PT-2026-114058

Name of the Vulnerable Software and Affected Versions NullHub versions prior to 2026.5.29 Description An authentication bypass exists in the management API endpoint /api/ because the auth token field defaults to null and is never assigned. Unauthenticated attackers sending requests without...

CVE-2026-97793

Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally...

CVE-2026-96183

Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally...

CVE-2026-85884

Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83715

Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally...

CVE-2026-83656

Missing authentication for critical function in Windows Modern Device Management MDM allows an authorized attacker to perform tampering locally...

CVE-2026-70580

Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally...

CVE-2026-62879

Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally...

CVE-2026-107606

SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to retrieve a snapshot of the live feed without authentication...

CVE-2026-107607

SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to access a real-time video stream without authentication...

CVE-2026-107605

SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to view live video feed without authentication...

CVE-2026-85884

The Windows Health and Optimized Experiences Service is vulnerable to a privilege escalation flaw due to missing authentication for a critical function (CWE-306). An authorized attacker can exploit this to elevate privileges locally on the affected system. While the CVSS 3.1 score is 7.8 (High) ,...

CVE-2026-62879

A missing authentication vulnerability in Windows SmartScreen (CWE-306) allows an authorized attacker to perform tampering locally . The vulnerability impacts the integrity of the system by enabling unauthorized modifications to critical functions. No specific exploit details or in-the-wild explo...

CVE-2026-96313

A missing authentication flaw in Windows Push Notifications allows an authorized attacker to perform a local privilege escalation . The root cause is identified as CWE-307 (Missing Authentication for Critical Function). The vulnerability has a High severity base score of 7.0, indicating significa...

CVE-2026-83715

The Windows Error Reporting service is vulnerable to a Missing Authentication for Critical Function (CWE-306) flaw. This vulnerability allows an authorized attacker to perform tampering locally on the affected system. The CVSS 3.1 base score is 7.1 (High) , with local access and low complexity re...

CVE-2026-83654

A local elevation of privilege vulnerability exists in Windows Modern Device Management (MDM) due to missing authentication for critical functions (CWE-306). An authorized attacker can exploit this flaw to gain higher privileges on the system. The vulnerability has a HIGH base severity score of 7...

CVE-2026-70580

A missing authentication vulnerability exists in a critical function within Windows Credential Guard . This flaw allows an authorized attacker to perform spoofing locally . The vulnerability has a HIGH base severity score of 8.8 and is categorized under CWE-306 . Official remediation is available...

CVE-2026-96183

A vulnerability exists in the Windows Health and Optimized Experiences Service due to missing authentication for a critical function. This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability is assigned CWE-306 and has an official fix available. No spe...

CVE-2026-107607 Missing authentication for critical function in Swann Communications SWIFI-SE2KIC

SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to access a real-time video stream without authentication...

CVE-2026-107607

Swann Communications SWIFI-SE2KIC devices running firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function (CWE-306) vulnerability. An attacker situated on the local network can exploit this flaw to access a real-time video stream without any authenticat...