7387 matches found
CVE-2026-107607
Swann Communications SWIFI-SE2KIC devices running firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function (CWE-306) vulnerability. An attacker situated on the local network can exploit this flaw to access a real-time video stream without any authenticat...
CVE-2026-107607 Missing authentication for critical function in Swann Communications SWIFI-SE2KIC
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to access a real-time video stream without authentication...
CVE-2026-107606 Missing authentication for critical function in Swann Communications SWIFI-SE2KIC
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to retrieve a snapshot of the live feed without authentication...
CVE-2026-107606
The Swann Communications SWIFI-SE2KIC device is vulnerable to a Missing Authentication for Critical Function vulnerability in firmware versions 2.0.22 and prior . An attacker situated on the local network can exploit this flaw to retrieve a snapshot of the live feed without any authentication. No...
CVE-2026-107605 Missing authentication for critical function in Swann Communications SWIFI-SE2KIC
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to view live video feed without authentication...
CVE-2026-107605
Swann Communications SWIFI-SE2KIC devices running firmware versions 2.0.22 and prior are affected by a Missing Authentication for Critical Function vulnerability (CWE-306). This flaw allows an attacker on the local network to view the live video feed without any authentication. No specific remedi...
CVE-2026-110128
fuint through commit 4c4bc8a contains a missing authentication vulnerability that allows unauthenticated attackers to retrieve any member's order details via the /clientApi/order/detail endpoint. Attackers can enumerate sequential orderId values without an Access-Token to expose buyer names,...
CVE-2026-110114
FJ-OMS oms-erp through PRE contains a missing authentication vulnerability that allows unauthenticated attackers to delete and rebuild product search indexes by calling public es-test maintenance endpoints in skyer-goods. Attackers can repeatedly request /v1/goods/sku/es-test to empty the shared...
CVE-2026-110128 fuint through commit 4c4bc8a Missing Authentication via /clientApi/order/detail
fuint through commit 4c4bc8a contains a missing authentication vulnerability that allows unauthenticated attackers to retrieve any member's order details via the /clientApi/order/detail endpoint. Attackers can enumerate sequential orderId values without an Access-Token to expose buyer names,...
CVE-2026-110128 fuint through commit 4c4bc8a Missing Authentication via /clientApi/order/detail
fuint through commit 4c4bc8a contains a missing authentication vulnerability that allows unauthenticated attackers to retrieve any member's order details via the /clientApi/order/detail endpoint. Attackers can enumerate sequential orderId values without an Access-Token to expose buyer names,...
CVE-2026-110128
The fuint software (specifically through commit 4c4bc8a ) contains a missing authentication vulnerability in the /clientApi/order/detail endpoint. This flaw allows unauthenticated attackers to perform an IDOR attack by enumerating sequential orderId values without an Access-Token . Successful exp...
CVE-2026-110114 oms-erp through PRE Missing Authentication via skyer-goods es-test Endpoints
FJ-OMS oms-erp through PRE contains a missing authentication vulnerability that allows unauthenticated attackers to delete and rebuild product search indexes by calling public es-test maintenance endpoints in skyer-goods. Attackers can repeatedly request /v1/goods/sku/es-test to empty the shared...
CVE-2026-110114 oms-erp through PRE Missing Authentication via skyer-goods es-test Endpoints
FJ-OMS oms-erp through PRE contains a missing authentication vulnerability that allows unauthenticated attackers to delete and rebuild product search indexes by calling public es-test maintenance endpoints in skyer-goods. Attackers can repeatedly request /v1/goods/sku/es-test to empty the shared...
CVE-2026-110114
The FJ-OMS oms-erp through PRE application is vulnerable to a missing authentication flaw within the skyer-goods component. Unauthenticated attackers can access public es-test maintenance endpoints, specifically by requesting /v1/goods/sku/es-test . This allows for the deletion and rebuilding of ...
CVE-2026-106043
Ivanti Xtraction versions before 2026.4 are affected by a Missing Authentication for Critical Function vulnerability (CWE-306). This flaw allows a remote unauthenticated attacker to create or modify trusted sites . While the documents do not provide specific remediation steps or exploit links, th...
CVE-2026-77096
CVFS contained a missing authentication condition affecting command execution. Software customers upgrade to resolved maintenance release. Update CVFS...
CVE-2026-77096 CVFS Missing Authentication
CVFS contained a missing authentication condition affecting command execution. Software customers upgrade to resolved maintenance release. Update CVFS...
CVE-2026-77096
CVFS is impacted by a missing authentication condition that can affect command execution . The vulnerability allows for unauthorized actions due to the lack of proper authentication checks. To remediate this issue, software customers should upgrade to the resolved maintenance release and update C...
Windows Health and Optimized Experiences Service Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally...