Vulnerability of .NET and Microsoft Visual Studio software platforms, related to improper implementation of authentication algorithms, allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of .NET and Microsoft Visual Studio software-related programs is related to the improper implementation of authentication algorithms. Exploiting this vulnerability can allow an attacker to bypass security restrictions and gain unauthorized access to protected information...

The vulnerability in the `src/phpMyFAQ/Controller/Api/SetupController.php` file of the phpMyFAQ web application allows a perpetrator to gain unauthorized access to protected information and cause service failure.

The vulnerability of the src/phpMyFAQ/Controller/Api/SetupController.php file in the phpMyFAQ web application is related to the lack of authentication for the critical function. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information and cause...

CVE-2026-34949: Missing Authentication for Critical Function

Combodo iTop is a web based IT service management tool.Prior to 3.2.3, an unauthenticated user could delete the .readonly file on iTop instances — a file created during the setup process that prevents users from performing write actions. This issue has been fixed in version 3.2.3...

CVE-2026-61397: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's OAuth2 authentication plugin and Google OAuth integration. This issue affects Apache CloudStack: from 4.19.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to...

CVE-2026-16323: Execution After Redirect (EAR)

Execution after redirect EAR vulnerability in FuyaWeb Internet and Informatics Services ArchitectPanel Web Admin Panel allows Authentication Bypass. This issue affects ArchitectPanel Web Admin Panel: through 28072026...

CVE-2026-59799: Improper Privilege Management

Improper Privilege Management vulnerability in Apache CloudStack's Two-factor authentication plugin allowing bypass of the two-factor authentication disable flow. This issue affects Apache CloudStack: from 4.18.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to...

PT-2026-79312

Name of the Vulnerable Software and Affected Versions Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress versions prior to 4.8.7 Description An authentication bypass exists because the handle email otp return function returns a secret magic...

Zabbix Server 7.4.x < 7.4.11 Authentication Bypass (ZBX-28071)

The version of Zabbix Server installed on the remote host is 7.4.x prior to 7.4.11. It is, therefore, affected by an authentication bypass vulnerability: - The cryptographic key used for signing Frontend sessions has been erroneously written to the database seed. In deployments that utilize both...

PT-2026-79441

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, iTop returns different responses for valid/invalid usernames depending on multiple factors in the reset password mechanism, leading to user enumeration. This issue has been fixed in version 3.2.3...

PT-2026-79310

Execution after redirect EAR vulnerability in FuyaWeb Internet and Informatics Services ArchitectPanel Web Admin Panel allows Authentication Bypass. This issue affects ArchitectPanel Web Admin Panel: through 28072026...

PT-2026-79322

Name of the Vulnerable Software and Affected Versions Apache CloudStack versions 4.18.0.0 through 4.20.3.0 Apache CloudStack versions 4.21.0.0 through 4.22.1.0 Description Improper Privilege Management in the Two-factor authentication plugin allows for the bypass of the two-factor authentication...

CVE-2026-76157: Missing Authentication for Critical Function

Missing authentication for a critical function in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an unauthenticated remote attacker to upload arbitrary files to the server's configured upload directory...

CVE-2026-69228: Missing Authentication for Critical Function

There is a missing authentication vulnerability in Esri Portal for ArcGIS versions 12.0 and prior that may allow a remote, unauthenticated attacker to access a specific resource not user content that should only be accessible by authenticated users. Users working with ArcGIS Enterprise 11.1, 11.3...

CVE-2026-68745: Improper Verification of Cryptographic Signature

Certificate validation failures in SAML authentication in Apache CloudStack 4.20.3.0 and 4.22.1.0 on all platforms allow a malicious agent to forge a SAML response to the management server. The agent will have to spoof the ip address of the IdP or get an url of its own choosing registered in the...

The vulnerability of the ASP.NET Core software platform, related to bypassing authentication using supposedly immutable data, allows attackers to enhance their privileges.

The vulnerability of the ASP.NET Core software platform relates to bypassing authentication using data that is assumed to be unchangeable. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Git repository management system Gitea, related to deficiencies in the authentication mechanism, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Git repository management system Gitea is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Linux Distros Unpatched Vulnerability : CVE-2026-15686

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adminer multiquery Incorrect Check of Function Return Value Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary...

CVE-2026-34741: Missing Authentication for Critical Function

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, authentication bypass allows unauthenticated remote attackers to execute arbitrary PHP files from the env-production directory on a new iTop instance in the production environment. This issue has been fixed in version 3.2.3...

CVE-2026-15046: Cross-Site Request Forgery (CSRF)

The LitExtension WordPress plugin through 1.2.5 does not verify a nonce before an administrative action that overwrites the store-migration connector's authentication token, allowing attackers to take over the connector token by tricking a logged-in administrator into clicking a crafted link CSRF...

CVE-2026-30866: Missing Authentication for Critical Function

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, unauthenticated users can access uploaded sensitive via sniffed url. This issue has been fixed in version 3.2.3...