7409 matches found
CVE-2026-70580
A missing authentication vulnerability exists in a critical function within Windows Credential Guard . This flaw allows an authorized attacker to perform spoofing locally . The vulnerability has a HIGH base severity score of 8.8 and is categorized under CWE-306 . Official remediation is available...
CVE-2026-96183
A vulnerability exists in the Windows Health and Optimized Experiences Service due to missing authentication for a critical function. This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability is assigned CWE-306 and has an official fix available. No spe...
CVE-2026-107607 Missing authentication for critical function in Swann Communications SWIFI-SE2KIC
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to access a real-time video stream without authentication...
CVE-2026-107607
Swann Communications SWIFI-SE2KIC devices running firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function (CWE-306) vulnerability. An attacker situated on the local network can exploit this flaw to access a real-time video stream without any authenticat...
CVE-2026-107606
The Swann Communications SWIFI-SE2KIC device is vulnerable to a Missing Authentication for Critical Function vulnerability in firmware versions 2.0.22 and prior . An attacker situated on the local network can exploit this flaw to retrieve a snapshot of the live feed without any authentication. No...
CVE-2026-107606 Missing authentication for critical function in Swann Communications SWIFI-SE2KIC
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to retrieve a snapshot of the live feed without authentication...
CVE-2026-107605 Missing authentication for critical function in Swann Communications SWIFI-SE2KIC
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to view live video feed without authentication...
CVE-2026-107605
Swann Communications SWIFI-SE2KIC devices running firmware versions 2.0.22 and prior are affected by a Missing Authentication for Critical Function vulnerability (CWE-306). This flaw allows an attacker on the local network to view the live video feed without any authentication. No specific remedi...
CVE-2026-110128
fuint through commit 4c4bc8a contains a missing authentication vulnerability that allows unauthenticated attackers to retrieve any member's order details via the /clientApi/order/detail endpoint. Attackers can enumerate sequential orderId values without an Access-Token to expose buyer names,...
CVE-2026-110114
FJ-OMS oms-erp through PRE contains a missing authentication vulnerability that allows unauthenticated attackers to delete and rebuild product search indexes by calling public es-test maintenance endpoints in skyer-goods. Attackers can repeatedly request /v1/goods/sku/es-test to empty the shared...
CVE-2026-110128 fuint through commit 4c4bc8a Missing Authentication via /clientApi/order/detail
fuint through commit 4c4bc8a contains a missing authentication vulnerability that allows unauthenticated attackers to retrieve any member's order details via the /clientApi/order/detail endpoint. Attackers can enumerate sequential orderId values without an Access-Token to expose buyer names,...
CVE-2026-110128
The fuint software (specifically through commit 4c4bc8a ) contains a missing authentication vulnerability in the /clientApi/order/detail endpoint. This flaw allows unauthenticated attackers to perform an IDOR attack by enumerating sequential orderId values without an Access-Token . Successful exp...
CVE-2026-110128 fuint through commit 4c4bc8a Missing Authentication via /clientApi/order/detail
fuint through commit 4c4bc8a contains a missing authentication vulnerability that allows unauthenticated attackers to retrieve any member's order details via the /clientApi/order/detail endpoint. Attackers can enumerate sequential orderId values without an Access-Token to expose buyer names,...
CVE-2026-110114 oms-erp through PRE Missing Authentication via skyer-goods es-test Endpoints
FJ-OMS oms-erp through PRE contains a missing authentication vulnerability that allows unauthenticated attackers to delete and rebuild product search indexes by calling public es-test maintenance endpoints in skyer-goods. Attackers can repeatedly request /v1/goods/sku/es-test to empty the shared...
CVE-2026-110114 oms-erp through PRE Missing Authentication via skyer-goods es-test Endpoints
FJ-OMS oms-erp through PRE contains a missing authentication vulnerability that allows unauthenticated attackers to delete and rebuild product search indexes by calling public es-test maintenance endpoints in skyer-goods. Attackers can repeatedly request /v1/goods/sku/es-test to empty the shared...
CVE-2026-110114
The FJ-OMS oms-erp through PRE application is vulnerable to a missing authentication flaw within the skyer-goods component. Unauthenticated attackers can access public es-test maintenance endpoints, specifically by requesting /v1/goods/sku/es-test . This allows for the deletion and rebuilding of ...
CVE-2026-106043
Ivanti Xtraction versions before 2026.4 are affected by a Missing Authentication for Critical Function vulnerability (CWE-306). This flaw allows a remote unauthenticated attacker to create or modify trusted sites . While the documents do not provide specific remediation steps or exploit links, th...
CVE-2026-77096
CVFS contained a missing authentication condition affecting command execution. Software customers upgrade to resolved maintenance release. Update CVFS...
CVE-2026-77096
CVFS is impacted by a missing authentication condition that can affect command execution . The vulnerability allows for unauthorized actions due to the lack of proper authentication checks. To remediate this issue, software customers should upgrade to the resolved maintenance release and update C...