CVE-2026-17175: Improper Authentication

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication enforcement...

The vulnerability of the Microsoft Power Apps development environment, related to incorrect authentication, allows a perpetrator to increase their privileges.

The vulnerability of the Microsoft Power Apps development environment is related to improper authentication. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

PT-2026-72092

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication...

CVE-2026-16905: Improper Authentication

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication...

CVE-2026-74240: Improper Authentication

A flaw was found in Red Hat Quay's JWT JSON Web Token validation for federated robot accounts and single sign-on SSO authentication. Multiple issues related to audience verification and the enforcement of azp and sub claims were identified. These flaws could allow an attacker with a validly-signe...

PT-2026-72097

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description Improper authentication enforcement may allow a remote authenticated attacker to obtain sensitive information. Recommendations At the moment, there is no information about a newer versi...

The vulnerability of the Enterprise Config Management component of the Oracle Enterprise Manager Base Platform allows a perpetrator to gain full control over the application.

The vulnerability of the Enterprise Config Management component of the Oracle Enterprise Manager Base Platform is related to improper authentication. Exploiting this vulnerability can allow a malicious actor to gain full control over the application using the HTTPS protocol...

CVE-2026-17101

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code or obtain sensitive information due to improper authentication...

CVE-2026-17099

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper authentication...

CVE-2026-17101 IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code or obtain sensitive information due to improper authentication...

CVE-2026-17101

CVE-2026-17101 is an improper authentication vulnerability (CWE-287) in Navigator for i on IBM i versions 7.3, 7.4, 7.5, and 7.6. A remote attacker with no prior privileges but requiring user interaction can execute arbitrary code or obtain sensitive information, with changed scope and high impac...

CVE-2026-17101 IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code or obtain sensitive information due to improper authentication...

CVE-2026-17101

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code or obtain sensitive information due to improper authentication...

CVE-2026-17099

CVE-2026-17099 affects IBM i 7.3–7.6 and could allow a remote attacker to obtain sensitive information due to improper authentication. The IBM advisory lists Navigator for i as the affected component with a base CVSS v3.1 score of 7.3 (Network, Low attack complexity, None privileges, Confidential...

CVE-2026-17099

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper authentication...

CVE-2026-17099 IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper authentication...

CVE-2026-17099 IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper authentication...

CVE-2026-16867 IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to access server resources with the privileges of an authenticated user due to improper authentication during NTLM session negotiation...

EUVD-2026-58373

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to access server resources with the privileges of an authenticated user due to improper authentication during NTLM session negotiation...

vulnerabilities in Fortinet FortiWeb

Fortinet has identified vulnerabilities in FortiWeb. The first vulnerability involves improper authentication in several versions of FortiWeb, allowing an unauthorized attacker to access the GUI and CLI interfaces by submitting arbitrary login credentials. This vulnerability also occurs in FortiW...