1174 matches found
PT-2026-110949
Name of the Vulnerable Software and Affected Versions Netherman Portal del Hermano portaldelhermano.es versions prior to 2026-10-06 Description Broken authentication in the password-recovery flow allows unauthenticated attackers to take over member accounts across all tenants. The issue stems fro...
CVE-2026-53997: Weak Password Recovery Mechanism for Forgotten Password
Netherman Portal del Hermano portaldelhermano.es before 2026-10-06 contains a broken authentication vulnerability in its password-recovery flow at the POST /password/create-access and POST /password/email endpoints, allowing unauthenticated attackers to take over any member account across all...
CVE-2026-62038
Unauthenticated Broken Authentication in eRoom = 1.7.1 versions...
CVE-2026-62038
The eRoom WordPress plugin versions
CVE-2026-62038 WordPress eRoom plugin <= 1.7.1 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in eRoom = 1.7.1 versions...
EUVD-2026-96472
Unauthenticated Broken Authentication in eRoom = 1.7.1 versions...
CVE-2026-62038: Authentication Bypass Using an Alternate Path or Channel
Unauthenticated Broken Authentication in eRoom = 1.7.1 versions...
PT-2026-109804
Name of the Vulnerable Software and Affected Versions eRoom versions prior to 1.7.2 Description The software contains a broken authentication mechanism that allows unauthenticated users to bypass security controls. Recommendations Update to a version newer than 1.7.1...
CVE-2026-106602
The WordPress Jetpack plugin (versions
CVE-2026-106602 WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue affects Jetpack: from n/a through 16.2...
WordPress Grocery Shopping Store theme <= 1.3.3 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by HaiND in WordPress Theme Grocery Shopping Store versions = 1.3.3...
CVE-2026-85421
A critical security vulnerability exists in Brocade ASCG versions prior to 3.5.0 . The HTTPS service fails to properly enforce authentication or access control checks on incoming requests. An unauthenticated attacker with network access can exploit this flaw to issue control commands, modify syst...
WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Jetpack versions = 16.2...
WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Jetpack versions = 16.2...
CVE-2026-39793
Subscriber Broken Authentication in Simple JWT Login 4.0.0 versions...
CVE-2026-39769
Unauthenticated Broken Authentication in Graphina = 3.1.12 versions...
CVE-2026-100518
Unauthenticated Broken Authentication in Advanced Google reCAPTCHA = 5.40 versions...
CVE-2026-100518 WordPress Advanced Google reCAPTCHA plugin <= 5.40 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in Advanced Google reCAPTCHA = 5.40 versions...