Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

CVE-2026-...

CVE-2025-39247

CVE-2025-39247 대상: HikCentral Professional HCMP, 중앙 VMS 서버 CVE: CVE-2025-39247 — 접근 제어 취약점 CVSS 3.1: 8.6 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N 영향받는 버전: V2.3.1 – V2.6.2 및 V3.0.0 수정 버전: V2.6.3 / V3.0.1 / Fix-Pack CVE-2025-39247 공개일: 2025-08-28 분석일: 2026-05-21 1. 오픈소스 정보 수집 단계 다운로드 전에 이미 공개된 정보는 다음과...

CVE-2026-107151

Missing authentication has been found in remote-execution task updates in the smartproxydynflow package. The progress and completion callbacks accept a report when the one-time token is missing. A network attacker or user must already know the identifier of a running job. This applies when remote...

EUVD-2026-94312

Missing authentication has been found in remote-execution task updates in the smartproxydynflow package. The progress and completion callbacks accept a report when the one-time token is missing. A network attacker or user must already know the identifier of a running job. This applies when remote...

CVE-2026-107151

The smart_proxy_dynflow Ruby gem contains a missing authentication vulnerability in remote-execution task updates. When remote execution is configured in pull or pull-mqtt mode, the progress and completion callbacks accept reports even if the one-time token is missing. An attacker who knows a run...

CVE-2026-107151

Missing authentication has been found in remote-execution task updates in the smartproxydynflow package. The progress and completion callbacks accept a report when the one-time token is missing. A network attacker or user must already know the identifier of a running job. This applies when remote...

CVE-2026-39987-Marimo-Preauth-RCE

CVE-2026-39987 Marimo 認証前 RCE 調査 概要 本プロジェクトは、Marimo のターミナル WebSocket エンドポイント /terminal/ws に関連する認証前リモートコード実行脆弱性である CVE-2026-39987 に焦点を当てています。 Marimo は、ユーザーが Web インターフェースを通じて Python コードを記述および実行できるオープンソースのリアクティブ Python...

PT-2026-107563

LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess coordinator that allows remote unauthenticated attackers to access its HTTP fleet control API listening on all interfaces by default. Attackers can register or deregister instances via /instances, overwrite...

PT-2026-107564

LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess mode HTTP server that allows remote unauthenticated attackers to access management endpoints listening on all interfaces by default. Attackers can read environment credentials via GET /env and configuration...

CVE-2025-70520

The websocket handler in Fanvil x7a firmware version 2.6.0.1182 fails to enforce proper authentication restrictions against sessionless users . This vulnerability allows unauthorized individuals to view device resources , including operational logs , or perform diagnostic requests . No specific r...

PT-2026-107493

Missing authentication has been found in remote-execution task updates in the smart proxy dynflow package. The progress and completion callbacks accept a report when the one-time token is missing. A network attacker or user must already know the identifier of a running job. This applies when remo...

CVE-2025-505050

CVE-2025- Des: 업로드된 파일에 대한 인증되지 않은 접근 POC: 업로드된 파일로 이동하면 로그인 없이 접근할 수 있습니다. 발견자: Aljohara Abdulmohsen Alsubaie...

CVE-2026-28767

CVE-2026-28767: 관리 알림 엔드포인트의 인증 누락 권고 필드| 값 ---|--- CVE| CVE-2026-28767 ICSA| ICSA-26-055-03 Update A CVSS 3.1| 5.3 중간 벡터| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CWE| CWE-306 중요 기능에 대한 인증 누락 연구자| Michael Groberman — Gr0m 게시일| 2026-04-02 Update A 제품 필드| 값 ---|--- 공급업체| Gardyn 제품| Gardyn Home...

CVE-2026-28766

CVE-2026-28766 인증 누락: 사용자 계정 엔드포인트 필드| 값 ---|--- CVE| CVE-2026-28766 심각도| 치명적 9.3 CVSS 벡터| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N 약점 CWE| CWE-306: 중요 기능에 대한 인증 누락 영향받는 구성 요소| Cloud API 2.12.2026 공급업체| Gardyn Inc. 영향받는 제품| Gardyn Home Kit 모델 1.0, 2.0, 3.0, 4.0; Gardyn Studio 모델 1.0, 2.0 분야| ...

CVE-2026-63690

Dell Container Storage Modules, versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csi-powerflex; csi-powermax; csi-powerstore. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to...

CVE-2026-70411

Dell Container Storage Modules CSM, versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-tenant gRPC service TenantService. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to...

EUVD-2026-93466

Dell Container Storage Modules, versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csi-powerflex; csi-powermax; csi-powerstore. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to...

CVE-2026-63690

Dell Container Storage Modules (CSM) versions prior to 1.18.0 are vulnerable to a Missing Authentication for Critical Function vulnerability in the csi-powerflex , csi-powermax , and csi-powerstore components. An unauthenticated attacker with adjacent network access can exploit this flaw to cause...

CVE-2026-63690

Dell Container Storage Modules, versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csi-powerflex; csi-powermax; csi-powerstore. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to...

CVE-2026-63690

Dell Container Storage Modules, versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csi-powerflex; csi-powermax; csi-powerstore. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to...