114323 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-106217
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to leak...
CVE-2026-62253: Missing Authentication for Critical Function
Homer is open source telecom observability software. Prior to version 11.0.283, both JWT middleware functions JWTMiddleware and JWTMiddlewareV4 immediately return nextc when jwtSecret == "". The JWT secret defaults to an empty string. On a default installation, all protected API endpoints under...
CVE-2026-103075: Missing Authorization
Missing Authorization vulnerability in WPMU DEV Hustle wordpress-popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hustle: from n/a through 7.8.14.2...
Linux Distros Unpatched Vulnerability : CVE-2026-106355
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Media in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtai...
Linux Distros Unpatched Vulnerability : CVE-2026-106183
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted...
CVE-2026-106363
Missing authorization in FullScreen in Google Chrome prior to 155.0.80...
CVE-2026-76272: Missing Authorization
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could cause Splunk Secure Gateway to sign attacker-controlled payloads. The vulnerability is possible because Splunk Secure Gateway does not verify that the user i...
CVE-2026-76268: Missing Authentication for Critical Function
In Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthenticated user with network access to the Patroni Representational State Transfer REST Application Programming Interface API on a search head cluster member could execute attacker-controlled operating-system commands. The vulnerabili...
CVE-2025-70520
The Fanvil x7a device, running firmware version 2.6.0.1182 , contains a vulnerability in its websocket handler due to a lack of proper authentication restrictions against sessionless users. This security weakness allows any user to access sensitive device resources , including operational logs an...
CVE-2026-107151: Missing Authentication for Critical Function
Missing authentication has been found in remote-execution task updates in the smartproxydynflow package. The progress and completion callbacks accept a report when the one-time token is missing. A network attacker or user must already know the identifier of a running job. This applies when remote...
CVE-2026-81535: Missing Authorization
In wolfSSH through 1.5.0 built with --enable-fwd, DoChannelOpen in src/internal.c gates only direct-tcpip channel opens with the forwarding policy callback. forwarded-tcpip opens are admitted without an authorization check and are not capped in number, allowing a malicious SSH peer to make an...
CVE-2026-93026: Missing Authorization
This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and stored antivirus update credentials...
PT-2026-107455
Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.27...
CVE-2026-106271
Missing authorization in Workers in Google Chrome prior to 155.0.8059...
CVE-2026-106191
Missing authorization in Actor in Google Chrome prior to 155.0.8059.39...
CVE-2026-106289
Missing authorization in FedCM in Google Chrome prior to 155.0.8059.39...
CVE-2026-106183
Missing authorization in Chromoting in Google Chrome on on Windows pri...
CVE-2026-106194
Missing authorization in WebAppInstalls in Google Chrome prior to 155...