6925 matches found
PT-2026-87542
Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description Missing authentication for a critical function in Windows Shell allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At...
PT-2026-86974
Name of the Vulnerable Software and Affected Versions ASUS Control Center Express Agent affected versions not specified Description Missing authentication for a critical function allows an unauthenticated nearby user to achieve remote code execution and control the host via a direct connection to...
PT-2026-87647
Missing authentication for critical function in Windows Modern Device Management MDM allows an authorized attacker to bypass a security feature locally...
CVE-2026-73004: Missing Authentication for Critical Function
Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally...
CVE-2026-69321: Missing Authentication for Critical Function
Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally...
CVE-2026-69528: Missing Authentication for Critical Function
Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally...
PT-2026-88320
A security vulnerability has been detected in moltis-org moltis up to 20260818.10. The affected element is the function vault unlock handler/vault recovery handler of the file vault.rs. Such manipulation leads to missing authentication. The attack can be launched remotely. The exploit has been...
PT-2026-87046
Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...
PT-2026-87879
Name of the Vulnerable Software and Affected Versions Windows Internet Connection Sharing ICS affected versions not specified Description A missing authentication flaw in a critical function allows an authorized attacker to perform local tampering, which can affect the system. Recommendations At...
PT-2026-88138
🚨 CVE-2026-83991 Windows Cloud Files GENERIC WRITE: ACCESS DENIED DeleteFileW: ACCESS DENIED CfCreatePlaceholders with supersede: S OK same file. same token. leaf DACL said no. sync root path did not care. turns a read-only file into a cloud placeholder. writeup + PoC by karollooool:...
CVE-2026-83991: Missing Authentication for Critical Function
Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally...
CVE-2026-69674: Missing Authentication for Critical Function
Missing authentication for critical function in Windows Modern Device Management MDM allows an authorized attacker to bypass a security feature locally...
CVE-2026-72964: Missing Authentication for Critical Function
Missing authentication for critical function in Windows Internet Connection Sharing ICS allows an authorized attacker to perform tampering locally...
CVE-2026-77097: Missing Authentication for Critical Function
Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...
CVE-2026-85981: Missing Authentication for Critical Function
The administrative panel of the Auth0 AD/LDAP Connector versions 6.5.0 and earlier listens on the local loopback interface without requiring authentication. This allows a local, low-privileged user or process on the host system to access the panel's management endpoints without credentials. Throu...
The vulnerability of the removeTwofactorConfig() function in the phpMyFAQ web application, which allows a hacker to bypass existing security measures
The vulnerability of the removeTwofactorConfig function in the phpMyFAQ web application is related to the lack of authentication for the critical function. Exploiting this vulnerability could allow a malicious actor to bypass existing security measures remotely...
PT-2026-87913
Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally...
Exploit for Missing Authentication for Critical Function in Coreweave Marimo
CVE-2026-39987 PoC Summary Marimo = 0.20.4 is affected...
