Lucene search
+L

7734 matches found

Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•26 views

PT-2026-87448

Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network...

6.8CVSS5.8AI score0.00725EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•5 views

CVE-2026-73004: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally...

5.5CVSS5.7AI score0.00302EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•11 views

CVE-2026-77097: Missing Authentication for Critical Function

Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

8.8CVSS5.8AI score0.00466EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•11 views

CVE-2026-86808: Missing Authentication for Critical Function

A security vulnerability has been detected in moltis-org moltis up to 20260818.10. The affected element is the function vaultunlockhandler/vaultrecoveryhandler of the file vault.rs. Such manipulation leads to missing authentication. The attack can be launched remotely. The exploit has been...

7.5CVSS6.5AI score0.00838EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•19 views

PT-2026-88320

A security vulnerability has been detected in moltis-org moltis up to 20260818.10. The affected element is the function vault unlock handler/vault recovery handler of the file vault.rs. Such manipulation leads to missing authentication. The attack can be launched remotely. The exploit has been...

7.5CVSS6.5AI score0.00838EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•11 views

CVE-2026-72964: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Internet Connection Sharing ICS allows an authorized attacker to perform tampering locally...

5.5CVSS5.7AI score0.00302EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•15 views

CVE-2026-69674: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Modern Device Management MDM allows an authorized attacker to bypass a security feature locally...

5.5CVSS5.7AI score0.00302EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•27 views

PT-2026-87365

Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally...

5.5CVSS5.7AI score0.00302EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/09/08 12:00 a.m.•14 views

phpMyFAQ removeTwofactorConfig Bypass

The vulnerability of the removeTwofactorConfig function in the phpMyFAQ web application is related to the lack of authentication for the critical function. Exploiting this vulnerability could allow a malicious actor to bypass existing security measures remotely...

6.8CVSS6.8AI score0.00518EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•10 views

CVE-2026-83991: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally...

5.5CVSS6AI score0.00302EPSS
SaveExploits4References3
GithubExploit
GithubExploit
•added 2026/09/07 8:09 p.m.•28 views

Exploit for Missing Authentication for Critical Function in Coreweave Marimo

CVE-2026-39987 PoC Summary Marimo = 0.20.4 is affected...

9.8CVSS8.8AI score0.99564EPSS
SaveExploits31
NVD
NVD
•added 2026/09/07 5:17 p.m.•26 views

CVE-2026-86506

In JetBrains GoLand before 2026.2.2.1 missing authentication on the GoLand profiler's injected pprof server exposed profiling data...

5.9CVSS0.00377EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/07 5:17 p.m.•25 views

CVE-2026-86502

In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts...

8.4CVSS0.0021EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/07 4:26 p.m.•21 views

CVE-2026-86506

In JetBrains GoLand before 2026.2.2.1 missing authentication on the GoLand profiler's injected pprof server exposed profiling data...

5.9CVSS5.8AI score0.00377EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/07 4:26 p.m.•60 views

CVE-2026-86506

In JetBrains GoLand before 2026.2.2.1 missing authentication on the GoLand profiler's injected pprof server exposed profiling data...

5.9CVSS0.00377EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/07 4:26 p.m.•23 views

EUVD-2026-72522

In JetBrains GoLand before 2026.2.2.1 missing authentication on the GoLand profiler's injected pprof server exposed profiling data...

5.9CVSS5.7AI score0.00377EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/07 4:26 p.m.•38 views

CVE-2026-86506

JetBrains GoLand versions before 2026.2.2.1 are affected by a missing authentication flaw on the profiler's injected pprof server , which could expose profiling data to unauthorized network accessors. The vulnerability carries a CVSS 3.1 score of 5.9 (Medium) , with a network attack vector, high ...

5.9CVSS5.8AI score0.00377EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/07 4:26 p.m.•16 views

CVE-2026-86502

In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts...

8.4CVSS6.1AI score0.0021EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/07 4:26 p.m.•154 views

CVE-2026-86502

JetBrains IntelliJ IDEA versions before 2026.2.2 contain a vulnerability in the IJent gRPC server , where missing TLS encryption and authentication allowed an attacker with local access to achieve arbitrary code execution on Remote Development hosts. The CVSS 3.1 score is 8.4 (High) , reflecting ...

8.4CVSS6.1AI score0.0021EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/07 4:26 p.m.•49 views

CVE-2026-86502

In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts...

8.4CVSS0.0021EPSS
SaveExploits0References1
Rows per page
Query Builder