4599 matches found
CVE-2026-20996
CVE-2026-20996 affects Smart Switch prior to version 3.7.69.15, where use of a broken or risky cryptographic algorithm enables remote attackers to downgrade the authentication scheme. The issue is documented across multiple sources (CVE/NVD and Red Hat EUVD/AKB entries) and is tied to the downgra...
CVE-2026-20996
Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.69.15 allows remote attackers to configure a downgraded scheme for authentication...
PT-2026-25602
Name of the Vulnerable Software and Affected Versions Smart Switch versions prior to 3.7.69.15 Description Improper verification of a cryptographic signature in Smart Switch allows remote attackers to potentially bypass authentication. Recommendations Update Smart Switch to version 3.7.69.15 or...
CVE-2026-4187 Tiandy Easy7 Integrated Management Platform Device Identifier UpdateLocalDevInfo.jsp missing authentication
A vulnerability was identified in Tiandy Easy7 Integrated Management Platform 7.17.0. Impacted is an unknown function of the file /WebService/UpdateLocalDevInfo.jsp of the component Device Identifier Handler. Such manipulation of the argument username/password leads to missing authentication. The...
EUVD-2026-11321
Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From 3.0.0 to before 3.1.0, if Himmelblau is deployed without a configured tenant domain in himmelblau.conf, authentication is not tenant-scoped. In this mode, Himmelblau can accept authentication attempts for...
EUVD-2025-208483
A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.0 through 7.2.10, FortiAnalyzer 7.0.0 through 7.0.14, FortiAnalyzer 6.4 all versions, FortiAnalyzer Cloud 7.6.2, FortiAnalyzer Cloud 7.4.1 through 7.4.7,...
CVE-2026-30897
A stack-based buffer overflow vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow a remote authenticated attacker who can bypass stack protection and ASLR to execute...
CVE-2025-48418
A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.0 through 7.2.10, FortiAnalyzer 7.0.0 through 7.0.14, FortiAnalyzer 6.4 all versions, FortiAnalyzer Cloud 7.6.2, FortiAnalyzer Cloud 7.4.1 through 7.4.7,...
PT-2026-24229
Name of the Vulnerable Software and Affected Versions Fortinet FortiAnalyzer versions 6.4 through 7.6.3 Fortinet FortiAnalyzer Cloud versions 6.4 through 7.6.2 Fortinet FortiManager versions 6.4 through 7.6.3 Fortinet FortiManager Cloud versions 6.4 through 7.6.3 Fortinet FortiAnalyzer versions...
CVE-2026-3739
A security flaw has been discovered in suitenumerique messages 0.2.0. This issue affects the function ThreadAccessSerializer of the file src/backend/core/api/serializers.py of the component ThreadAccess. The manipulation results in improper authentication. The attack can be executed remotely. The...
PT-2026-23944
A security flaw has been discovered in suitenumerique messages 0.2.0. This issue affects the function ThreadAccessSerializer of the file src/backend/core/api/serializers.py of the component ThreadAccess. The manipulation results in improper authentication. The attack can be executed remotely. The...
Exploit for Improper Authentication in Cisco Catalyst_Sd-Wan_Manager
CVE-2026‑20127 – Remote Authentication Bypass for Cisco Cataly...
CVE-2026-23600
A remote authentication bypass vulnerability exists in HPE AutoPass License Server APLS...
PT-2026-22762
Name of the Vulnerable Software and Affected Versions Nokia Impact versions prior to Mobile 23 FP1 Nokia Impact DM versions prior to 19.11 Description A flaw exists in Nokia Impact that allows a remote authenticated user to inject a malicious payload into the Campaign Name field when using the Ad...
CVE-2023-31044
Summary: CVE-2023-31044 affects Nokia Impact prior to Mobile 23_FP1. In Impact DM 19.11 and later, a remote authenticated user can exploit the Add Campaign function to inject a malicious payload within the Campaign Name. When exported to CSV, those payloads may execute via spreadsheet software, e...
CVE-2026-23600
A remote authentication bypass vulnerability exists in HPE AutoPass License Server APLS...
CVE-2026-23600
A remote authentication bypass vulnerability exists in HPE AutoPass License Server APLS...
CVE-2026-23600
CVE-2026-23600 affects Hewlett Packard Enterprise AutoPass License Server (APLS). The vulnerability is a remote authentication bypass in the web service (port 5814 by default) where improper authentication prior to access enables misuse. Multiple sources (ZDI advisory) describe the flaw as an aut...