204 matches found
Exploit for CVE-2026-73678
CVE-2026-73678 — MindsDB Minds Platform Unauthenticated RCE C...
Exploit for CVE-2026-73519
CVE-2026-73519 — WolfStack Hardcoded Cluster Secret → Unauthen...
Exploit for CVE-2026-73678
CVE-2026-73678 — Unauthenticated RCE in MindsDB Minds Platform...
Security Bulletin: Unauthenticated Registration POST Endpoint Permits Admin Email Overwrite and Outbound Relay Abuse in Langflow
Summary The POST /api/v2/registration/ endpoint in affected versions lacked authentication requirements, allowing unauthenticated attackers to overwrite the server's registered admin email address and trigger outbound telemetry calls to external servers, enabling the Langflow instance to be abuse...
Exploit for Eval Injection in Langflow
CVE-2026-33017 — Langflow Unauthenticated RCE PoC 면책 조항...
CVE-2026-59506
: Missing Authentication for Critical Function vulnerability in Priority Portal Generator addon to Priority ERP developed by Soft Solutions. This issue affects Portal Generator addon to Priority ERP developed by Soft Solutions: All versions without Priwall v3...
CVE-2026-59506 Priority – CWE-306: Missing Authentication for Critical Function
: Missing Authentication for Critical Function vulnerability in Priority Portal Generator addon to Priority ERP developed by Soft Solutions. This issue affects Portal Generator addon to Priority ERP developed by Soft Solutions: All versions without Priwall v3...
CVE-2026-59506
Technical details are provided only in the Initial Description (CWE-306, CVSS 3.1, CRITICAL) and no connected documents contain further technical specifics for CVE-2026-59506.
CVE-2026-59506 Priority – CWE-306: Missing Authentication for Critical Function
: Missing Authentication for Critical Function vulnerability in Priority Portal Generator addon to Priority ERP developed by Soft Solutions. This issue affects Portal Generator addon to Priority ERP developed by Soft Solutions: All versions without Priwall v3...
CVE-2026-59506
CWE-306: Missing Authentication for Critical Function...
EUVD-2026-57773
CWE-306: Missing Authentication for Critical Function...
IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.9 (7283488)
The version of IBM WebSphere Application Server Liberty running on the remote host is affected by a vulnerability as referenced in the 7283488 advisory. - IBM WebSphere Application Server Liberty is vulnerable to an authentication bypass when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled...
Security Bulletin: IBM WebSphere Application Server Liberty is affected by an authenication bypass (CVE-2026-14525)
Summary IBM WebSphere Application Server Liberty is affected by an authenication bypass when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled. Vulnerability Details CVEID:CVE-2026-14525 DESCRIPTION: IBM WebSphere Application Server Liberty is vulnerable to an authentication bypass when the...
PT-2026-48909
Name of the Vulnerable Software and Affected Versions Aqara Board service affected versions not specified Description The Aqara Board service at the endpoint "op-test.aqara.com" accepts arbitrary MQTT command payloads and forwards them to the platform's HiveMQ broker without authentication. This...
📄 WordPress Chart 3.5.9 Missing Authentication
The Chartify WordPress Chart plugin contains a missing authentication vulnerability in all versions up to and including 3.5.9. The plugin registers an unauthenticated AJAX action that dispatches to admin-class methods based on a request parameter without any nonce or capability checks...
Missing Authentication for critical function in CAPWAP daemon
...
CVE-2021-22805
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary files in the context of the user running IGSS due to lack of validation of network messages. Affected Product: Interactive Graphical SCADA System Data Collector dc.exe V15.0.0.21243...
Exploit for CVE-2025-11171
CVE-2025-11171: Missing Authentication in Chartify WordPress P...