CVE-2024-9106

CVE-2024-9106 Wechat Social login = 1.3.0 - Contournement de l'authentification Description: Le plugin Wechat Social login pour WordPress est vulnérable à un contournement de l'authentification dans les versions jusqu'à la 1.3.0 incluse. Cela est dû à une vérification insuffisante de l'utilisateu...

CVE-2026-13257 IBM DataPower Gateway Insufficient Verification of Data Authenticity

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an authenticated user to forge signature requests due to improper verification of data authenticity...

cve-2026-47777

CVE-2026-47777 — Contournement d'autorisation des collections mises en avant de Mastodon Aperçu J'ai divulgué de manière responsable une vulnérabilité de contournement d'autorisation de haute gravité affectant le pipeline de fédération expérimental des collections mises en avant de Mastodon...

EUVD-2026-92989

Insufficient verification of data authenticity CWE-345 in the external OIDC login callback in Cloud Foundry UAA v4.5.0 to v79.6.0 inclusive allows an authenticated UAA user to bypass the OAuth authorization-code exchange and establish an authenticated external-OIDC browser session, via submitting...

PT-2026-106359

Insufficient verification of data authenticity CWE-345 in the external OIDC login callback in Cloud Foundry UAA v4.5.0 to v79.6.0 inclusive allows an authenticated UAA user to bypass the OAuth authorization-code exchange and establish an authenticated external-OIDC browser session, via submitting...

ROS-20261002-73-0123

The vulnerability of the iopollgetownership function in the Linux operating system’s kernel is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to trigger a service failure...

CVE-2026-76144

An unrestricted file upload vulnerability caused by insufficient file extension and integrity verification in Genian SSL PNS allows an attacker to upload a dangerous file that is not an official patch...

EUVD-2026-90486

An unrestricted file upload vulnerability caused by insufficient file extension and integrity verification in Genian SSL PNS allows an attacker to upload a dangerous file that is not an official patch...

CVE-2026-76144: Unrestricted Upload of File with Dangerous Type

An unrestricted file upload vulnerability caused by insufficient file extension and integrity verification in Genian SSL PNS allows an attacker to upload a dangerous file that is not an official patch...

CVE-2026-102140

In Kiteworks Core , an authenticated administrator can exploit a vulnerability where administrative imports only validate the file header instead of the entire file content. This insufficient verification of data authenticity allows for the acceptance and processing of unverified or forged conten...

CVE-2026-102140 Kiteworks Core Insufficient Verification of Data Authenticity

An authenticated administrator could initiate an administrative import using a file whose contents were not fully verified, because the import validated only the file's header rather than the complete file. This could allow unverified or forged content to be accepted and processed, affecting the...

The vulnerability of the microprogramming software of Reyrolle 7SR5 devices, related to insufficient verification of input data, allows a intruder to bypass authentication procedures and gain unauthorized access to the device.

The vulnerability of the microprogramming software of Reyrolle 7SR5 devices related to insufficient verification of input data during the processing of generated values. Exploiting this vulnerability could allow an attacker to bypass authentication procedures and gain unauthorized access to the...

CVE-2026-102275: Insufficient Verification of Data Authenticity

PyJWT is a Python implementation of JSON Web Token standards. From 2.1.0 until 2.15.0, PyJWT OKPAlgorithm.fromjwk in jwt/algorithms.py is affected because private-JWK import path does not compare the public key derived from d with x. This occurs when an OKP private JWK supplies non-corresponding ...

The vulnerability of the DnsResolveContext component in the framework for developing network applications, servers, and clients using the Netty protocol allows a hacker to bypass security restrictions.

The vulnerability of the DnsResolveContext component in the framework for developing network applications, servers, and Netty protocol clients is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker to bypass security restrictions remotely...

SolarWinds Observability Self-Hosted < 2026.2.3 Multiple Vulnerabilities

The version of SolarWinds Observability Self-Hosted installed on the remote host is prior to 2026.2.3. It is, therefore, affected by multiple vulnerabilities: - An insufficient verification of data authenticity vulnerability that could allow an unauthenticated, remote attacker to execute arbitrar...

CVE-2026-81630 Botslab G980H Dashcams Insufficient Verification of Data Authenticity

The Botslab G980H dash camera firmware does not adequately verify the authenticity of firmware updates. The update process retrieves firmware through an unprotected connection and relies on an integrity value supplied with the firmware instead of a trusted cryptographic signature. A suitably...

CVE-2026-81630

The Botslab G980H dash camera firmware is vulnerable due to insufficient verification of data authenticity during the firmware update process. The device retrieves updates via an unprotected connection and validates them using a supplied integrity value rather than a trusted cryptographic signatu...

CVE-2026-81630 Botslab G980H Dashcams Insufficient Verification of Data Authenticity

The Botslab G980H dash camera firmware does not adequately verify the authenticity of firmware updates. The update process retrieves firmware through an unprotected connection and relies on an integrity value supplied with the firmware instead of a trusted cryptographic signature. A suitably...

CVE-2026-81630: Insufficient Verification of Data Authenticity

The Botslab G980H dash camera firmware does not adequately verify the authenticity of firmware updates. The update process retrieves firmware through an unprotected connection and relies on an integrity value supplied with the firmware instead of a trusted cryptographic signature. A suitably...

ROS-20260921-73-0110

The vulnerability of the GPO group policy management component of the Samba software is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker, operating remotely, to circumvent existing security restrictions...