CVE-2026-61365

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

CVE-2026-50516

Incorrect authorization in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges over a network...

CVE-2026-42976

Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally...

CVE-2026-50516

Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-56778

Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-56722

Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

EUVD-2026-56618

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

EUVD-2026-56617

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

EUVD-2026-56604

Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally...

CVE-2026-42976

Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally...

EUVD-2026-56382

Missing authentication for critical function in Windows License Manager allows an authorized attacker to elevate privileges locally...

EUVD-2026-56326

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

wildfly-iiop-openjdk: Missing authentication on EAP's IIOP NameService leads to MITM or DoS

A flaw was found in EAP's IIOP. The listener's NameService would accept bind operations without authentication, allowing an attacker to hijack JNDI lookups and binding them to a malicious ORB, achieving MITM or DoS on further invocations...

org.apache.artemis:artemis-server: org.apache.activemq:artemis-server: Apache Artemis, Apache ActiveMQ Artemis: Message injection and exfiltration due to missing authentication

A flaw was found in Apache Artemis and Apache ActiveMQ Artemis. An unauthenticated remote attacker can exploit a missing authentication for critical function vulnerability by using the Core protocol. This allows the attacker to force a target broker to establish an outbound Core federation...

wildfly-iiop-openjdk: Missing authentication on EAP's IIOP NameService leads to MITM or DoS

A flaw was found in EAP's IIOP. The listener's NameService would accept bind operations without authentication, allowing an attacker to hijack JNDI lookups and binding them to a malicious ORB, achieving MITM or DoS on further invocations...

org.apache.artemis:artemis-server: org.apache.activemq:artemis-server: Apache Artemis, Apache ActiveMQ Artemis: Message injection and exfiltration due to missing authentication

A flaw was found in Apache Artemis and Apache ActiveMQ Artemis. An unauthenticated remote attacker can exploit a missing authentication for critical function vulnerability by using the Core protocol. This allows the attacker to force a target broker to establish an outbound Core federation...

wildfly-iiop-openjdk: Missing authentication on EAP's IIOP NameService leads to MITM or DoS

A flaw was found in EAP's IIOP. The listener's NameService would accept bind operations without authentication, allowing an attacker to hijack JNDI lookups and binding them to a malicious ORB, achieving MITM or DoS on further invocations...

org.apache.artemis:artemis-server: org.apache.activemq:artemis-server: Apache Artemis, Apache ActiveMQ Artemis: Message injection and exfiltration due to missing authentication

A flaw was found in Apache Artemis and Apache ActiveMQ Artemis. An unauthenticated remote attacker can exploit a missing authentication for critical function vulnerability by using the Core protocol. This allows the attacker to force a target broker to establish an outbound Core federation...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache SOAP

Summary Multiple vulnerabilities in Apache SOAP that is used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2022-40705 DESCRIPTION: An Improper Restriction of XML External Entity Reference vulnerability in RPCRouterServlet of Apache SOAP allows an attacker to rea...

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...