1105 matches found
CVE-2026-66465: Authentication Bypass Using an Alternate Path or Channel
Unauthenticated Broken Authentication in Cartify = 1.3.0.1 versions...
PT-2026-71571
Unauthenticated Broken Authentication in Cartify = 1.3.0.1 versions...
PT-2026-71560
Unauthenticated Broken Authentication in Salon booking system = 10.30.26 versions...
PT-2026-71529
Unauthenticated Broken Authentication in Log in with Google = 1.4.2 versions...
CVE-2026-66453: Authentication Bypass Using an Alternate Path or Channel
Unauthenticated Broken Authentication in Salon booking system = 10.30.26 versions...
BASM (Broken Authentication & Session Management) Apache Tomcat Dependency in Jira Service Management Data Center and Server
This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-53404 was introduced in 10.0.1 and later of Jira Service Management Data Center and Server. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 7.3 and a CVSS...
BASM (Broken Authentication & Session Management) at Apache Tomcat Dependency in Bamboo Data Center
This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-53404 was introduced in 10.1.1 and later of Bamboo Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 7.3 and a CVSS Vector of...
BASM (Broken Authentication & Session Management) Apache Tomcat Dependency in Crowd Data Center and Server
This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-53404 was introduced in 6.1.0 and later of Crowd Data Center and Server. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 7.3 and a CVSS Vector of...
BASM (Broken Authentication & Session Management) Apache Tomcat Dependency in Confluence Data Center
This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-53404 was introduced in versions 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2.0 of Confluence Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CV...
BASM (Broken Authentication & Session Management) Apache Tomcat Dependency in Jira Software Data Center and Server
This is a vulnerability in a non-Atlassian Jira Software dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-55276 was introduced in 9.12.0 and...
BASM (Broken Authentication & Session Management) Apache Tomcat Dependency in Jira Service Management Data Center and Server
This is a vulnerability in a non-Atlassian Jira Service Management dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-55276 was introduced in...
BASM (Broken Authentication & Session Management) Apache Tomcat Dependency in Confluence Data Center
This is a vulnerability in a non-Atlassian Confluence dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-55276 was introduced in versions 6.0.1,...
WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.0.0 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by tomcat102 in WordPress Plugin OAuth Single Sign On – SSO OAuth Client versions = 7.0.0...
CVE-2026-68067
The login endpoint on the Mira cloud API accepts any format-valid string in the password field and returns a live active session token for the account matching the supplied email address. An attacker could use an email address to control cloud accounts and access hormone record information and...
BASM (Broken Authentication & Session Management) in Bitbucket Data Center
This High severity BASM Broken Authentication & Session Management vulnerability was introduced in versions 9.4.0, 10.2.0, and 10.4.0 of Bitbucket Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.8, allows an unauthenticated attacker to perfo...
BASM (Broken Authentication & Session Management) Apache Tomcat Dependency in Jira Service Management Data Center and Server
This is a vulnerability in a non-Atlassian Jira Service Management dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-53434 was introduced in...
Broken Authentication & Session Management org.bouncycastle:bcpkix-lts8on Dependency in Confluence Data Center
This High severity Broken Authentication & Session Management vulnerability was introduced in versions 9.2.8, 9.5.4, 10.0.3, 10.1.0, and 10.2.0 of Confluence Data Center. This Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...
BASM (Broken Authentication & Session Management) Bouncy Castle Dependency in Crowd Data Center and Server
This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-12802 was introduced in 6.1.0 and later of Crowd Data Center and Server. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...
WordPress Salon booking system plugin <= 10.30.26 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by Evan NR in WordPress Plugin Salon booking system versions = 10.30.26...