EUVD-2026-101295

Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.presociallogin in...

CVE-2026-100169

The Prowler API (versions 5.4.0 to before 5.35.0) contains an improper authentication vulnerability in its social account linking path. The root cause is that ProwlerSocialAccountAdapter.pre_social_login() links Google or GitHub logins to any existing local account with a matching email address w...

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-0322link is external Palo Alto Networks PAN-OS Code Injection Vulnerability CVE-2026-76519link is external Cisco Secure Email Gateway Relative Path...

SSL VPN Session Hijacking

An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication. id: CVE-2024-53704 info: name: SSL VPN Session Hijacking author: johnk3r severity: critical description: | An Improper Authentication vulnerability in the SSLVPN...

CVE-2026-108473

Multiple Kasa devices contain an improper authentication vulnerability in the local device-management protocol. An unauthenticated adjacent attacker may send management instructions to an affected device without adequate authentication or authorization, allowing modification of the device state o...

EUVD-2026-100759

Multiple Kasa devices contain an improper authentication vulnerability in the local device-management protocol. An unauthenticated adjacent attacker may send management instructions to an affected device without adequate authentication or authorization, allowing modification of the device state o...

CVE-2026-108473

Multiple TP-Link Kasa devices are vulnerable to an improper authentication vulnerability within the local device-management protocol. An unauthenticated adjacent-network attacker can send management instructions without proper authorization, enabling unauthorized modification of device states or ...

CVE-2026-108473 Improper Authentication and Credential Exposure in Multiple TP-Link Kasa Devices

Multiple Kasa devices contain an improper authentication vulnerability in the local device-management protocol. An unauthenticated adjacent attacker may send management instructions to an affected device without adequate authentication or authorization, allowing modification of the device state o...

The vulnerability of the TabStrip component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the TabStrip component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

PT-2026-113807

An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to obtain root-level device configuration access and take over the device via a reachable J-Web...

The vulnerability of the StorageAccessAPI component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to compromise the integrity of protected information.

The vulnerability of the StorageAccessAPI component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information through a specially created HTML page...

The vulnerability of the Editing component in Google Chrome and Microsoft Edge web browsers allows attackers to access protected information.

The vulnerability of the Editing component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-70175

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. CVE-2026-70175 Note that Nessus relies on the...

The vulnerability of the GetUserMedia component in Google Chrome and Microsoft Edge web browsers allows a hacker to gain access to protected information.

The vulnerability of the GetUserMedia component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow a remote attacker to gain access to protected information through a specially created HTML page...

The vulnerability of the Sandbox component in Google Chrome and Microsoft Edge web browsers allows a violator to trigger a service failure.

The vulnerability of the Sandbox component in Google Chrome and Microsoft Edge relates to improper authentication. Exploiting this vulnerability can allow a malicious actor to trigger a service failure through a specially created HTML page...

The vulnerability of the FileSystem component in Google Chrome and Microsoft Edge web browsers allows attackers to compromise the integrity of protected information.

The vulnerability of the FileSystem component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability allows a remote attacker to compromise the integrity of protected information through a specially created HTML page...

The vulnerability of the Controls component in Google Chrome and Microsoft Edge web browsers allows attackers to compromise the integrity of protected information.

The vulnerability of the Controls component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information through a specially created HTML page...

The vulnerability of the SiteIsolation component in Google Chrome and Microsoft Edge web browsers allows attackers to access protected information.

The vulnerability of the SiteIsolation component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow a remote attacker to gain access to protected information through a specially created HTML page...

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge web browsers allows attackers to access protected information.

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

The vulnerability of the USB component in Google Chrome and Microsoft Edge web browsers allows attackers to compromise the integrity of protected information.

The vulnerability of the USB component in Google Chrome and Microsoft Edge browsers is related to improper authentication procedures. Exploiting this vulnerability allows a remote attacker to compromise the integrity of protected information through a specially created HTML page...