CVE-2026-58003

WWBN AVideo through commit 9c39d8c8 is affected by a cross-site request forgery (CSRF) vulnerability in the releaseVideoNow.json.php endpoint. The endpoint lacks authenticity checks and accepts GET requests , allowing an attacker to craft a malicious cross-site GET request carrying an administrat...

CVE-2025-31356

Insufficient verification of data authenticity for some IntelR Trust Domain Extensions IntelR TDX within Ring 0: Hypervisor may allow an information disclosure. A system software adversary with a privileged user access combined with a high complexity attack may enable data exposure. This result m...

EUVD-2026-56779

Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network...

EUVD-2025-210689

Insufficient verification of data authenticity for some IntelR Trust Domain Extensions IntelR TDX within Ring 0: Hypervisor may allow an information disclosure. A system software adversary with a privileged user access combined with a high complexity attack may enable data exposure. This result m...

CVE-2025-31356

Insufficient verification of data authenticity for some IntelR Trust Domain Extensions IntelR TDX within Ring 0: Hypervisor may allow an information disclosure. A system software adversary with a privileged user access combined with a high complexity attack may enable data exposure. This result m...

CVE-2025-31356

CVE-2025-31356 affects Intel(R) Trust Domain Extensions (Intel(R) TDX) within Ring 0: Hypervisor. The issue is insufficient verification of data authenticity, potentially enabling information disclosure by a system software adversary with privileged access and high attack complexity, via local ac...

CVE-2026-72544

OpenSignLabs OpenSign ≤ 2.37.0 has an integrity verification flaw in the triggerevent Parse cloud function. It accepts viewer identity and IP address as caller-supplied parameters without authentication, allowing unauthenticated remote attackers to forge document audit-trail entries. This enables...

CVE-2026-72544 OpenSignLabs OpenSign - Insufficient Verification of Data Authenticity

An integrity verification vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to forge document audit-trail entries via the triggerevent Parse cloud function. The function accepts viewer identity and IP address as caller-supplied parameters without...

PT-2026-70570

Name of the Vulnerable Software and Affected Versions Azure Entra ID affected versions not specified Description Insufficient verification of data authenticity allows an authorized attacker to perform spoofing over a network. Recommendations At the moment, there is no information about a newer...

OPENSUSE-SU-2026:21557-1 Security update for gleam

This update for gleam fixes the following issues: Changes in gleam: - Update to 1.18.1: CVE-2026-59247: insufficient verification of data authenticity allows a MITM adversary to substitute forged Hex package contents during dependency resolution bsc1272992 Set minimum required Erlang version to 2...

CVE-2026-21078

Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity...

CVE-2026-21078

Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity...

CVE-2026-21078

CVE-2026-21078 affects Samsung Smart Switch in trouble scanning mode prior to 3.7.72.6. The issue is insufficient verification of data authenticity, allowing adjacent attackers to spoof device identity. According to the provided metrics, the exploit requires only low privileges and exists an acti...

EUVD-2026-55103

Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity...

CVE-2026-21078

Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity...

EUVD-2026-54185

A flaw has been found in Insta InstaKNXServiceApp 1.2.3.1469. Affected by this issue is the function CreateWebClientAndDownloadFileList of the component Firmware Update Handler. Executing a manipulation can lead to insufficient verification of data authenticity. It is possible to launch the attac...

EUVD-2026-54302

The Integrate PhonePe with WooCommerce WordPress plugin through 1.2.1 does not validate that a verified payment transaction belongs to the order being marked as paid, nor does it verify the authenticity of its payment-completion request, allowing unauthenticated attackers to reuse a single valid...

CVE-2026-19061

A flaw has been found in Insta InstaKNXServiceApp 1.2.3.1469. Affected by this issue is the function CreateWebClientAndDownloadFileList of the component Firmware Update Handler. Executing a manipulation can lead to insufficient verification of data authenticity. It is possible to launch the attac...

CVE-2026-19061

CVE-2026-19061 affects Insta InstaKNXServiceApp 1.2.3.1469, specifically the Firmware Update Handler’s CreateWebClientAndDownloadFileList function. The issue is insufficient verification of data authenticity, with exploitation described as remote and technically complex. No remediation or version...

CVE-2026-19061 Insta InstaKNXServiceApp Firmware Update CreateWebClientAndDownloadFileList data authenticity

A flaw has been found in Insta InstaKNXServiceApp 1.2.3.1469. Affected by this issue is the function CreateWebClientAndDownloadFileList of the component Firmware Update Handler. Executing a manipulation can lead to insufficient verification of data authenticity. It is possible to launch the attac...