CVE-2026-85478 CareCam CM2507 Missing Authentication for Critical Function

A CM2507 IP camera running firmware version HMT.CM2507 v251211.1507 exposes an interactive bootloader through a physical debug interface without requiring authentication. An attacker with physical access could interrupt the normal boot process and access functionality that permits inspection or...

CVE-2026-84400 CareCam CM2507 Missing Authentication for Critical Function

CareCam CM2507 IP cameras contain an insufficiently protected network maintenance mechanism that can activate a remote debugging service. An attacker on the same local network who satisfies certain device state conditions could make the service remotely accessible, increasing the risk of...

CVE-2026-84400 CareCam CM2507 Missing Authentication for Critical Function

CareCam CM2507 IP cameras contain an insufficiently protected network maintenance mechanism that can activate a remote debugging service. An attacker on the same local network who satisfies certain device state conditions could make the service remotely accessible, increasing the risk of...

CVE-2026-88259 CareCam CM2507 Missing Authentication for Critical Function

CareCam CM2507 IP cameras do not require authentication for access to its network video streaming service. An unauthenticated attacker with network access to the affected device could retrieve live camera video...

CVE-2026-88259

CareCam CM2507 IP cameras are affected by a missing authentication for critical function vulnerability in their network video streaming service. An unauthenticated attacker with network access to the device can retrieve live camera video without credentials. The CISA advisory (ICSA-26-258-08 ) as...

CVE-2026-88259 CareCam CM2507 Missing Authentication for Critical Function

CareCam CM2507 IP cameras do not require authentication for access to its network video streaming service. An unauthenticated attacker with network access to the affected device could retrieve live camera video...

EUVD-2026-83029

CareCam CM2507 IP cameras do not require authentication for access to its network video streaming service. An unauthenticated attacker with network access to the affected device could retrieve live camera video...

Security Bulletin: IBM Guardium Data Protection is affected by vulnerability (CVE-2026-84249)

Summary IBM Guardium Data Protection has addressed this vulnerability in an update. Vulnerability Details CVEID:CVE-2026-84249 DESCRIPTION: IBM Guardium Data Protection could allow a remote attacker to execute arbitrary management operations due to missing authentication for critical function...

Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation

Microsoft has released fixes for a maximum-severity security flaw in Azure AI Foundry that could be exploited to achieve privilege escalation. No customer action is required. The vulnerability, tracked as CVE-2026-85889 , carries a CVSS score of 10.0. "Missing authentication for critical function...

EUVD-2026-82593

Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-63647: Missing Authentication for Critical Function

CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior to 1.7.2, SseController exposes the anonymous /sse/subscribe, /sse/broadcast, and /sse/close endpoints because ShiroFilter.addPublicPathFilters permits the SSE paths, and the...

CVE-2026-77339: Missing Authentication for Critical Function

Process Compose is a scheduler and orchestrator for non-containerized applications. Prior to 1.120.0, the MCP SSE listener in src/mcp/server.go accepts browser-origin requests to /sse and the returned message endpoint without validating the Host header, validating the Origin header, or...

PT-2026-95510

Name of the Vulnerable Software and Affected Versions Forget-C Jellyfish AI Short Drama Studio versions 0.1.0-alpha through 0.3.2 Description An issue exists within the FastAPI component, specifically in the backend/app/dependencies.py file. Remote manipulation of an unknown function in this file...

PT-2026-95679

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the ChangeTrackerServlet...

PT-2026-95682

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A missing authentication flaw exists in the LoadBalancerServlet endpoint. This allows an unauthenticated user to perform privileged load-balancer operations, which could lead to unauthorize...

CVE-2026-85478: Missing Authentication for Critical Function

A CM2507 IP camera running firmware version HMT.CM2507 v251211.1507 exposes an interactive bootloader through a physical debug interface without requiring authentication. An attacker with physical access could interrupt the normal boot process and access functionality that permits inspection or...

CVE-2026-84075: Missing Authentication for Critical Function

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the ChangeTrackerServlet...

CVE-2026-88259: Missing Authentication for Critical Function

CareCam CM2507 IP cameras do not require authentication for access to its network video streaming service. An unauthenticated attacker with network access to the affected device could retrieve live camera video...

CVE-2026-93559: Missing Authentication for Critical Function

A vulnerability was identified in Forget-C Jellyfish AI Short Drama Studio 0.1.0-alpha/0.2.0/0.3.0/0.3.1/0.3.2. This affects an unknown function of the file backend/app/dependencies.py of the component FastAPI. The manipulation leads to missing authentication. It is possible to initiate the attac...

CVE-2026-84078: Missing Authentication for Critical Function

IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the LoadBalancerServlet. An unauthenticated user can access privileged load-balancer operations, potentially resulting in unauthorized actions and impact to the integrity and availability of the affected...