7734 matches found
CVE-2026-19397
Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby user to control the host via a direct connection to the agent when the host has an active login session. Refer to the ' Security Update for ASUS Control Center Express Agent '...
CVE-2026-19397
Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby user to control the host via a direct connection to the agent when the host has an active login session. Refer to the ' Security Update for ASUS Control Center Express Agent '...
CVE-2026-19397
CVE-2026-19397 is a missing authentication vulnerability in ASUS Control Center Express Agent . When the host has an active login session, an unauthenticated user on the adjacent network can directly connect to the agent and control the host. The flaw affects a critical function within the agent ...
EUVD-2026-72612
Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby user to control the host via a direct connection to the agent when the host has an active login session. Refer to the ' Security Update for ASUS Control Center Express Agent '...
EUVD-2026-72561
knowns versions before 0.30.0 serve the management API without authentication on all network interfaces by default, with no password required on fresh installations. Attackers can access the unauthenticated /api/tunnel/start endpoint to provision a public tunnel and republish the API at a publicl...
CVE-2026-58240 Missing Authentication check in SAP NetWeaver (Message Server)
SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal application server components during registration. An unauthenticated attacker with network access to the affected service could exploit this weakness to register an unauthorized component and potentially...
CVE-2026-58240 Missing Authentication check in SAP NetWeaver (Message Server)
SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal application server components during registration. An unauthenticated attacker with network access to the affected service could exploit this weakness to register an unauthorized component and potentially...
CVE-2026-85981: Missing Authentication for Critical Function
The administrative panel of the Auth0 AD/LDAP Connector versions 6.5.0 and earlier listens on the local loopback interface without requiring authentication. This allows a local, low-privileged user or process on the host system to access the panel's management endpoints without credentials. Throu...
CVE-2026-69554: Missing Authentication for Critical Function
Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...
CVE-2026-69528: Missing Authentication for Critical Function
Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally...
CVE-2026-69415: Missing Authentication for Critical Function
Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network...
PT-2026-87046
Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...
PT-2026-87542
Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description Missing authentication for a critical function in Windows Shell allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At...
CVE-2026-69321: Missing Authentication for Critical Function
Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally...
PT-2026-87563
Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...
PT-2026-87879
Name of the Vulnerable Software and Affected Versions Windows Internet Connection Sharing ICS affected versions not specified Description A missing authentication flaw in a critical function allows an authorized attacker to perform local tampering, which can affect the system. Recommendations At...
PT-2026-86974
Name of the Vulnerable Software and Affected Versions ASUS Control Center Express Agent affected versions not specified Description Missing authentication for a critical function allows an unauthenticated nearby user to achieve remote code execution and control the host via a direct connection to...
PT-2026-88138
🚨 CVE-2026-83991 Windows Cloud Files GENERIC WRITE: ACCESS DENIED DeleteFileW: ACCESS DENIED CfCreatePlaceholders with supersede: S OK same file. same token. leaf DACL said no. sync root path did not care. turns a read-only file into a cloud placeholder. writeup + PoC by karollooool:...