CVE-2026-86810 Open-Web-Analytics Controller Controller.php checkCapabilityAndAuthenticateUser improper authentication

A vulnerability was detected in Open-Web-Analytics up to 1.9.1. The impacted element is the function checkCapabilityAndAuthenticateUser of the file Core/Controller.php of the component Controller. Performing a manipulation results in improper authentication. The attack may be initiated remotely...

CVE-2026-86810

Open-Web-Analytics (up to 1.9.1) contains an improper authentication vulnerability in the checkCapabilityAndAuthenticateUser function within Core/Controller.php (Controller component). A remote, unauthenticated attacker can manipulate this function to bypass authentication checks. The CVSS 3.1 sc...

Security Bulletin: Langflow is affected by improper authentication due to missing password verification in the password reset endpoint

Summary Langflow provides a password reset capability through its user management API. The password reset endpoint accepts a current password field in the request body but does not verify it against the stored credential before applying the password change, and enforces no password complexity...

CVE-2026-86669

A vulnerability was detected in aircheng-org iWebShop-5 up to 5.15. This affects the function Login of the file controllers/systemseller.php. Performing a manipulation of the argument Name results in improper authentication. It is possible to initiate the attack remotely. The exploit is now publi...

CVE-2026-80097

Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally...

CVE-2026-69854

Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-73791

Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69854

CVE-2026-69854 is an improper authentication vulnerability in Spring Cloud Azure that allows an unauthorized attacker to elevate privileges over a network . The CNA (Microsoft) assigned a CVSS 3.1 score of 9.0 (CRITICAL) with a changed scope , reflecting high impact on confidentiality, integrity,...

CVE-2026-86669

A remote improper authentication vulnerability in aircheng-org iWebShop-5 (versions up to 5.15 ) affects the Login function in controllers/systemseller.php. Manipulating the Name argument allows an unauthenticated remote attacker to bypass authentication. The project scores CVSS 3.1: 7.3 (HIGH) w...

CVE-2026-86669 aircheng-org iWebShop-5 systemseller.php login improper authentication

A vulnerability was detected in aircheng-org iWebShop-5 up to 5.15. This affects the function Login of the file controllers/systemseller.php. Performing a manipulation of the argument Name results in improper authentication. It is possible to initiate the attack remotely. The exploit is now publi...

CVE-2026-86669 aircheng-org iWebShop-5 systemseller.php login improper authentication

A vulnerability was detected in aircheng-org iWebShop-5 up to 5.15. This affects the function Login of the file controllers/systemseller.php. Performing a manipulation of the argument Name results in improper authentication. It is possible to initiate the attack remotely. The exploit is now publi...

EUVD-2026-73449

A vulnerability was detected in aircheng-org iWebShop-5 up to 5.15. This affects the function Login of the file controllers/systemseller.php. Performing a manipulation of the argument Name results in improper authentication. It is possible to initiate the attack remotely. The exploit is now publi...

CVE-2026-86669 aircheng-org iWebShop-5 systemseller.php login improper authentication

A vulnerability was detected in aircheng-org iWebShop-5 up to 5.15. This affects the function Login of the file controllers/systemseller.php. Performing a manipulation of the argument Name results in improper authentication. It is possible to initiate the attack remotely. The exploit is now publi...

CVE-2026-80097

CVE-2026-80097 is an improper authentication vulnerability in Microsoft Authenticator that allows an unauthorized local attacker to elevate privileges . The CVSS 3.1 score is 8.6 (HIGH) with a vector of AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H, indicating a local attack with low complexity , no prior ...

EUVD-2026-73327

Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally...

Microsoft Authenticator Elevation of Privilege Vulnerability

Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally...

Spring Cloud Azure Elevation of Privilege Vulnerability

Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-86810: Improper Authentication

A vulnerability was detected in Open-Web-Analytics up to 1.9.1. The impacted element is the function checkCapabilityAndAuthenticateUser of the file Core/Controller.php of the component Controller. Performing a manipulation results in improper authentication. The attack may be initiated remotely...

CVE-2026-79576: Improper Authentication

An issue in the Single-Sign On SSO component of Digital-Infrastructure v9.6.7 allows attackers to authenticate as any user, including the Admin, without a password...

PT-2026-87760

Name of the Vulnerable Software and Affected Versions Spring Cloud Azure affected versions not specified Description Improper authentication allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version that...