7739 matches found
PT-2026-87563
Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...
PT-2026-86974
Name of the Vulnerable Software and Affected Versions ASUS Control Center Express Agent affected versions not specified Description Missing authentication for a critical function allows an unauthenticated nearby user to achieve remote code execution and control the host via a direct connection to...
PT-2026-88138
🚨 CVE-2026-83991 Windows Cloud Files GENERIC WRITE: ACCESS DENIED DeleteFileW: ACCESS DENIED CfCreatePlaceholders with supersede: S OK same file. same token. leaf DACL said no. sync root path did not care. turns a read-only file into a cloud placeholder. writeup + PoC by karollooool:...
PT-2026-87913
Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally...
PT-2026-87448
Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-73004: Missing Authentication for Critical Function
Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally...
CVE-2026-77097: Missing Authentication for Critical Function
Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...
CVE-2026-86808: Missing Authentication for Critical Function
A security vulnerability has been detected in moltis-org moltis up to 20260818.10. The affected element is the function vaultunlockhandler/vaultrecoveryhandler of the file vault.rs. Such manipulation leads to missing authentication. The attack can be launched remotely. The exploit has been...
PT-2026-88320
A security vulnerability has been detected in moltis-org moltis up to 20260818.10. The affected element is the function vault unlock handler/vault recovery handler of the file vault.rs. Such manipulation leads to missing authentication. The attack can be launched remotely. The exploit has been...
CVE-2026-72964: Missing Authentication for Critical Function
Missing authentication for critical function in Windows Internet Connection Sharing ICS allows an authorized attacker to perform tampering locally...
CVE-2026-69674: Missing Authentication for Critical Function
Missing authentication for critical function in Windows Modern Device Management MDM allows an authorized attacker to bypass a security feature locally...
PT-2026-87365
Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally...
PT-2026-87542
Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description Missing authentication for a critical function in Windows Shell allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At...
PT-2026-87647
Missing authentication for critical function in Windows Modern Device Management MDM allows an authorized attacker to bypass a security feature locally...
phpMyFAQ removeTwofactorConfig Bypass
The vulnerability of the removeTwofactorConfig function in the phpMyFAQ web application is related to the lack of authentication for the critical function. Exploiting this vulnerability could allow a malicious actor to bypass existing security measures remotely...
Exploit for Missing Authentication for Critical Function in Coreweave Marimo
CVE-2026-39987 PoC Summary Marimo = 0.20.4 is affected...
CVE-2026-86506
In JetBrains GoLand before 2026.2.2.1 missing authentication on the GoLand profiler's injected pprof server exposed profiling data...
CVE-2026-86502
In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts...
