921 matches found
ROS-20260921-73-0088
The vulnerability is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2026-92400: Insufficient Verification of Data Authenticity
The Payment Gateway for PayPal on WooCommerce WordPress plugin before 9.2.1 does not verify that an incoming payment notification was confirmed in the store's configured payment environment or paid to the store's own merchant account before marking an order complete, allowing unauthenticated user...
ROS-20260921-73-0093
The vulnerability is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260921-73-0089
The vulnerability is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...
CVE-2026-62874
Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-62874
Azure Billing is affected by an elevation of privilege vulnerability caused by insufficient verification of data authenticity , allowing an unauthorized attacker to elevate privileges over a network with no prior access or user interaction. The vulnerability is rated CRITICAL (CVSS 3.1: 10.0) wit...
CVE-2026-26950
Dell SmartFabric Manager, versions prior to 2.2.1, contains an Insufficient Verification of Data Authenticity vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2026-26950
Dell SmartFabric Manager, versions prior to 2.2.1, contains an Insufficient Verification of Data Authenticity vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2026-26950
Dell SmartFabric Manager versions prior to 2.2.1 contain an Insufficient Verification of Data Authenticity vulnerability. A low-privileged attacker with remote network access could exploit this to achieve elevation of privileges , resulting in high confidentiality and integrity impact with no ava...
CVE-2026-26950
Dell SmartFabric Manager, versions prior to 2.2.1, contains an Insufficient Verification of Data Authenticity vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...
Azure Billing Elevation of Privilege Vulnerability
Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-78296
Insufficient Verification of Data Authenticity vulnerability in WP ManageNinja LLC FluentAuth allows Identity Spoofing. This issue affects FluentAuth: from n/a through 2.1.2...
EUVD-2026-81431
Insufficient Verification of Data Authenticity vulnerability in WP ManageNinja LLC FluentAuth allows Identity Spoofing. This issue affects FluentAuth: from n/a through 2.1.2...
CVE-2026-78296: Insufficient Verification of Data Authenticity
Insufficient Verification of Data Authenticity vulnerability in WP ManageNinja LLC FluentAuth allows Identity Spoofing. This issue affects FluentAuth: from n/a through 2.1.2...
EUVD-2026-80700
Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware upgrade mechanism of the Advantech EKI-1242EIMS in firmware version V1.06.01. The device accepts firmware images through the authenticated web management interface without...
CVE-2026-73177
Nozomi Networks Labs identified a CWE-345 (Insufficient Verification of Data Authenticity) vulnerability in the firmware upgrade mechanism of the Advantech EKI-1242EIMS (firmware V1.06.01 ). The device accepts firmware images via its authenticated web management interface without performing any c...
CVE-2026-73450: Insufficient Verification of Data Authenticity
On affected platforms running Arista EOS with MLAG Dual Primary Detection configured, an unauthenticated attacker with access to the Dual Primary Detection network segment can send specially crafted packets to interfere with the dual-primary state. If the MLAG primary switch fails while these...
CVE-2026-84906: Insufficient Verification of Data Authenticity
The Eventin WordPress plugin before 4.1.24 does not verify that a completed payment corresponds to the order it is applied to, confirming only that the payment gateway reports the transaction as successful, not its amount, currency, or which order it belongs to, allowing unauthenticated visitors ...
CVE-2026-77955: Insufficient Verification of Data Authenticity
In NLnet Labs Unbound 1.13.2 up to and including 1.26.1, a vulnerability in ZONEMD configured zones zonemd-check: yes which are located below but not at a trust anchor allow for an attack window where tampered with zone contents are served or stored to disk prior to the ZONEMD integrity check. Th...
Security Bulletin: HttpTransferCache comma-joins repeated request parameters, allowing semantically distinct HttpClient requests to use the same transfer-cache key and reuse a wrong backend response
Summary Upgrade to InformixHQ 3.3.2 Vulnerability Details CVEID:CVE-2026-68945 DESCRIPTION: Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.2, HttpTransferCache comma-joins...