1155 matches found
GFIAgent Network Filtering Full Access
The vulnerability of the GFIAgent software, a network filtering tool from Kerio Control, is related to the lack of authentication for a critical function. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain full access to the device with administrator privileges...
GO-2025-3951 Chaos Mesh's Chaos Controller Manager is Missing Authentication for Critical Function in github.com/chaos-mesh/chaos-mesh
Chaos Mesh's Chaos Controller Manager is Missing Authentication for Critical Function in github.com/chaos-mesh/chaos-mesh. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positiv...
CVE-2025-7405
Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to read or write the device values of the product and stop the operation of the programs, since MODBUS/TCP in the products does not...
Mitsubishi Electric MELSEC iQ-F Series CPU Access Control Error Vulnerability
The Mitsubishi Electric MELSEC iQ-F Series CPUs are a series of CPU modules from Mitsubishi Electric Corporation Mitsubishi Electric, Japan. An access control error vulnerability exists in the Mitsubishi Electric MELSEC iQ-F Series CPUs, which stems from a lack of authentication of a critical...
CVE-2025-54942
A missing authentication for critical function vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to access deployment functionality without prior authentication...
CVE-2025-54942 SUNNET Corporate Training Management System - Missing Authentication for Critical Function
A missing authentication for critical function vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to access deployment functionality without prior authentication...
PT-2025-35336
Name of the Vulnerable Software and Affected Versions SUNNET Corporate Training Management System versions prior to 10.11 Description A missing authentication check for a critical function allows remote attackers to access deployment functionality without authentication. Recommendations Update to...
CyberData 011209 SIP Emergency Intercom Authentication Failure DoS
The vulnerability of the Microprogrammed Software of the CyberData 011209 SIP Emergency Intercom relates to the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failure...
CE Phoenix e-commerce software Auth Bypass
The vulnerability of the CE Phoenix e-commerce software CE PhoenixCart is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...
CVE-2025-8611
AOMEI Cyber Backup Missing Authentication for Critical Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of AOMEI Cyber Backup. Authentication is not required to exploit this vulnerability. The specific fla...
Missing Authentication for Critical Function
Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the POST /api/v4/teams/:teamId/restore endpoint. An attacker can access sensitive team invite information by sending crafted requests to this endpoint without proper privileges. Remediati...
CVE-2025-27214
A Missing Authentication for Critical Function vulnerability in the UniFi Connect EV Station Pro may allow a malicious actor with physical or adjacent access to perform an unauthorized factory reset. Affected Products: UniFi Connect EV Station Pro Version 1.5.18 and earlier Mitigation: Update Uni...
CVE-2025-27214
A Missing Authentication for Critical Function vulnerability in the UniFi Connect EV Station Pro may allow a malicious actor with physical or adjacent access to perform an unauthorized factory reset. Affected Products: UniFi Connect EV Station Pro Version 1.5.18 and earlier Mitigation: Update Uni...
CVE-2025-27214
The UniFi Connect EV Station Pro (versions 1.5.18 and earlier ) is vulnerable to a Missing Authentication for Critical Function (CWE-306) security flaw. A malicious actor with physical or adjacent access can exploit this lack of authentication to perform an unauthorized factory reset . To remedia...
GO-2025-3875 Mattermost Confluence Plugin is Missing Authentication for Critical Function in github.com/mattermost/mattermost-plugin-confluence
Mattermost Confluence Plugin is Missing Authentication for Critical Function in github.com/mattermost/mattermost-plugin-confluence...
GO-2025-3865 Mattermost Confluence Plugin is Missing Authentication for Critical Function in github.com/mattermost/mattermost-plugin-confluence
Mattermost Confluence Plugin is Missing Authentication for Critical Function in github.com/mattermost/mattermost-plugin-confluence...
CVE-2025-8754
Missing Authentication for Critical Function vulnerability in ABB ABB AbilityTM zenon.This issue affects ABB AbilityTM zenon: from 7.50 through 14...
Confluence Mattermost Plugin Auth Bypass
The vulnerability of the Confluence plugin for the instant messaging application Mattermost relates to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker operating remotely to gain read and edit access to data...
Confluence Mattermost Plugin Privilege Escalation
The vulnerability of the Confluence plugin for the instant messaging application Mattermost relates to the lack of authentication for a critical function. Exploiting this vulnerability can allow an attacker who operates remotely to increase their privileges...