7010 matches found
CVE-2026-82694 Tenda AC1206 Web UI ate R7WebsSecurityHandler missing authentication
A vulnerability was identified in Tenda AC1206 15.03.06.23. This issue affects the function R7WebsSecurityHandler of the file /goform/ate of the component Web UI. The manipulation leads to missing authentication. The attack can be initiated remotely. The exploit is publicly available and might be...
EUVD-2026-68506
A vulnerability was determined in Tenda AC1206 15.03.06.23. This vulnerability affects the function TendaTelnet of the file /goform/telnet of the component Web UI. Executing a manipulation can lead to missing authentication. It is possible to launch the attack remotely. The exploit has been...
CVE-2026-82693
CVE-2026-82693 affects the Tenda AC1206 router (firmware 15.03.06.23 ). The vulnerability resides in the Web UI component, specifically the TendaTelnet function within the file /goform/telnet. The root cause is a missing authentication check, allowing a remote attacker with no prior privileges to...
CVE-2026-82693 Tenda AC1206 Web UI telnet TendaTelnet missing authentication
A vulnerability was determined in Tenda AC1206 15.03.06.23. This vulnerability affects the function TendaTelnet of the file /goform/telnet of the component Web UI. Executing a manipulation can lead to missing authentication. It is possible to launch the attack remotely. The exploit has been...
CVE-2026-82693 Tenda AC1206 Web UI telnet TendaTelnet missing authentication
A vulnerability was determined in Tenda AC1206 15.03.06.23. This vulnerability affects the function TendaTelnet of the file /goform/telnet of the component Web UI. Executing a manipulation can lead to missing authentication. It is possible to launch the attack remotely. The exploit has been...
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-81578link is external PaperCut NG/MF Missing Authentication for Critical Function Vulnerability CVE-2026-82078link is external PaperCut NG/MF Unsafe...
CVE-2026-58574
Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit this vulnerability to read internal system information from the appliance filesystem. This is a...
CVE-2026-58574
Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit this vulnerability to read internal system information from the appliance filesystem. This is a...
CVE-2026-58574
Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit this vulnerability to read internal system information from the appliance filesystem. This is a...
CVE-2026-58574
Dell PowerStore is affected by a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface can read internal system information from the appliance filesystem. This may expose sensitive information and credent...
EUVD-2026-68368
Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit this vulnerability to read internal system information from the appliance filesystem. This is a...
WordPress SiteLeads plugin has a vulnerability related to information leakage
WordPress is an open-source content management system CMS and blog platform. The WordPress SiteLeads plugin has a vulnerability related to information leakage, which stems from the lack of authentication for access to sensitive data. Attackers can exploit this vulnerability to obtain sensitive...
PT-2026-83877
The affected Ebyte product's vendor configuration utility permits access to administrative functions without verifying the operator's identity under certain credential conditions. An unauthenticated attacker on the adjacent network could modify critical settings or change access credentials,...
PT-2026-83803
Name of the Vulnerable Software and Affected Versions Tenda AC18 version 15.03.05.19 Description A security flaw in the Telnet Handler component allows remote attackers to bypass authentication. The issue resides within an unknown function of the '/goform/telnet' endpoint. Recommendations At the...
CVE-2026-82694: Missing Authentication for Critical Function
A vulnerability was identified in Tenda AC1206 15.03.06.23. This issue affects the function R7WebsSecurityHandler of the file /goform/ate of the component Web UI. The manipulation leads to missing authentication. The attack can be initiated remotely. The exploit is publicly available and might be...
CVE-2026-82919: Missing Authentication for Critical Function
A vulnerability was identified in cu silicon up to 0.1.5. Affected by this vulnerability is the function createapp of the file views.py of the component edit Endpoint. Such manipulation leads to missing authentication. The attack may be performed from remote. The exploit is publicly available and...
PT-2026-84043
Name of the Vulnerable Software and Affected Versions cu silicon versions prior to 0.1.6 Description A remote issue exists in the edit Endpoint component within the views.py file. The create app function is susceptible to manipulation, which results in missing authentication, allowing an attacker...
CVE-2026-82695: Missing Authentication for Critical Function
A security flaw has been discovered in Tenda AC18 15.03.05.19. Impacted is an unknown function of the file /goform/telnet of the component Telnet Handler. The manipulation results in missing authentication. The attack can be launched remotely. The exploit has been released to the public and may b...
CVE-2026-82693: Missing Authentication for Critical Function
A vulnerability was determined in Tenda AC1206 15.03.06.23. This vulnerability affects the function TendaTelnet of the file /goform/telnet of the component Web UI. Executing a manipulation can lead to missing authentication. It is possible to launch the attack remotely. The exploit has been...
CVE-2026-58574: Missing Authentication for Critical Function
Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit this vulnerability to read internal system information from the appliance filesystem. This is a...