Lucene search
+L

2 matches found

OSV
OSV
added 2026/07/29 2:12 p.m.5 views

CVE-2026-66723 Missing authentication requirement in Remote Instances proxy API in MWDB Core

MWDB Core versions =2.2.0 and 2.19.0 contain a missing authorization vulnerability in the Remote Instances proxy API. The proxy API does not verify authentication for incoming requests, allowing an unauthenticated remote attacker to send arbitrary requests to a remote MWDB instance using the...

7CVSS6AI score
SaveExploits0References7
Cvelist
Cvelist
added 2026/07/29 2:12 p.m.40 views

CVE-2026-66723 Missing authentication requirement in Remote Instances proxy API in MWDB Core

MWDB Core versions =2.2.0 and 2.19.0 contain a missing authorization vulnerability in the Remote Instances proxy API. The proxy API does not verify authentication for incoming requests, allowing an unauthenticated remote attacker to send arbitrary requests to a remote MWDB instance using the...

7CVSS0.00494EPSS
SaveExploits0References3
Rows per page
Query Builder