55 matches found
PT-2026-104004
Unpatched vulnerabilities don't stay hidden on our atlas. CVE CRITICAL VULNERABILITY DETECTED CVE ID → CVE-2026-95102 Vendor → Unknown Severity → Critical — CVSS 9.3 Product → Unknown Date → 2026-10-02 A critical vulnerability Missing Authentication for Critical Function has been disclosed...
CVE-2026-100291
In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, several ONVIF service endpoints process management requests without enforcing required authentication. This could allow an unauthorized attacker to access sensitive device operations...
The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform, which is used for automatic scanning, recognition, and digitization of documents, allows a intruder to gain full control over the system.
The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker...
GO-2026-6018 Skipper's routesrv-no-auth component: All routesrv API Endpoints Lack Authentication in github.com/zalando/skipper
Skipper's routesrv-no-auth component: All routesrv API Endpoints Lack Authentication in github.com/zalando/skipper...
The vulnerability of the OData service of the SAP S/4HANA software platform allows attackers to compromise the integrity of the protected information.
The vulnerability of the OData service of the SAP S/4HANA software platform is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the integrity of the protected information...
The vulnerability of Zyxel GS1200 series switch microprogramming software, related to the lack of authentication, allows a intruder to gain unauthorized access to protected information.
The vulnerability of Zyxel GS1200 series microprogrammed software devices is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information through a specially crafted HTTP request...
The vulnerability of the Secure Boot component in Linux operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Secure Boot component in Linux operating systems is related to the lack of authentication for critical functions. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...
CVE-2026-33488
WWBN AVideo is an open source video platform. In versions up to and including 26.0, the createKeys function in the LoginControl plugin's PGP 2FA system generates 512-bit RSA keys, which have been publicly factorable since 1999. An attacker who obtains a target user's public key can factor the...
CVE-2026-29796 IGL-Technologies eParking.fi Missing Authentication for Critical Function
WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then...
PT-2026-25913
Name of the Vulnerable Software and Affected Versions GL-iNet Comet GL-RM1 KVM versions prior to 1.8.2 Description The GL-iNet Comet GL-RM1 KVM does not require authentication on the UART serial console. Successful exploitation requires physical access to the device and connection to the UART pin...
ABB AWIN GW100 访问控制错误漏洞
The ABB AWIN GW100 is a communication gateway device produced by the Swiss company ABB. The ABB AWIN GW100 rev.2 2.0-1 and earlier versions, as well as the ABB AWIN GW120 1.2-1 and earlier versions, have a security vulnerability related to access control. This vulnerability stems from the lack of...
Security issues in ESC/POS
Overview ESC/POS is a printer control language designed by Seiko Epson Corporation for controlling POS printers and related devices. The following security issues have been identified with ESC/POS. Products implementing ESC/POS need to be designed and operated with consideration of the following...
CVE-2026-22552
WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then...
Enel X JuiceBox 40: Access control error vulnerability
The Enel X JuiceBox 40 is a household electric vehicle charging station developed by the American company Enel X. The Enel X JuiceBox 40 has a access control vulnerability, which stems from the lack of authentication in the Telnet service. This vulnerability may lead to remote code execution...
The vulnerability of the ExportSettings.sh (/cgi-bin/ExportSettings.sh) script of the D-Link DAP-1325 wireless signal booster software allows a hacker to circumvent security restrictions and gain unauthorized access to protected information.
The vulnerability of the ExportSettings.sh /cgi-bin/ExportSettings.sh script of the D-Link DAP-1325 wireless signal booster software is related to the lack of authentication for critical functions. Exploiting this vulnerability could allow an attacker to bypass security restrictions and gain...
PT-2025-52532
Name of the Vulnerable Software and Affected Versions Tapo C200 V3 affected versions not specified Description The HTTPS service on the device has a connectAP interface lacking proper authentication. An attacker on the same local network can exploit this to change the device’s Wi-Fi settings,...
The vulnerability of the Storage VSP Driver for Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Storage VSP Driver for Windows operating systems is related to the lack of authentication for a critical function. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Apache OpenOffice office software package, related to the lack of authentication, allows attackers to circumvent existing security restrictions.
The vulnerability of the Apache OpenOffice office software is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions through a specially created file...
The vulnerability of Lantronix XPort device servers lies in the lack of authenticity verification for a critical function. This allows attackers to influence the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of Lantronix XPort devices lies in the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker to influence the confidentiality, integrity, and accessibility of the protected information...
