CVE-2026-77339: Missing Authentication for Critical Function

Process Compose is a scheduler and orchestrator for non-containerized applications. Prior to 1.120.0, the MCP SSE listener in src/mcp/server.go accepts browser-origin requests to /sse and the returned message endpoint without validating the Host header, validating the Origin header, or...

CVE-2026-88259: Missing Authentication for Critical Function

CareCam CM2507 IP cameras do not require authentication for access to its network video streaming service. An unauthenticated attacker with network access to the affected device could retrieve live camera video...

PT-2026-95510

Name of the Vulnerable Software and Affected Versions Forget-C Jellyfish AI Short Drama Studio versions 0.1.0-alpha through 0.3.2 Description An issue exists within the FastAPI component, specifically in the backend/app/dependencies.py file. Remote manipulation of an unknown function in this file...

PT-2026-95679

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the ChangeTrackerServlet...

PT-2026-95682

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A missing authentication flaw exists in the LoadBalancerServlet endpoint. This allows an unauthenticated user to perform privileged load-balancer operations, which could lead to unauthorize...

Esri Portal for ArcGIS 11.1 / 11.3 / 11.5 / 12.0 < Security 2026 Update 3 Multiple Vulnerabilities

The version of Esri Portal for ArcGIS installed on the remote host is 11.1, 11.3, 11.5, or 12.0 and is missing the Security 2026 Update 3 Patch. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability exists in Esri Portal for ArcGIS that may under...

CVE-2026-85889

Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-85889

Azure AI Foundry is affected by a missing authentication vulnerability in a critical function, allowing an unauthenticated attacker to elevate privileges over a network. The flaw is rated CRITICAL (CVSS 3.1: 10.0) with a vector of network-based, low complexity, no privileges required, no user int...

CVE-2026-54504 MCP Documentation Server: Web UI API binds to all interfaces without authentication by default

MCP Documentation Server is a local-first document management and semantic search server for AI coding agents. From 1.13.0 until 1.13.1, the automatically started Web UI in src/server.ts calls startWebServer in src/web-server.ts with STARTWEBUI enabled by default and WEBPORT set to 3080...

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

CVE-2026-23744 exploit de RCE ejecución...

Azure AI Foundry Elevation of Privilege Vulnerability

Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-71568

BMCtest (part of the OpenShift Metal3/bmctest project) starts Ironic without authentication and TLS during its test execution window. An attacker on the adjacent network who can win the race against bmctest itself could modify Ironic's state, resulting in a high integrity impact . The high attack...

CVE-2026-81441

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Denial of service...

CVE-2026-81475

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...

EUVD-2026-81461

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Denial of service...

CVE-2026-81441

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Denial of service...

CVE-2026-81441

Dell OpenManage Server Administrator versions prior to 11.1.0.3 contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with local access could exploit this flaw to cause a Denial of Service . The CVSS 3.1 base score is 4.0 (MEDIUM) (AV:L/AC:L/PR:N/UI:N/S...

CVE-2026-81441

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Denial of service...

CVE-2026-81475

Dell OpenManage Server Administrator , versions prior to 11.1.0.3 , is vulnerable to a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access can exploit this flaw to achieve Remote execution . To mitigate this risk, it is recommended to update ...

CVE-2026-81475

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...