12014 matches found
CVE-2026-80771
In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: register input device after capabilities are set inputregisterdevice exposes the device to userspace immediately. In joyconinputcreate it was called before joyconconfigrumble configures the FFRUMBLE capability and...
CVE-2026-85695 FastChat Unauthenticated Worker Registration SSRF and Model Spoofing
FastChat contains an authentication bypass vulnerability in the /registerworker endpoint that allows unauthenticated attackers to register arbitrary worker addresses and perform server-side request forgery. Attackers can register malicious workers under victim model names to intercept user prompt...
CVE-2026-85581
SiYuan versions prior to v3.8.2 are affected by a denial of service vulnerability in the unauthenticated /api/system/uiproc endpoint. The endpoint accepts and retains attacker-controlled process identifiers without size limits or authentication, allowing an attacker to send repeated requests with...
EUVD-2025-210844
The WPFunnels WordPress plugin before 3.13.0 does not check whether user registration is enabled on the site before creating accounts from opt-in form submissions, relying on a value supplied in the request instead, allowing unauthenticated attackers to create WordPress user accounts even when...
CVE-2025-15691 WPFunnels < 3.13.0 - Unauthenticated User Registration via Opt-in Forms
The WPFunnels WordPress plugin before 3.13.0 does not check whether user registration is enabled on the site before creating accounts from opt-in form submissions, relying on a value supplied in the request instead, allowing unauthenticated attackers to create WordPress user accounts even when...
WordPress WPFunnels plugin < 3.13.0 - Unauthenticated User Registration vulnerability
Unauthenticated User Registration vulnerability discovered by D01EXPLOIT OFFICIAL in WordPress Plugin WPFunnels versions 3.13.0...
CVE-2025-15691
CVE-2025-15691 affects the WPFunnels WordPress plugin in versions prior to 3.13.0 . The vulnerability is an unauthenticated user registration flaw: the plugin does not check whether registration is enabled on the site before creating accounts from opt-in form submissions, instead relying on a val...
PT-2026-86167
PJSIP is a free and open source multimedia communication library written in C. Prior to commit acc03b5, a stack buffer overflow exists in PJSUA when processing Service-Route headers in a registration response update service route in pjsua acc.c. This affects applications that register using the...
Vulnerabilities of functions ipt_nat_register_lookups(), ipt_nat_unregister_lookups() in the module net/ipv4/netfilter/iptable_nat.c, functions ip6t_nat_register_lookups(), ip6t_nat_unregister_lookups() in the module net/ipv6/netfilter/ip6table_nat.c, functions nf_nat_register_fn(), nf_nat_unregister_fn() in the module net/netfilter/nf_nat_core.c of the Linux operating system, which allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerabilities of the functions iptnatregisterlookups and iptnatunregisterlookups in the module net/ipv4/netfilter/iptablenat.c, as well as the functions ip6tnatregisterlookups and ip6tnatunregisterlookups in the module net/ipv6/netfilter/ip6tablenat.c, along with the functions nfnatregister...
Linux Distros Unpatched Vulnerability : CVE-2026-80771
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: nintendo: register input device after capabilities are set inputregisterdevice exposes the device to userspace immediately. In joyconinputcreate it was...
CVE-2026-44506
Medplum , a developer platform for healthcare apps, had a flaw in versions 4.1.10 through 5.1.6 affecting self-hosted configurations . The /oauth2/register endpoint (OAuth dynamic registration) could return the client_secret of preconfigured OAuth clients defined via the defaultOAuthClients serve...
CVE-2026-44506 Medplum - Exposure of OAuth client secret via dynamic registration endpoint in self-hosted configurations
Medplum is a developer platform that enables development of healthcare apps. In Medplum versions 4.1.10 through 5.1.6, the /oauth2/register endpoint could return the clientsecret of preconfigured OAuth clients defined via the defaultOAuthClients server configuration when a matching redirecturi wa...
CVE-2026-44506 Medplum - Exposure of OAuth client secret via dynamic registration endpoint in self-hosted configurations
Medplum is a developer platform that enables development of healthcare apps. In Medplum versions 4.1.10 through 5.1.6, the /oauth2/register endpoint could return the clientsecret of preconfigured OAuth clients defined via the defaultOAuthClients server configuration when a matching redirecturi wa...
Linux Distros Unpatched Vulnerability : CVE-2026-52022
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the IMS P-CSCF registration handling components CVE-2026-52022...
CVE-2026-19117
Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as that user. This issue affects on-premises deployments only...
EUVD-2026-70252
Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as that user. This issue affects on-premises deployments only...
CVE-2026-19117 Delinea Secret Server FIDO2 credential registration authentication bypass vulnerability
Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as that user. This issue affects on-premises deployments only...
CVE-2026-19117
CVE-2026-19117 affects Delinea Secret Server in on-premises deployments . Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and subsequently authenticate as that user, effectively bypassing authentication. The vulnerability is rat...
DRUPAL-CONTRIB-2026-125
This module enables you to add an extra layer of verification for user registration. The module doesn't sufficiently filter user-supplied input before output, resulting in an unauthenticated reflected Cross-site Scripting XSS vulnerability...