25261 matches found
BIT-TOMCAT-2026-55956 Apache Tomcat: Security constraints for default servlet ignored method
Improper Authorization vulnerability in Apache Tomcat leads to security constraints specified for the default servlet ignoring any method or method omission configured as part of the constraint. This issue affects Apache Tomcat: from 11.0.0 through 11.0.22, from 10.1.0 through 10.1.55, from 9.0.0...
opennhp v1.0.1
OpenNHP: Open Source Zero Trust Security Toolkit OpenNHP is a lightweight, cryptography-powered, open-source toolkit implementing Zero Trust security for infrastructure, applications, and data. It is the reference implementation of the Cloud Security Alliance CSA Network-infrastructure Hiding...
EUVD-2026-75798
IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain administrative access due to the use of default credentials...
PT-2026-90045
Name of the Vulnerable Software and Affected Versions Xiongmai IP Camera XM530 versions prior to HMT.CM2005-v220608.1837 Description An insecure default configuration in the embedded Happytime RTSP server within the Sofia IPC daemon allows remote unauthenticated attackers to access live H.264 vid...
CVE-2026-90451: Use of Default Credentials
An example environment-configuration file ships with a fixed, publicly-known secret value used to sign authentication cookies for a bundled packet-analysis component. A deployment that copies this example file into active configuration without running the setup routine that regenerates the value...
CVE-2025-15679: Empty Password in Configuration File
Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password on BullSequana XH3406 and XH3515...
CVE-2026-71644
An issue in Robotics-STAR-Lab SYSU STAR Group RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause unsafe trajectory planning and potential UAV collisions via a missing default case in the FSM that stops publishing swarm trajectories when the drone enters IDLE...
EUVD-2026-76190
An insecure default configuration in the embedded Happytime RTSP server within the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier ships with authentication disabled, allowing remote unauthenticated attackers to access live H.264 video and G.711 audio fee...
CVE-2026-71644
A vulnerability exists in Robotics-STAR-Lab (SYSU STAR Group) RACER (affected version: commit abcdef1234567890 ) due to a missing default case in the FSM . This flaw prevents the system from stopping the publication of swarm trajectories when a drone enters the IDLE state, which can lead to unsaf...
PT-2026-90525
Name of the Vulnerable Software and Affected Versions Inventory Management Component affected versions not specified Description An example environment-configuration file for a bundled inventory-management component contains a fixed, publicly-known administrative password. If this example file is...
CVE-2026-90456: Use of Default Credentials
An example environment-configuration file for a bundled inventory-management component ships with a fixed, publicly-known administrative password. A deployment that copies this example file into active configuration without running the setup routine that regenerates credentials will expose that...
CVE-2026-79394
An insecure default configuration in the embedded Happytime RTSP server within the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier ships with authentication disabled, allowing remote unauthenticated attackers to access live H.264 video and G.711 audio fee...
PT-2026-89877
Name of the Vulnerable Software and Affected Versions Robotics-STAR-Lab SYSU STAR Group RACER Tested version commit abcdef1234567890 Description A missing default case in the Finite State Machine FSM prevents the publishing of swarm trajectories when a drone enters the IDLE state. This flaw can...
PT-2026-90492
NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations. In versions up to and including 3.0.0, deployments using the shipped default configuration exposed two GraphQL developer features...
PT-2026-90520
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An example environment-configuration file contains a fixed, publicly-known secret value used to sign authentication cookies for a bundled packet-analysis...
CVE-2026-79394
The Xiongmai IP Camera XM530 is vulnerable to unauthorized data access due to an insecure default configuration in the embedded Happytime RTSP server within the Sofia IPC daemon. Specifically, firmware version HMT.CM2005-v220608.1837 and earlier ships with authentication disabled . This allows re...
CVE-2026-71644
An issue in Robotics-STAR-Lab SYSU STAR Group RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause unsafe trajectory planning and potential UAV collisions via a missing default case in the FSM that stops publishing swarm trajectories when the drone enters IDLE...
EUVD-2026-76112
An issue in Robotics-STAR-Lab SYSU STAR Group RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause unsafe trajectory planning and potential UAV collisions via a missing default case in the FSM that stops publishing swarm trajectories when the drone enters IDLE...
