Lucene search
+L

7049 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•10 views

CVE-2026-93559: Missing Authentication for Critical Function

A vulnerability was identified in Forget-C Jellyfish AI Short Drama Studio 0.1.0-alpha/0.2.0/0.3.0/0.3.1/0.3.2. This affects an unknown function of the file backend/app/dependencies.py of the component FastAPI. The manipulation leads to missing authentication. It is possible to initiate the attac...

7.5CVSS6.9AI score0.00654EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•10 views

CVE-2026-84078: Missing Authentication for Critical Function

IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the LoadBalancerServlet. An unauthenticated user can access privileged load-balancer operations, potentially resulting in unauthorized actions and impact to the integrity and availability of the affected...

9.9CVSS5.9AI score0.0047EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•9 views

CVE-2026-77339: Missing Authentication for Critical Function

Process Compose is a scheduler and orchestrator for non-containerized applications. Prior to 1.120.0, the MCP SSE listener in src/mcp/server.go accepts browser-origin requests to /sse and the returned message endpoint without validating the Host header, validating the Origin header, or...

5.1CVSS5.9AI score0.00256EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•4 views

CVE-2026-84075: Missing Authentication for Critical Function

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the ChangeTrackerServlet...

9.9CVSS6AI score0.00559EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/17 11:18 p.m.•37 views

CVE-2026-85889

Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...

10CVSS0.00671EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/17 10:55 p.m.•195 views

CVE-2026-85889

Azure AI Foundry is affected by a missing authentication vulnerability in a critical function, allowing an unauthenticated attacker to elevate privileges over a network. The flaw is rated CRITICAL (CVSS 3.1: 10.0) with a vector of network-based, low complexity, no privileges required, no user int...

10CVSS6AI score0.00671EPSS
SaveExploits0References1Affected Software1
osv-cve
osv-cve
•added 2026/09/17 6:36 p.m.•11 views

CVE-2026-54504 MCP Documentation Server: Web UI API binds to all interfaces without authentication by default

MCP Documentation Server is a local-first document management and semantic search server for AI coding agents. From 1.13.0 until 1.13.1, the automatically started Web UI in src/server.ts calls startWebServer in src/web-server.ts with STARTWEBUI enabled by default and WEBPORT set to 3080...

8.8CVSS6.3AI score
SaveExploits0References6
GithubExploit
GithubExploit
•added 2026/09/17 3:57 p.m.•28 views

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

CVE-2026-23744 exploit de RCE ejecución...

9.8CVSS6.2AI score0.67516EPSS
SaveExploits45
Microsoft CVE
Microsoft CVE
•added 2026/09/17 2:00 p.m.•53 views

Azure AI Foundry Elevation of Privilege Vulnerability

Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...

10CVSS6AI score0.00671EPSS
SaveExploits0
CVE
CVE
•added 2026/09/17 1:46 p.m.•25 views

CVE-2026-71568

BMCtest (part of the OpenShift Metal3/bmctest project) starts Ironic without authentication and TLS during its test execution window. An attacker on the adjacent network who can win the race against bmctest itself could modify Ironic's state, resulting in a high integrity impact . The high attack...

5.3CVSS5.7AI score0.00233EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/17 12:18 p.m.•17 views

CVE-2026-81441

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Denial of service...

5.5CVSS0.00106EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/17 12:18 p.m.•13 views

CVE-2026-81475

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...

9.8CVSS0.00529EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 11:51 a.m.•22 views

EUVD-2026-81461

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Denial of service...

4CVSS5.9AI score0.00106EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/17 11:51 a.m.•28 views

CVE-2026-81441

Dell OpenManage Server Administrator versions prior to 11.1.0.3 contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with local access could exploit this flaw to cause a Denial of Service . The CVSS 3.1 base score is 4.0 (MEDIUM) (AV:L/AC:L/PR:N/UI:N/S...

5.5CVSS5.9AI score0.00106EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/09/17 11:51 a.m.•49 views

CVE-2026-81441

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Denial of service...

4CVSS0.00106EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/17 11:51 a.m.•18 views

CVE-2026-81441

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Denial of service...

4CVSS5.9AI score0.00106EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/17 11:03 a.m.•34 views

CVE-2026-81475

Dell OpenManage Server Administrator , versions prior to 11.1.0.3 , is vulnerable to a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access can exploit this flaw to achieve Remote execution . To mitigate this risk, it is recommended to update ...

9.8CVSS6AI score0.00529EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/09/17 11:03 a.m.•138 views

CVE-2026-81475

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...

8.1CVSS0.00529EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/17 11:03 a.m.•19 views

CVE-2026-81475

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...

8.1CVSS6AI score0.00529EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 11:03 a.m.•20 views

EUVD-2026-81430

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...

8.1CVSS6AI score0.00529EPSS
SaveExploits0References1
Rows per page
Query Builder