117615 matches found
CVE-2026-103270: Missing Authentication for Critical Function
LightLLM through 1.2.0 mounts reinforcement learning control routes on the public HTTP API without authentication checks. Unauthenticated attackers can call endpoints like /pausegeneration, /abortrequest, /flushcache, and /initweightsupdategroup to disrupt inference operations and wedge workers o...
CVE-2026-97285: Missing Authorization
Contributor Broken Access Control in The Events Calendar = 6.17.5 versions...
CVE-2026-94499: Missing Authorization
Subscriber Broken Access Control in FormGent = 1.12.2 versions...
CVE-2026-10726: Improper Certificate Validation
Cato Windows SDP Client before version 6.12.6 contains an arbitrary file disclosure vulnerability. A low-privileged local user can cause the Windows service, running as Local System, to read and disclose arbitrary local files due to improper file path validation and missing TLS certificate...
CVE-2026-102458: Missing Authentication for Critical Function
EasyFlow .NET developed by Digiwin has a Missing Authentication vulnerability. Unauthenticated remote attackers can obtain other users' plaintext passwords through a specific API...
CVE-2026-93462: Missing Authentication for Critical Function
A missing authentication for critical function vulnerability exists in baserCMS. If this vulnerability is exploited, a remote attacker may obtain sensitive information...
CVE-2026-94297: Missing Authorization
The Media Library Organizer WordPress plugin before 2.1.4 does not verify that the requesting user holds the target taxonomy's management capability before creating a new term, allowing users with contributor-level access and above to create publicly visible terms in any taxonomy registered on th...
CVE-2026-85576: Missing Authorization
The All in One Files Upload WordPress plugin before 2.0.17 does not have any capability check, and does not verify the authenticity of the request, when saving its settings, allowing any authenticated user, such as a subscriber, to change them...
CVE-2026-103053: Missing Authentication for Critical Function
AiSOC versions 9.0.0 before 12.0.0 fail to enforce authentication on the response-action API endpoints when AISOCDEVMODE is enabled and AISOCACTIONSSERVICETOKEN is empty in the default Docker Compose deployment. Unauthenticated attackers can list response-action integrations, submit and approve...
Linux Distros Unpatched Vulnerability : CVE-2026-102310
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Payments in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origi...
PT-2026-103464
Name of the Vulnerable Software and Affected Versions Move 4K 12X versions prior to 0.0.98 Move 4K 20X versions prior to 0.1.33 Move 4K 30X versions prior to 2.1.17 Link 4K 12X versions prior to 0.0.99 Link 4K 20X versions prior to 0.1.37 Link 4K 30X versions prior to 2.1.18 Move SE 12X versions...
PT-2026-103120
Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Retrieve Embedded Sensitive Data.This issue affects WPMobile.App: from n/a through 11.83...
PT-2026-103123
Cato Windows SDP Client before version 6.12.6 contains an arbitrary file disclosure vulnerability. A low-privileged local user can cause the Windows service, running as Local System, to read and disclose arbitrary local files due to improper file path validation and missing TLS certificate...
PT-2026-103035
The Vayu X WordPress theme before 1.0.6 does not perform any capability check on one of its AJAX actions and exposes the nonce guarding it to every logged-in user, allowing any authenticated user, such as a subscriber, to install and activate any hosted on the WordPress.org repository...
PT-2026-103305
Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2026.2.18991 Description Missing authorization allows users with read-only permissions to access and read project settings. Recommendations Update to version 2026.2.18991...
PT-2026-103318
šØ CVE-2026-100271 In JetBrains YouTrack before 2026.2.19197 missing authorisation on several endpoints allowed authenticated users to access information from other projects š@cveNotify...
PT-2026-103067
A missing authentication for critical function vulnerability exists in baserCMS. If this vulnerability is exploited, a remote attacker may obtain sensitive information...
PT-2026-103428
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker could cause a missing authorization issue. A successful exploit of this vulnerability might lead to information disclosure and data tampering...
PT-2026-103514
Name of the Vulnerable Software and Affected Versions OpenClaw Windows Node versions prior to 2026.7.1-3 Description NodeService capture handlers lack proper authorization, allowing connected gateways or agents to perform unauthorized captures without consent prompts. An attacker can use the node...
CVE-2026-102124: Missing Authentication for Critical Function
A Kiteworks appliance setup interface did not enforce authentication once the appliance had completed initial configuration. An unauthenticated attacker with network access to the appliance could read and modify a limited set of setup records, including a contact name and email address captured...