CVE-2026-112197 Missing Authentication for Critical Function in Tactis' NoviGest Desktop App

Vulnerability due to a lack of authentication in critical functions of the NoviGest Desktop App's Java RMI service. An attacker with network access to the service can invoke remote methods without authentication, obtain sensitive credentials, and execute arbitrary SQL queries on PostgreSQL. The...

CVE-2026-112197

The NoviGest Desktop App by Tactis contains a vulnerability due to missing authentication in its Java RMI service . An attacker with network access can invoke remote methods without authentication to obtain sensitive credentials and perform arbitrary SQL queries on a PostgreSQL database. Because ...

EUVD-2026-111991

Vulnerability due to a lack of authentication in critical functions of the NoviGest Desktop App's Java RMI service. An attacker with network access to the service can invoke remote methods without authentication, obtain sensitive credentials, and execute arbitrary SQL queries on PostgreSQL. The...

CVE-2026-86391

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Authentication Bypass by Spoofing...

CVE-2026-57195

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, a NULL pointer dereference in the Asterisk Manager Interface AMI may allow an unauthenticated attacker to crash Asterisk wh...

EUVD-2025-211205

Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 42569, Acronis Cyber Protect 17 Windows before build 42587...

CVE-2025-30414

A local privilege escalation vulnerability exists in Acronis Cyber Protect Cloud Agent (Windows) and Acronis Cyber Protect 17 (Windows) due to improper authentication (CWE-1390). The affected versions are those prior to build 42569 for the Cloud Agent and before build 42587 for Cyber Protect 17. ...

CVE-2025-30414

Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 42569, Acronis Cyber Protect 17 Windows before build 42587...

CVE-2018-10933

Authentication Bypass in Server Code CVE-2018-10933 Versions 0.7.6 to 0.8.4 Description libssh versions 0.6 and above have an authentication bypass vulnerability in the server code. By presenting the server an SSH2MSGUSERAUTHSUCCESS message in place of the SSH2MSGUSERAUTHREQUEST message which the...

Exploit for Improper Authentication in Fogproject

CVE-2025-58443 Proof of Concept / Exploit archive per CVE-2...

EUVD-2026-111848

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Authentication Bypass by Spoofing...

CVE-2026-86391

The Dell PowerProtect Data Domain Management Center contains an Authentication Bypass by Spoofing vulnerability (CWE-290) affecting Feature Release versions 7.7.1.0 through 8.8, and LTS2024 (7.13.1.0 to 7.13.1.80), LTS2025 (8.3.1.0 to 8.3.1.40), and LTS2026 (8.6.1.0 to 8.6.1.20) releases. A low p...

CVE-2026-86391

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Authentication Bypass by Spoofing...

CVE-2026-90717

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Authentication Bypass by Spoofing...

CVE-2026-86400

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Authentication vulnerability. An...

CVE-2026-86397

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Authentication vulnerability. An...

CVE-2026-86397

Dell PowerProtect Data Domain is impacted by an Improper Authentication vulnerability (CWE-862) affecting Feature Release versions 7.7.1.0 through 8.8, LTS2024 versions 7.13.1.0 through 7.13.1.80, LTS2025 versions 8.3.1.0 through 8.3.1.40, and LTS2026 versions 8.6.1.0 through 8.6.1.20. An unauthe...

EUVD-2026-111841

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Authentication vulnerability. An...

CVE-2026-86397

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Authentication vulnerability. An...

EUVD-2026-111829

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Authentication vulnerability. An...