8642 matches found
EUVD-2026-10700
Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally...
EUVD-2026-10692
Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally...
EUVD-2026-10621
Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally...
EUVD-2026-10620
Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally...
CVE-2026-26141
Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally...
CVE-2026-26128
Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally...
CVE-2026-24294
Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally...
CVE-2026-26141
Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally...
CVE-2026-26128
Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally...
Windows SMB Server Elevation of Privilege Vulnerability
Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally...
Hybrid Worker Extension (Arc‑enabled Windows VMs) Elevation of Privilege Vulnerability
Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally...
Windows SMB Server Elevation of Privilege Vulnerability
Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally...
CVE-2026-3794
A vulnerability was identified in doramart DoraCMS 3.0.x. This issue affects some unknown processing of the file /api/v1/mail/send of the component Email API. Such manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit is publicly available and...
PT-2026-24331
Name of the Vulnerable Software and Affected Versions Windows 10 Version 1607 Windows Server 2025 Windows Server 2011 Description Improper authentication in the Windows SMB Server allows an authorized attacker to elevate privileges locally. The issue involves a Kerberos reflection bypass, which c...
PT-2026-24288
Name of the Vulnerable Software and Affected Versions Windows Server 2025 Description Improper authentication in the Windows SMB Server allows an authorized attacker to elevate privileges locally. This issue involves an NTLM reflection bypass, which can be used to obtain SYSTEM privileges on the...
PT-2026-24242
Name of the Vulnerable Software and Affected Versions Fortinet FortiAnalyzer versions 6.4 through 7.6.4 Fortinet FortiManager versions 6.4 through 7.6.4 Fortinet FortiAnalyzer Cloud versions 6.4 through 7.6.4 Fortinet FortiManager Cloud versions 6.4 through 7.6.4 Description The issue involves an...
CVE-2026-30949: Improper Authentication
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.2-alpha.5 and 8.6.18, the Keycloak authentication adapter does not validate the azp authorized party claim of Keycloak access tokens against the configured client-id. A valid acces...
CVE-2026-30967: Improper Authentication
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.2-alpha.9. and 8.6.22, the OAuth2 authentication adapter, when configured without the useridField option, only verifies that a token is active via the provider's token introspectio...
CVE-2026-29792: Improper Authentication
Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. From 5.0.0 to before 5.0.42, an unauthenticated attacker can send a crafted GET request directly to /oauth/:provider/callback with a forged profile in the query string. The OAuth service's...