Setup and Administration component Data Compromise

The vulnerability of the Setup and Administration component of the Oracle Advanced Inbound Telephony software in the Oracle E-Business Suite relates to the absence of authentication for a critical function. Exploiting this vulnerability allows an attacker to influence the confidentiality,...

Oracle WebCenter Sites Data Compromise

The vulnerability of the WebCenter Sites application component for online user services in Oracle WebCenter Sites relates to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Core connector component Oracle Identity Manager Data Compromise

The vulnerability of the Core connector component in Oracle Identity Manager, a software platform of Oracle Fusion Middleware, is related to the absence of authentication for a critical function. Exploiting this vulnerability allows an attacker to manipulate the confidentiality and integrity of...

Security Framework Component Full Control

The vulnerability of the Security Framework component of the Oracle WebCenter Portal relates to the absence of authentication for a critical function. Exploiting this vulnerability could allow a malicious actor to gain full control over the application...

Oracle WebCenter Sites Data Compromise

The vulnerability of the WebCenter Sites application component for online user services in Oracle WebCenter Sites relates to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Oracle WebCenter Content Full Control

Vulnerability of the Core component of the Oracle WebCenter Content application: The Imaging platform of the Oracle WebCenter Content system is vulnerable due to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to gain full control over the...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the get method of the Konnected integration's HTTP endpoint, which does not enforce authentication. An attacker can access sensitive information about the alarm-panel switch state and zone...

Missing Authentication for Critical Function

Overview @n8n/mcp-browser is a Browser automation MCP tools built on Playwright, WebDriver BiDi, and safaridriver Affected versions of this package are vulnerable to Missing Authentication for Critical Function through the MCP server’s HTTP request handling. An attacker can take over a user’s...

CVE-2026-10711

Missing authentication for critical function vulnerability in AKIN Software Computer Import Export Industry and Trade Ltd. CafePlus allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects CafePlus: from 12.05.03 before 12.05.04...

CVE-2026-10711

Missing authentication for critical function vulnerability in AKIN Software Computer Import Export Industry and Trade Ltd. CafePlus allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects CafePlus: from 12.05.03 before 12.05.04...

CVE-2026-10711

CVE-2026-10711 affects AKIN Software’s CafePlus (CafePlus product) and is described as a missing authentication for a critical function vulnerability that allows accessing functionality not properly constrained by ACLs. The CVE entry notes impact on CafePlus versions from 12.05.03 prior to 12.05....

EUVD-2026-38426

Missing authentication for critical function vulnerability in AKIN Software Computer Import Export Industry and Trade Ltd. CafePlus allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects CafePlus: from 12.05.03 before 12.05.04...

PT-2026-51495

Missing authentication for critical function vulnerability in AKIN Software Computer Import Export Industry and Trade Ltd. CafePlus allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects CafePlus: from 12.05.03 before 12.05.04...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the POST /ac/installed process during the pending-install window. An attacker can inject a rogue sharedSecret and disrupt the integration by sending unauthenticated requests. Remediation...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the POST /ac/installed process during the pending-install window. An attacker can inject a rogue sharedSecret and disrupt the integration by sending unauthenticated requests. Remediation...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the POST /ac/installed process during the pending-install window. An attacker can inject a rogue sharedSecret and disrupt the integration by sending unauthenticated requests. Remediation...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the POST /ac/installed process during the pending-install window. An attacker can inject a rogue sharedSecret and disrupt the integration by sending unauthenticated requests. Remediation...

Missing Authentication for Critical Function

Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the /sso/debug/login and /sso/debug/callback endpoints in the SSO Debug Flow. An attacker can gain unauthorized access and...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the HUD server when it is bound to a non-loopback address. An attacker can execute arbitrary developer-defined resources, modify arguments, and access sensitive engine state by making...

Missing Authentication for Critical Function

Overview network-ai is an AI agent orchestration framework for TypeScript/Node.js - 29 adapters LangChain, AutoGen, CrewAI, OpenAI Assistants, LlamaIndex, Semantic Kernel, Haystack, DSPy, Agno, MCP, OpenClaw, A2A, Codex, MiniMax, NemoClaw, APS, Copilot, LangGraph, Anthropic Compu Affected version...