CVE-2026-97858

A vulnerability exists in Guangzhou Juan IoT Technology EseeCloud (CWE-915) where an attacker can trigger the server to unbind a target device from its current owner and rebind it to the requesting account. This action can be performed regardless of whether the device is already associated with a...

PT-2026-115615

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An attacker can force the server to unbind a target device from its current owner and rebind it to the requesting account. This action occurs regardless of wheth...

CVE-2026-102631

In authd before 0.7.1, the user identity matching in UpdateUser internal/users/manager.go resolves an incoming login by the broker-scoped provider ID, but falls back to matching the username when the provider ID does not belong to any known user, and does not reject a conflicting non-empty provid...

EUVD-2026-102198

In authd before 0.7.1, the user identity matching in UpdateUser internal/users/manager.go resolves an incoming login by the broker-scoped provider ID, but falls back to matching the username when the provider ID does not belong to any known user, and does not reject a conflicting non-empty provid...

PT-2026-115016

Name of the Vulnerable Software and Affected Versions authd versions prior to 0.7.1 Description User identity matching in the UpdateUser function located in internal/users/manager.go resolves logins using a broker-scoped provider ID. If the provider ID is not recognized, the system falls back to...

CVE-2026-66875: Missing Authentication for Critical Function

In the Mira hormone monitor device firmware v1.7.1.47 build 01070147, a remote unauthenticated attacker within BLE range approximately 10–30 meters can silently rebind the device to an attacker-controlled account, extract stored hormone measurements in cleartext, cause a denial-of-service via...