CVE-2026-83657

A weak authentication vulnerability exists in Windows Modern Device Management (MDM) . This flaw allows an authorized attacker to perform tampering locally on the affected system. The vulnerability is associated with CWE-1390 and has a CVSS 3.1 score of 5.5 (MEDIUM) . No specific exploit details ...

EUVD-2026-99318

Weak authentication in Windows Modern Device Management MDM allows an authorized attacker to perform tampering locally...

Active Directory Federation Services (AD FS) Spoofing Vulnerability

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...

Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...

Windows Kernel Security Feature Bypass Vulnerability

Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network...

Active Directory Federation Services (AD FS) Spoofing Vulnerability

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability

Weak authentication in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...

Windows Print Spooler Components Elevation of Privilege Vulnerability

Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

Windows Projected File System Elevation of Privilege Vulnerability

Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally...

Network Device Enrollment Service (NDES) Spoofing Vulnerability

Weak authentication in Network Device Enrollment Service NDES allows an authorized attacker to perform spoofing over a network...

Microsoft PowerToys Tampering Vulnerability

Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally...

Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability

Weak authentication in Network Device Enrollment Service NDES allows an unauthorized attacker to execute code over a network...

EUVD-2023-60717

Frappe framework before 13.32.0 uses weak authentication for print view access, because the print view key can be derived from data exposed by other whitelisted API endpoints. Attackers can generate a valid key to view documents through the print view without proper permissions...

PT-2026-112917

Weak authentication in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...

PT-2026-112719

Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description Weak authentication in the Windows Projected File System allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no...

PT-2026-112716

Name of the Vulnerable Software and Affected Versions Network Device Enrollment Service NDES affected versions not specified Description Weak authentication in the Network Device Enrollment Service NDES allows an authorized attacker to perform spoofing over a network. Recommendations At the momen...

PT-2026-112756

Name of the Vulnerable Software and Affected Versions Windows Print Spooler affected versions not specified Description Weak authentication in Windows Print Spooler components allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At...

PT-2026-112869

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description Weak authentication in the Windows Kernel allows an authorized attacker to bypass a security feature over a network, which can lead to an impact on the system. Recommendations At the...

PT-2026-112856

Name of the Vulnerable Software and Affected Versions Azure Key Vault affected versions not specified Description Weak authentication allows an unauthorized attacker to bypass a security feature over a network. This authentication-bypass flaw could expose keys, certificates, and secrets used acro...