CVE-2026-54367

CentreStack prior to version 17.2 suffers an authentication bypass allowing unauthenticated attackers to read, modify, or delete arbitrary account settings by targeting exposed API endpoints with no authorization checks. Attackers can craft valid EntAcctId values by using a static shared encrypti...

PT-2021-22248

Name of the Vulnerable Software and Affected Versions Eigen NLP version 3.10.1 Description A lack of access control on the "/auth/v1/user/user-guid/" user edition endpoint could permit any logged-in user to increase their own permissions via a user permissions array in a PATCH request. A guest us...

Cross site request forgery (csrf)

An Anti CSRF mechanism was discovered missing in the Teradici Cloud Access Connector v31 and earlier in a specific web form, which allowed an attacker with knowledge of both a machineID and user GUID to modify data if a user clicked a malicious link...

CVE-2020-13186: Cross-Site Request Forgery (CSRF)

An Anti CSRF mechanism was discovered missing in the Teradici Cloud Access Connector v31 and earlier in a specific web form, which allowed an attacker with knowledge of both a machineID and user GUID to modify data if a user clicked a malicious link...

PT-2021-9566

Name of the Vulnerable Software and Affected Versions Teradici Cloud Access Connector versions prior to v31 Description A missing Anti CSRF mechanism was discovered in a specific web form of the Teradici Cloud Access Connector, allowing an attacker with knowledge of both a machineID and user GUID...