CVE-2026-85323: Weak Authentication

Weak authentication in Network Device Enrollment Service NDES allows an authorized attacker to perform spoofing over a network...

Microsoft Windows: CVE-2026-85323: Network Device Enrollment Service (NDES) Spoofing Vulnerability

Weak authentication in Network Device Enrollment Service NDES allows an authorized attacker to perform spoofing over a network...

Microsoft Windows: CVE-2026-85328: Windows Projected File System Elevation of Privilege Vulnerability

Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88101: Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability

Weak authentication in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...

PT-2026-112486

Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally...

CVE-2026-88101: Weak Authentication

Weak authentication in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...

PT-2026-112479

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description Weak authentication allows an unauthorized attacker to perform spoofing over a network, which enables them to affect the system. Recommendations At the moment,...

PT-2026-112084

Name of the Vulnerable Software and Affected Versions Network Device Enrollment Service affected versions not specified Description Weak authentication in the Network Device Enrollment Service NDES allows an unauthorized remote attacker to execute arbitrary code over a network, which can affect t...

PT-2026-112155

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description Weak authentication allows an unauthorized attacker to bypass a security feature over a network, which can lead to an impact on the system. Recommendations At the...

CVE-2026-85922: Weak Authentication

Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-69982: Weak Authentication

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...

PT-2026-112719

Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description Weak authentication in the Windows Projected File System allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no...

PT-2026-112716

Name of the Vulnerable Software and Affected Versions Network Device Enrollment Service NDES affected versions not specified Description Weak authentication in the Network Device Enrollment Service NDES allows an authorized attacker to perform spoofing over a network. Recommendations At the momen...

PT-2026-112467

Name of the Vulnerable Software and Affected Versions Windows Modern Device Management MDM affected versions not specified Description Weak authentication in Windows Modern Device Management MDM allows an authorized attacker to perform local tampering, which can affect the system. Recommendations...

CVE-2023-54411

Frappe framework before 13.32.0 uses weak authentication for print view access, because the print view key can be derived from data exposed by other whitelisted API endpoints. Attackers can generate a valid key to view documents through the print view without proper permissions...

CVE-2023-54411 Frappe before 13.32.0 Weak Authentication via Print View Key

Frappe framework before 13.32.0 uses weak authentication for print view access, because the print view key can be derived from data exposed by other whitelisted API endpoints. Attackers can generate a valid key to view documents through the print view without proper permissions...

CVE-2023-54411

The Frappe framework versions prior to 13.32.0 are vulnerable to weak authentication regarding print view access. The root cause is that the print view key can be derived from data exposed through other whitelisted API endpoints. This allows an attacker to generate a valid key to view documents w...

CVE-2023-54411 Frappe before 13.32.0 Weak Authentication via Print View Key

Frappe framework before 13.32.0 uses weak authentication for print view access, because the print view key can be derived from data exposed by other whitelisted API endpoints. Attackers can generate a valid key to view documents through the print view without proper permissions...

SUSE CVE-2026-93355

LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the configured identity provider to authenticate as any existing user by exploiting an email-based fallback lookup in the JWT authentication flow without verifying the emailverified claim...

Weak Authentication

Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to Weak Authentication via the JWT authentication flow's email-based fallback lookup, which does not verify the emailverified claim before resolving a user identity. An attack...