PT-2026-91839

Summary The dashboard reads its authentication credentials from $ESPHOME USERNAME and $ESPHOME PASSWORD. Earlier versions, and the legacy esphome dashboard, read the bare $USERNAME and $PASSWORD instead. When the env vars were renamed the bare names were dropped with no fallback, so an operator w...

The vulnerability of the Adobe Experience Manager content and media management system, related to deficiencies in authentication procedures, allows a perpetrator to execute arbitrary code.

The vulnerability of the Adobe Experience Manager content and media management system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

CVE-2025-68624

N-able Mail Assure (formerly SolarWinds MSP Mail Assure), a cloud-based multi-tenant SMTP relay, contains a design-level authorization flaw (CWE-290) where an authenticated SMTP user can send outbound mail using MAIL FROM addresses of other tenants . After valid SMTP AUTH, the server accepts arbi...

Flowise-CVE-2025-58434-PasswordReset

CVE-2025-58434 — Restablecimiento de Contraseña No Autenticado en Flowise AI Resumen ID CVE: CVE-2025-58434 Software Afectado: Flowise AI Versiones Vulnerables: = 3.0.5 Versión Corregida: 3.0.6 y posteriores Gravedad: Crítica Autor: r3nsi15 Fecha: 2025 Descripción Las versiones de Flowise AI hast...

n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions

Impact The public OIDC login and callback endpoints ran the full flow whether or not OIDC was the instance's active, enabled authentication method, so turning OIDC off in Settings did not stop it issuing sessions. An administrator who disabled the provider still had a working login route. The pat...

CVE-2026-81796

Authentication Bypass Using an Alternate Path or Channel vulnerability in WEN Solutions WP Travel wp-travel allows Password Recovery Exploitation.This issue affects WP Travel: from n/a through 12.0.3...

CVE-2026-81787

Unauthenticated Broken Authentication in IMPress for IDX Broker = 3.3.0 versions...

CVE-2026-81783

Subscriber Broken Authentication in MailMunch – Grow your Email List = 3.2.5 versions...

CVE-2026-81796

CVE-2026-81796 is an unauthenticated Broken Authentication vulnerability in the WordPress WP Travel plugin , affecting versions

EUVD-2026-75527

Unauthenticated Broken Authentication in WP Travel = 12.0.3 versions...

CVE-2026-81796 WordPress WP Travel plugin <= 12.0.3 - Broken Authentication vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in WEN Solutions WP Travel wp-travel allows Password Recovery Exploitation.This issue affects WP Travel: from n/a through 12.0.3...

CVE-2026-81796 WordPress WP Travel plugin <= 12.0.3 - Broken Authentication vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in WEN Solutions WP Travel wp-travel allows Password Recovery Exploitation.This issue affects WP Travel: from n/a through 12.0.3...

EUVD-2026-75520

Unauthenticated Broken Authentication in IMPress for IDX Broker = 3.3.0 versions...

CVE-2026-81787 WordPress IMPress for IDX Broker plugin <= 3.3.0 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in IMPress for IDX Broker = 3.3.0 versions...

CVE-2026-81787

CVE-2026-81787 affects the WordPress plugin IMPress for IDX Broker (versions ≤ 3.3.0 ). The vulnerability is an unauthenticated Broken Authentication flaw, meaning an attacker with network access and no prior credentials can exploit it. The CVSS 3.1 score is 6.5 (Medium) with a vector of AV:N/AC:...

CVE-2026-81787 WordPress IMPress for IDX Broker plugin <= 3.3.0 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in IMPress for IDX Broker = 3.3.0 versions...

EUVD-2026-75516

Subscriber Broken Authentication in MailMunch – Grow your Email List = 3.2.5 versions...

CVE-2026-81783

CVE-2026-81783 affects the WordPress plugin MailMunch – Grow your Email List , versions ≤ 3.2.5 . The vulnerability is a Broken Authentication flaw exploitable by users with the Subscriber role. Discovered by Jakub Herman , it carries a CVSS 3.1 score of 7.1 (HIGH) with the vector AV:N/AC:L/PR:L/...

CVE-2026-81783 WordPress MailMunch – Grow your Email List plugin <= 3.2.5 - Broken Authentication vulnerability

Subscriber Broken Authentication in MailMunch – Grow your Email List = 3.2.5 versions...

CVE-2026-81783 WordPress MailMunch – Grow your Email List plugin <= 3.2.5 - Broken Authentication vulnerability

Subscriber Broken Authentication in MailMunch – Grow your Email List = 3.2.5 versions...