7049 matches found
CVE-2026-93559: Missing Authentication for Critical Function
A vulnerability was identified in Forget-C Jellyfish AI Short Drama Studio 0.1.0-alpha/0.2.0/0.3.0/0.3.1/0.3.2. This affects an unknown function of the file backend/app/dependencies.py of the component FastAPI. The manipulation leads to missing authentication. It is possible to initiate the attac...
CVE-2026-84078: Missing Authentication for Critical Function
IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the LoadBalancerServlet. An unauthenticated user can access privileged load-balancer operations, potentially resulting in unauthorized actions and impact to the integrity and availability of the affected...
CVE-2026-77339: Missing Authentication for Critical Function
Process Compose is a scheduler and orchestrator for non-containerized applications. Prior to 1.120.0, the MCP SSE listener in src/mcp/server.go accepts browser-origin requests to /sse and the returned message endpoint without validating the Host header, validating the Origin header, or...
CVE-2026-84075: Missing Authentication for Critical Function
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the ChangeTrackerServlet...
CVE-2026-85889
Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-85889
Azure AI Foundry is affected by a missing authentication vulnerability in a critical function, allowing an unauthenticated attacker to elevate privileges over a network. The flaw is rated CRITICAL (CVSS 3.1: 10.0) with a vector of network-based, low complexity, no privileges required, no user int...
CVE-2026-54504 MCP Documentation Server: Web UI API binds to all interfaces without authentication by default
MCP Documentation Server is a local-first document management and semantic search server for AI coding agents. From 1.13.0 until 1.13.1, the automatically started Web UI in src/server.ts calls startWebServer in src/web-server.ts with STARTWEBUI enabled by default and WEBPORT set to 3080...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
CVE-2026-23744 exploit de RCE ejecución...
Azure AI Foundry Elevation of Privilege Vulnerability
Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-71568
BMCtest (part of the OpenShift Metal3/bmctest project) starts Ironic without authentication and TLS during its test execution window. An attacker on the adjacent network who can win the race against bmctest itself could modify Ironic's state, resulting in a high integrity impact . The high attack...
CVE-2026-81441
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Denial of service...
CVE-2026-81475
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...
EUVD-2026-81461
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Denial of service...
CVE-2026-81441
Dell OpenManage Server Administrator versions prior to 11.1.0.3 contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with local access could exploit this flaw to cause a Denial of Service . The CVSS 3.1 base score is 4.0 (MEDIUM) (AV:L/AC:L/PR:N/UI:N/S...
CVE-2026-81441
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Denial of service...
CVE-2026-81441
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Denial of service...
CVE-2026-81475
Dell OpenManage Server Administrator , versions prior to 11.1.0.3 , is vulnerable to a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access can exploit this flaw to achieve Remote execution . To mitigate this risk, it is recommended to update ...
CVE-2026-81475
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...
CVE-2026-81475
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...
EUVD-2026-81430
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...