Incus Authentication Data Compromise

The vulnerability of the container management system and the virtual machine manager Incus is related to errors in the certificate validation process. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and integrity of the protected information...

Azure Resource Manager Authentication Bypass Privilege Escalation

The vulnerability of the Azure Resource Manager deployment and management service, as well as the Azure Local software platform, is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...

Prisma Access Agent Privilege Escalation

The vulnerability of the Prisma Access Agent, a user remote access agent, relates to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges, gain read access to data, and execute arbitrary code...

GLPI Authentication Privilege Escalation

The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers who operate remotely to gain increased privileges...

Apache Tomcat Privilege Escalation

The vulnerability of the Apache Tomcat application server is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to gain increased privileges remotely...

N8n Hosted Chat Trigger Unauthorized Access

The vulnerability of the Hosted Chat node’s Chat Trigger function in the N8n platform, which is used for automating processes, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to and...

Microsoft Dynamics 365 Business Central Auth Bypass Privilege Escalation

The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to increase their privileges...

Online Store Authentication Bypass

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass existing security...

Web Confidential Data Access

The vulnerabilities in the web browsers Firefox ESR and Firefox, as well as the email client Thunderbird, are related to authentication process flaws. Exploiting these vulnerabilities can allow an attacker to gain access to confidential data remotely...

Azure SDK for Java Authentication Bypass

The vulnerability of the Azure SDK for Java development software package is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions remotely...

Vexa security vulnerabilities

Vexa is an open-source conference robot and real-time transcription API developed by Vexa.ai. Versions of Vexa prior to 0.10.0-260419-1910 contained security vulnerabilities. These vulnerabilities stemmed from the lack of authentication and authorization checks for internal endpoints, which could...

Synology-chat Module Bypass

The vulnerability of the Synology-chat module of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms remotely...

cupsd Privilege Escalation

The vulnerability of the cupsd server in CUPS printing relates to deficiencies in authentication mechanisms. Exploiting this vulnerability allows an attacker to elevate their privileges to root by sending specially crafted requests...

PT-2026-30220

Name of the Vulnerable Software and Affected Versions Amazon Athena ODBC driver versions prior to 2.1.0.0 Description Insufficient authentication security controls in the browser-based authentication components may allow a threat actor to intercept or hijack authentication sessions due to...

Juju has Improper TLS Client/Server authentication and certificate verification on Database Cluster

Impact Any Juju controller since 3.2.0. An attacker with only route-ability to the target juju controller Dqlite cluster endpoint may join the Dqlite cluster, read and modify all information, including escalating privileges, open firewall ports etc. This is due to not checking the client...

Belden Hirschmann HiEOS LRS11 security vulnerabilities

Belden Hirschmann HiEOS LRS11 is an industrial Ethernet switch operating system platform developed by the American company Belden. Versions of Belden Hirschmann HiEOS LRS11 prior to 01.1.00 contained security vulnerabilities. These vulnerabilities stemmed from improper handling of authentication ...

LLM-powered system authentication bypass

The vulnerability of LLM-based system startups is related to deficiencies in authentication mechanisms. Exploiting this vulnerability allows a remote attacker to view and modify system settings...

Nexxt Solutions Nebula 300+ has security vulnerabilities

The Nexxt Solutions Nebula 300+ is a wireless router produced by the Nexxt Solutions company in the United States. Versions of the Nebula 300+ with the software version 12.01.01.37 and earlier contain security vulnerabilities. These vulnerabilities stem from the lack of rate limits on the...

GitLab Authentication Bypass

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to shortcomings in the authorization process when handling CI tasks. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms remotely...

cURL Authentication Data Compromise

The vulnerability of the software for interacting with servers via cURL is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of the protected information...