Lucene search
K

864 matches found

Snyk
Snyk
added 2026/03/30 8:26 p.m.1 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the mcpmessage endpoint due to missing authentication checks and an empty default IP whitelist, which is treated as allowing all connections. An attacker can gain full control over the Ngi...

9.8CVSS6AI score0.38477EPSS
Exploits4References2
RedhatCVE
RedhatCVE
added 2026/03/28 10:51 a.m.5 views

CVE-2026-33366

Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication...

6.9CVSS6.1AI score0.0034EPSS
Exploits0References1
GithubExploit
GithubExploit
added 2026/03/27 3:57 p.m.227 views

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

A script for C...

9.8CVSS6AI score0.38374EPSS
Exploits29
GithubExploit
GithubExploit
added 2026/03/27 3:57 p.m.137 views

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

No d...

9.8CVSS5.8AI score0.38374EPSS
Exploits29
GithubExploit
GithubExploit
added 2026/03/27 2:14 p.m.147 views

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

CVE-2026-23744 python script for exploiting CVE-2026-23744...

9.8CVSS6AI score0.38374EPSS
Exploits29
NVD
NVD
added 2026/03/27 6:16 a.m.4 views

CVE-2026-33366

Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication...

6.9CVSS0.0034EPSS
Exploits0References2
CVE
CVE
added 2026/03/27 5:25 a.m.15 views

CVE-2026-33366

CVE-2026-33366 concerns BUFFALO Wi-Fi router products with a vulnerability in a critical function that is missing authentication, potentially allowing an attacker to forcibly reboot the device over the network without valid credentials. The issue is described with two CVSS vectors: CVSS3.0 base s...

6.9CVSS5.8AI score0.0034EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2026/03/27 5:25 a.m.32 views

CVE-2026-33366

Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication...

6.9CVSS0.0034EPSS
Exploits0References2
EUVD
EUVD
added 2026/03/26 9:31 p.m.6 views

EUVD-2026-16379

Missing Authentication for Critical Function vulnerability in Drupal AJAX Dashboard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Dashboard: from 0.0.0 before 3.1.0...

5.8AI score0.00243EPSS
Exploits0References2
NVD
NVD
added 2026/03/26 9:17 p.m.3 views

CVE-2026-3527

Missing Authentication for Critical Function vulnerability in Drupal AJAX Dashboard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Dashboard: from 0.0.0 before 3.1.0...

6.5CVSS0.00243EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/26 8:3 p.m.5 views

CVE-2026-3527

Missing Authentication for Critical Function vulnerability in Drupal AJAX Dashboard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Dashboard: from 0.0.0 before 3.1.0...

5.8AI score0.00243EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/03/26 8:3 p.m.19 views

CVE-2026-3527 AJAX Dashboard - Critical - Access bypass - SA-CONTRIB-2026-022

Missing Authentication for Critical Function vulnerability in Drupal AJAX Dashboard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Dashboard: from 0.0.0 before 3.1.0...

0.00243EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:5 p.m.5 views

CVE-2025-13779

Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1...

8.3CVSS5.8AI score0.00285EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:3 p.m.3 views

CVE-2026-23662

Missing authentication for critical function in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...

7.5CVSS5.8AI score0.00724EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 2:59 p.m.4 views

CVE-2026-2417

A Missing Authentication for Critical Function vulnerability in Pharos Controls Mosaic Show Controller firmware version 2.15.3 could allow an unauthenticated attacker to bypass authentication and execute arbitrary commands with root privileges...

9.3CVSS6.1AI score0.00573EPSS
Exploits0References1
GithubExploit
GithubExploit
added 2026/03/24 7:18 p.m.192 views

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

CVE-2026-23744 Exploit to MCP...

9.8CVSS6AI score0.38374EPSS
Exploits29
NVD
NVD
added 2026/03/24 7:16 p.m.5 views

CVE-2026-2417

A Missing Authentication for Critical Function vulnerability in Pharos Controls Mosaic Show Controller firmware version 2.15.3 could allow an unauthenticated attacker to bypass authentication and execute arbitrary commands with root privileges...

9.3CVSS0.00573EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/24 6:6 p.m.19 views

CVE-2026-2417 Missing Authentication for Critical Function in Pharos Controls Mosaic Show Controller

A Missing Authentication for Critical Function vulnerability in Pharos Controls Mosaic Show Controller firmware version 2.15.3 could allow an unauthenticated attacker to bypass authentication and execute arbitrary commands with root privileges...

9.3CVSS0.00573EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/24 6:6 p.m.5 views

CVE-2026-2417 Missing Authentication for Critical Function in Pharos Controls Mosaic Show Controller

A Missing Authentication for Critical Function vulnerability in Pharos Controls Mosaic Show Controller firmware version 2.15.3 could allow an unauthenticated attacker to bypass authentication and execute arbitrary commands with root privileges...

9.3CVSS6.1AI score0.00573EPSS
Exploits0References1
CVE
CVE
added 2026/03/24 6:6 p.m.8 views

CVE-2026-2417

The CVE-2026-2417 entry concerns Pharos Controls Mosaic Show Controller firmware 2.15.3, describing a Missing Authentication for Critical Function that could let an unauthenticated attacker bypass authentication and run arbitrary commands with root privileges. The vulnerability is rated CRITICAL ...

9.3CVSS6.1AI score0.00573EPSS
Exploits0References1
Rows per page
Query Builder