CVE-2026-5570

A vulnerability was determined in Technostrobe HI-LED-WR120-G2 5.5.0.1R6.03.30. The affected element is the function indexconfig of the file /LoginCB. This manipulation causes improper authentication. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may ...

CVE-2026-5570

A vulnerability was determined in Technostrobe HI-LED-WR120-G2 5.5.0.1R6.03.30. The affected element is the function indexconfig of the file /LoginCB. This manipulation causes improper authentication. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may ...

CVE-2026-5570

A vulnerability was determined in Technostrobe HI-LED-WR120-G2 5.5.0.1R6.03.30. The affected element is the function indexconfig of the file /LoginCB. This manipulation causes improper authentication. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may ...

CVE-2026-3184 Util-linux: util-linux: access control bypass due to improper hostname canonicalization

A flaw was found in util-linux. Improper hostname canonicalization in the login1 utility, when invoked with the -h option, can modify the supplied remote hostname before setting PAMRHOST. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing...

PT-2026-25602

Improper verification of cryptographic signature in Smart Switch prior to version 3.7.69.15 allows remote attackers to potentially bypass authentication...

CVE-2026-4187 Tiandy Easy7 Integrated Management Platform Device Identifier UpdateLocalDevInfo.jsp missing authentication

A vulnerability was identified in Tiandy Easy7 Integrated Management Platform 7.17.0. Impacted is an unknown function of the file /WebService/UpdateLocalDevInfo.jsp of the component Device Identifier Handler. Such manipulation of the argument username/password leads to missing authentication. The...

CVE-2026-3739

A security flaw has been discovered in suitenumerique messages 0.2.0. This issue affects the function ThreadAccessSerializer of the file src/backend/core/api/serializers.py of the component ThreadAccess. The manipulation results in improper authentication. The attack can be executed remotely. The...

PT-2026-23944

A security flaw has been discovered in suitenumerique messages 0.2.0. This issue affects the function ThreadAccessSerializer of the file src/backend/core/api/serializers.py of the component ThreadAccess. The manipulation results in improper authentication. The attack can be executed remotely. The...

Exploit for Improper Authentication in Cisco Catalyst_Sd-Wan_Manager

CVE-2026‑20127 – Remote Authentication Bypass for Cisco Cataly...

CVE-2026-23600

A remote authentication bypass vulnerability exists in HPE AutoPass License Server APLS...

Astra Linux – Vulnerability in inetutils

In GNU Inetutils, telnetd in version 2.7 allows remote authentication bypass by using the -f root value for the USER environment variable...

CVE-2026-23600

A remote authentication bypass vulnerability exists in HPE AutoPass License Server APLS...

CVE-2026-23600

CVE-2026-23600 affects Hewlett Packard Enterprise AutoPass License Server (APLS). The vulnerability is a remote authentication bypass in the web service (port 5814 by default) where improper authentication prior to access enables misuse. Multiple sources (ZDI advisory) describe the flaw as an aut...

EUVD-2026-9179

A remote authentication bypass vulnerability exists in HPE AutoPass License Server APLS...

CVE-2026-23600

A remote authentication bypass vulnerability exists in HPE AutoPass License Server APLS...

CVE-2026-23600

A remote authentication bypass vulnerability exists in HPE AutoPass License Server APLS...

CVE-2026-23600

A remote authentication bypass vulnerability exists in HPE AutoPass License Server APLS...

PT-2026-22593

Name of the Vulnerable Software and Affected Versions HPE AutoPass License Server APLS affected versions not specified Description A remote authentication bypass issue exists in HPE AutoPass License Server. This allows unauthorized access. No information is available regarding the number of...

CVE-2026-3053

A vulnerability was determined in DataLinkDC dinky up to 1.2.5. This affects the function addInterceptors of the file dinky-admin/src/main/java/org/dinky/configure/AppConfig.java of the component OpenAPI Endpoint. Executing a manipulation can lead to missing authentication. It is possible to laun...

PT-2026-6996

Name of the Vulnerable Software and Affected Versions detronetdip E-commerce version 1.0.0 Description A weakness exists in detronetdip E-commerce 1.0.0 related to account creation. A manipulation of the email argument within an unknown function of the file /Admin/assets/backend/seller/add...