security flaw has been discovered in itsourcecode Online Medicine Delivery System 1.0. Affected is the function Employee::employeeAuthentication of the file /rider/login.php of the component Login Interface. The manipulation of the argument empemail results in sql injection. It is possible to...

CVE-2026-82611: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in itsourcecode Online Medicine Delivery System 1.0. Affected by this vulnerability is the function Customer::cusAuthentication of the file /login.php of the component Customer Login Interface. This manipulation of the argument UUSERNAME causes sql injection. The...

CVE-2026-82610: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in itsourcecode Online Medicine Delivery System 1.0. Affected is the function Employee::employeeAuthentication of the file /rider/login.php of the component Login Interface. The manipulation of the argument empemail results in sql injection. It is possible to...

CVE-2025-13736 Username Enumeration via Login Interface in Multiple WSO2 Products Allows User Account Discovery

When Multi-Attribute Login is enabled, the login interface fails to consistently mask the existence of user accounts. For valid users, the server resolves and displays their canonical username, while for non-existent users, it echoes the original input. This occurs regardless of the...

CVE-2025-13736 Username Enumeration via Login Interface in Multiple WSO2 Products Allows User Account Discovery

When Multi-Attribute Login is enabled, the login interface fails to consistently mask the existence of user accounts. For valid users, the server resolves and displays their canonical username, while for non-existent users, it echoes the original input. This occurs regardless of the...

CVE-2025-13736

The CVE-2025-13736 entry describes a username enumeration issue in the login interface when Multi-Attribute Login is enabled. The vulnerability causes valid usernames to be resolved and displayed in canonical form, while non-existent usernames are echoed, enabling attackers to distinguish existin...

SUSE CVE-2026-42218

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a timing side-channel vulnerability in the login interface. Due to a discrepancy in response processing times, a remote attacker can infer the existence of a username on the system, leading to unauthorized information disclosure...