CVE-2026-110825

The Kiloview E3 NDI encoder is affected by a vulnerability where the ONVIF device service fails to require authentication for critical configuration write operations. An unauthenticated remote attacker can modify the hostname , DNS resolution , or NTP configuration . This allows for follow-on att...

CVE-2026-111100

The Kiloview E3 NDI Encoder is impacted by a missing authentication vulnerability in its ONVIF device service . A remote, unauthenticated party can send specific informational requests to retrieve detailed device identifiers and a list of configured user accounts including their privilege levels....

CVE-2026-111100 Kiloview E3 NDI Encoder Missing Authentication for Critical Function

The ONVIF device service on the E3 responds to certain informational requests without requiring authentication. A remote, unauthenticated party can retrieve detailed device identifiers along with a list of configured user accounts and their privilege levels. This aids attackers in fingerprinting...

CVE-2026-83938

The Azure Kubernetes Configuration Service is affected by a vulnerability caused by missing authentication for a critical function. This flaw allows an unauthorized attacker to elevate privileges over a network. The vulnerability has been assigned a CVSS 3.1 score of 10.0 (CRITICAL) , indicating ...

CVE-2026-13599

Missing authentication for critical function vulnerability in ABB Ability Edgenius. This issue affects Ability Edgenius: through 3.2.3.0...

EUVD-2026-108241

Missing authentication for critical function vulnerability in ABB Ability Edgenius. This issue affects Ability Edgenius: through 3.2.3.0...

CVE-2026-13599

The ABB Ability Edgenius software (versions through 3.2.3.0 ) is vulnerable to a Missing Authentication for Critical Function (CWE-306) flaw. This vulnerability allows an attacker with low privileges to perform critical actions without proper authentication. The issue impacts confidentiality, int...

CVE-2026-13599 ABB Ability Edgenius | Missing Authentication in Edgenius AuthDB

Missing authentication for critical function vulnerability in ABB Ability Edgenius. This issue affects Ability Edgenius: through 3.2.3.0...

Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability

Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-107669

A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionality of the file admin/session.php of the component Session Handler. Executing a manipulation of the argument userid can lead to missing authentication. It is possible to launch t...

EUVD-2026-107668

Missing Authentication for Critical Function CWE-306 and Insufficiently Protected Credentials CWE-522 in the control plane enrollment status handler HandleEnrollStatus at GET /enroll/status in internal/controlplane/server.go in Google OSS Agent Mesh SAM versions 0.1.0-alpha.1 through 0.1.0-alpha....

PT-2026-121678

Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-114439

A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionality of the file admin/session.php of the component Session Handler. Executing a manipulation of the argument userid can lead to missing authentication. It is possible to launch t...

CVE-2026-114439 oretnom23 php-travel-agency-system Session session.php missing authentication

A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionality of the file admin/session.php of the component Session Handler. Executing a manipulation of the argument userid can lead to missing authentication. It is possible to launch t...

CVE-2026-114439

The oretnom23 php-travel-agency-system is vulnerable to missing authentication within the Session Handler component, specifically affecting the admin/session.php file. An attacker can perform a remote attack by manipulating the user_id argument. While the exploit has been publicly disclosed, the ...

CVE-2026-114439 oretnom23 php-travel-agency-system Session session.php missing authentication

A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionality of the file admin/session.php of the component Session Handler. Executing a manipulation of the argument userid can lead to missing authentication. It is possible to launch t...

CVE-2026-105944 Apache Pulsar Manager: Missing authentication and authorization and disclosure of the Pulsar admin credential; end of life

Apache Pulsar Manager is a web console for administering Apache Pulsar clusters. It has its own user accounts and login, and it can be configured with an HTTP authentication credential, such as a token, that it uses to call the Pulsar admin API on behalf of its users. Pulsar Manager has the...

CVE-2026-105944

Apache Pulsar Manager is an unsupported web console for administering Apache Pulsar clusters that suffers from critical authentication and authorization flaws. In versions 0.3.0 and later , an unauthenticated user can create a superuser account, gain full administrative privileges, and take compl...

CVE-2026-114261

A vulnerability was found in MomoTommy file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df. This issue affects the function index/store/update/destroy of the file app/Http/Controllers/FileController.php of the component Files API. The manipulation of the argument Request results in...

CVE-2026-114260

A vulnerability has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This vulnerability affects the function deletefolder of the file ajax.php of the component AJAX Handler. The manipulation of the argument ID leads to missing authentication. The...