CVE-2026-81630

The Botslab G980H dash camera firmware is vulnerable due to insufficient verification of data authenticity during the firmware update process. The device retrieves updates via an unprotected connection and validates them using a supplied integrity value rather than a trusted cryptographic signatu...

CVE-2026-81630 Botslab G980H Dashcams Insufficient Verification of Data Authenticity

The Botslab G980H dash camera firmware does not adequately verify the authenticity of firmware updates. The update process retrieves firmware through an unprotected connection and relies on an integrity value supplied with the firmware instead of a trusted cryptographic signature. A suitably...

CVE-2024-9106

CVE-2024-9106 Wechat Social login 플러그인 = 1.3.0 - 인증 우회 설명: WordPress용 Wechat Social login 플러그인은 버전 1.3.0까지 인증 우회에 취약합니다. 이는 소셜 로그인 중 제공되는 사용자 검증이 불충분하기 때문입니다. 이를 통해 인증되지 않은 공격자가 사용자 ID에 접근할 수 있는 경우 사이트의 기존 사용자예: 관리자로 로그인할 수 있습니다. 이는 앱 시크릿이 설정되지 않은 경우에만 악용 가능하며, 기본값은 빈 값입니다. uid=1을 추가하거나 로그인하려는 계정...

cve-2026-47777

CVE-2026-47777 — Mastodon おすすめコレクションの認可バイパス 概要 私は、Mastodon の実験的な おすすめコレクション フェデレーションパイプラインに影響を与える 高重要度の認可バイパス 脆弱性を責任ある形で開示しました。 CVE ID： CVE-2026-47777 影響を受けるコンポーネント ActivityPub::VerifyFeaturedItemService 脆弱性の分類 CWE-345 — データの真正性の検証不足 CWE-863 — 不正確な認可 CVSS v3.1 スコア| ベクトル ---|--- 7.5（高）|...

CVE-2026-92400: Insufficient Verification of Data Authenticity

The Payment Gateway for PayPal on WooCommerce WordPress plugin before 9.2.1 does not verify that an incoming payment notification was confirmed in the store's configured payment environment or paid to the store's own merchant account before marking an order complete, allowing unauthenticated user...

ROS-20260921-73-0110

The vulnerability of the GPO group policy management component of the Samba software is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker, operating remotely, to circumvent existing security restrictions...

EUVD-2026-82596

Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-62874

Azure Billing is affected by an elevation of privilege vulnerability caused by insufficient verification of data authenticity , allowing an unauthorized attacker to elevate privileges over a network with no prior access or user interaction. The vulnerability is rated CRITICAL (CVSS 3.1: 10.0) wit...

CVE-2026-62874: Insufficient Verification of Data Authenticity

Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-54608: Insufficient Verification of Data Authenticity

MythicalDash is a Pterodactyl client area. In 3.5.4-aurora and earlier, GET /api/stripe/process in backend/app/Api/System/Gateways/Stripe.php creates a pending row in mythicaldashstripepayments before Stripe checkout succeeds and embeds the payment code in the success redirect, while GET...

CVE-2026-54581: Insufficient Verification of Data Authenticity

mport is the MidnightBSD Package Manager. Prior to 2.7.8, the mportfetchbootstrapindex function in libmport/fetch.c could return success when bootstrap index hash verification encountered a missing or invalid hash because the failure path did not preserve a fatal result. A network attacker or...

CVE-2026-91017: Insufficient Verification of Data Authenticity

The Robokassa payment gateway for Woocommerce WordPress plugin before 1.8.9 does not verify the authenticity of incoming payment notifications when its non-default deferred-payment feature is enabled, allowing unauthenticated attackers to forge a notification and mark arbitrary WooCommerce orders...

The vulnerability of the io_poll_get_ownership() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the iopollgetownership function in the Linux operating system’s kernel is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to trigger a service failure...

CVE-2026-78296: Insufficient Verification of Data Authenticity

Insufficient Verification of Data Authenticity vulnerability in WP ManageNinja LLC FluentAuth allows Identity Spoofing. This issue affects FluentAuth: from n/a through 2.1.2...

CVE-2026-73435: Insufficient Verification of Data Authenticity

On affected platforms running Arista EOS with Open Shortest Path First version 2 OSPFv2 configured, a specially crafted OSPFv2 packet from an unauthenticated attacker on the same broadcast segment, with OSPFv2 authentication configured can cause adjacency flapping and packet loss. The disruption...

CVE-2026-84906: Insufficient Verification of Data Authenticity

The Eventin WordPress plugin before 4.1.24 does not verify that a completed payment corresponds to the order it is applied to, confirming only that the payment gateway reports the transaction as successful, not its amount, currency, or which order it belongs to, allowing unauthenticated visitors ...

CVE-2026-61591: Insufficient Verification of Data Authenticity

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, for views that opt into state snapshots, the snapshot statejson embedded in the client page was restored on reconnect as trusted view state with no integrity chec...

CVE-2026-54176

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.38, MyAccountController::postAccountInfoForm at POST /admin/edit-account-info permits...

CVE-2026-89050: Insufficient Verification of Data Authenticity

The Quads Ads Manager for Google AdSense WordPress plugin before 3.0.5 does not verify payment completion with the configured payment gateway before marking an ad-selling order as paid, allowing users who can place an order to obtain a paid ad placement without payment...

CVE-2026-86809

The Persian Elementor WordPress plugin from 2.7.10 before 2.8.2 does not verify that the payment authority returned to its ZarinPal payment callback belongs to the transaction being completed, allowing unauthenticated attackers to complete a pending order using a valid payment authority obtained...