EUVD-2026-64690

A security vulnerability has been detected in EFM ipTIME T24000M up to 14.20.0. This affects the function httpconchecksessionurl of the component Session Validation Handler. Such manipulation leads to improper authentication. The attack can be executed remotely. The exploit has been disclosed...

CVE-2026-78168

EFM ipTIME T24000M routers running firmware up to 14.20.0 are affected by an improper authentication vulnerability in the function httpcon_check_session_url within the Session Validation Handler . The flaw allows a remote, unauthenticated attacker to bypass session validation without user interac...

CVE-2026-78168 EFM ipTIME T24000M Session Validation httpcon_check_session_url improper authentication

A security vulnerability has been detected in EFM ipTIME T24000M up to 14.20.0. This affects the function httpconchecksessionurl of the component Session Validation Handler. Such manipulation leads to improper authentication. The attack can be executed remotely. The exploit has been disclosed...

EUVD-2026-64687

A weakness has been identified in EFM ipTIME T16000M 14.20.2. The impacted element is the function httpconchecksessionurl of the component Session Validation Handler. This manipulation causes improper authentication. Remote exploitation of the attack is possible. The exploit has been made availab...

CVE-2026-78167

EFM ipTIME T16000M (firmware 14.20.2 ) contains an improper authentication vulnerability in the httpcon_check_session_url function of the Session Validation Handler . The flaw allows remote exploitation over the network with no privileges required and low complexity , rated CVSS 4.0: 10.0 (CRITIC...

CVE-2026-78167 EFM ipTIME T16000M Session Validation httpcon_check_session_url improper authentication

A weakness has been identified in EFM ipTIME T16000M 14.20.2. The impacted element is the function httpconchecksessionurl of the component Session Validation Handler. This manipulation causes improper authentication. Remote exploitation of the attack is possible. The exploit has been made availab...

EUVD-2026-64673

A vulnerability was identified in the-momentum open-wearables up to 0.6.2. This impacts the function redeeminvitationcode of the file backend/app/api/routes/v1/userinvitationcode.py of the component Public Invitation-Code Redemption Endpoint. The manipulation of the argument code leads to missing...

CVE-2026-78154

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The endpoint is public on purpose and the invitation code is the credential. This is the standalone SD...

The vulnerability of the Parser component in web browsers Firefox and Firefox ESR, as well as in the Thunderbird email client, allows a hacker to trigger a service failure.

The vulnerability of the Parser component in Firefox and Firefox ESR web browsers, as well as in the Thunderbird email client, relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability in the `src/phpMyFAQ/Controller/Frontend/AuthenticationController.php` file of the phpMyFAQ web application allows a violator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the src/phpMyFAQ/Controller/Frontend/AuthenticationController.php file in the phpMyFAQ web application is related to insufficient limits on authentication attempts. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the...

The vulnerability of the Security component in web browsers Firefox ESR, Firefox, and the email client Thunderbird allows a hacker to trigger a service failure.

The vulnerability of the Security component in Firefox ESR, Firefox, and the Thunderbird email client involves bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to cause service interruptions...

The vulnerability in the Networking component of Firefox and Firefox ESR web browsers, as well as the Thunderbird email client, allows a hacker to induce a service failure.

The vulnerability in the Networking component of Firefox and Firefox ESR web browsers, as well as the Thunderbird email client, relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

PT-2026-80923

Name of the Vulnerable Software and Affected Versions rConfig versions 8.0.0 through 8.2.12 Description An authentication bypass exists due to a duplicate Auth::routes call in the routes/web.php file, which inadvertently re-enables the POST /register endpoint after it had been disabled. This allo...

PT-2026-80866

Name of the Vulnerable Software and Affected Versions Zscaler Client Connector affected versions not specified Description An authentication bypass issue exists in the communications between the Zscaler Client Connector and the Zscaler Client Connector Portal. Authentication bypass occurs when an...

PT-2026-79805

Name of the Vulnerable Software and Affected Versions EFM ipTIME T24000M versions prior to 14.20.0 Description Improper authentication exists in the Session Validation Handler component. A remote attacker can manipulate the httpcon check session url function to bypass authentication mechanisms...

The vulnerability in the Firefox web browser, related to bypassing authentication through spoofing, allows attackers to compromise data integrity.

The vulnerability in the Firefox web browser relates to bypassing authentication through spoofing. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

MiracleLinux 9 : 389-ds-base-2.8.0-9.el9_8 (AXSA:2026-1635:06)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1635:06 advisory. 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check CVE-2026-11770 389-ds-base: 389-ds-base: NULL pointer dereferen...

PT-2026-80858

Name of the Vulnerable Software and Affected Versions miniOrange OAuth Client versions prior to 3.2.0 Description An issue in the miniOrange OAuth Client extension for Joomla allows an attacker to log in as any account, including administrators, without requiring a valid account or prior...

PT-2026-80920

Improper Authentication vulnerability in Apache Camel Platform HTTP Main component. This issue affects Apache Camel: from 4.8.0 before 4.22.0. The camel-main embedded HTTP server can protect its endpoints with JWT authentication, configured through authenticationEnabled together with the JWT...

PT-2026-80926

The use of hard-coded cryptographic key vulnerability has been identified in the mesh functionality of Deco XE75 v3, XE5300 v3.6 and WE10800 v3.6. A shared RSA-512 mesh group private key is present in the affected firmware and is used by the mesh protocol for node authentication. An attacker who...