210928 matches found
CVE-2026-110245
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to obtain sensitive information due to improper authentication...
CVE-2026-119128 ZITADEL 4.0.0 before 4.19.5 Login V2 Account Takeover via Forgeable verificationCheck Cookie
ZITADEL 4.0.0 before 4.19.5 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticated attackers to set the first credential of users lacking any authentication method. Attackers can compute a valid verificationCheck cookie from the user ID and browser...
EUVD-2026-113195
ZITADEL 4.0.0 before 4.19.5 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticated attackers to set the first credential of users lacking any authentication method. Attackers can compute a valid verificationCheck cookie from the user ID and browser...
CVE-2026-119128
ZITADEL versions 4.0.0 before 4.19.5 are susceptible to an authentication bypass vulnerability in the Login V2 UI . The root cause is the ability for unauthenticated attackers to compute a valid verificationCheck cookie using only the user ID and browser fingerprint. This flaw allows attackers to...
EUVD-2026-113024
Improper access control in the Web Admin console of Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could expose administrative functionality to remote authentication attempts...
CVE-2026-90867
Progress Software WS_FTP Server on Windows versions prior to 2024.0.7 and 2025.0.4 is susceptible to an Improper Access Control vulnerability (CWE-284) within the Web Admin console . This flaw could allow remote actors to access administrative functionality via remote authentication attempts . Th...
CVE-2026-90867 Improper Access Control of Web Admin Console in Progress WS_FTP Server
Improper access control in the Web Admin console of Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could expose administrative functionality to remote authentication attempts...
CVE-2026-90862 Web Transfer Module Multi-Factor Authentication Bypass in Progress WS_FTP Server
Improper authentication in the Web Transfer Module of Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an attacker with a user’s password to access certain files associated with that account without satisfying multi-factor authentication requirements...
CVE-2026-90862
Progress Software WS_FTP Server on Windows (versions prior to 2024.0.7 and 2025.0.4 ) is vulnerable to improper authentication within the Web Transfer Module . An attacker possessing a user's password could access specific files associated with that account by bypassing multi-factor authenticatio...
CVE-2026-90862 Web Transfer Module Multi-Factor Authentication Bypass in Progress WS_FTP Server
Improper authentication in the Web Transfer Module of Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an attacker with a user’s password to access certain files associated with that account without satisfying multi-factor authentication requirements...
EUVD-2026-113019
Improper authentication in the Web Transfer Module of Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an attacker with a user’s password to access certain files associated with that account without satisfying multi-factor authentication requirements...
CVE-2026-84295 Improper Authentication in Progress WS_FTP Server
Improper authentication in Progress Software WSFTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an unauthenticated remote attacker to access sensitive information, including administrative credentials...
CVE-2026-84295 Improper Authentication in Progress WS_FTP Server
Improper authentication in Progress Software WSFTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an unauthenticated remote attacker to access sensitive information, including administrative credentials...
EUVD-2026-113016
Improper authentication in Progress Software WSFTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an unauthenticated remote attacker to access sensitive information, including administrative credentials...
CVE-2026-84295
Progress Software WS_FTP Server on Windows is vulnerable to an improper authentication flaw in versions prior to 2024.0.6 and 2025.0.3 . This vulnerability allows an unauthenticated remote attacker to access sensitive information , specifically including administrative credentials . No specific t...
CVE-2026-112256
OpenText Advanced Authentication Server versions 6.4.0.0 through 6.4.3.8, 6.5.0.0 through 6.5.0.10, and 6.6.0.0 through 6.6.1.0 are vulnerable to a logon bypass due to the acceptance of extraneous untrusted data with trusted data (specifically, an attacker-controlled completed-methods list ). Thi...
EUVD-2026-113003
Acceptance of extraneous untrusted data with trusted data vulnerability in OpenText Advanced Authentication Server allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Advanced Authentication Server: from 6.4.0.0 through 6.4.3.8, from 6.5.0.0 through 6.5.0.10, and...
CVE-2026-112255
OpenText Advanced Authentication Server is vulnerable to an insecure default configuration issue (CWE-1188) affecting versions 6.4.0.0 through 6.4.3.x , 6.5.0.0 through 6.5.0.x , and 6.6.0.0 through 6.6.1.0 . The root cause is an insecure default allow-list that permits Excessive Allocation of re...
EUVD-2026-113002
Initialization of a resource with an insecure default vulnerability in OpenText Advanced Authentication Server allows Excessive Allocation. This issue affects Advanced Authentication Server: from 6.4.0.0 through 6.4.3.x, from 6.5.0.0 through 6.5.0.x, and from 6.6.0.0 through 6.6.1.0. The fix for...
CVE-2026-42167
CVE-2026-42167: SQL Injection in ProFTPD modsql 📋 Executive Summary CVE-2026-42167 is a critical SQL injection vulnerability in ProFTPD's modsql module that allows authentication bypass , backdoor user injection , and remote code execution RCE. Attribute| Value ---|--- Type| SQL Injection CWE-89...