CVE-2026-77483

CVE-2026-77483 affects Microsoft SQL Server and involves a weak authentication mechanism that allows an authorized attacker (low privileges required) to elevate privileges over a network . The CVSS 3.1 score is 8.8 (HIGH) with vectors for network attack, low complexity, no user interaction, and h...

EUVD-2026-73784

Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-73025

CVE-2026-73025 is a Security Feature Bypass vulnerability in Windows iSCSI , rooted in weak authentication that allows an unauthorized attacker to bypass a security feature over a network. The vulnerability carries a CVSS 3.1 score of 9.8 (CRITICAL) with a network attack vector, low complexity, n...

EUVD-2026-73778

Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network...

SQL Server Elevation of Privilege Vulnerability

Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network...

Windows iSCSI Security Feature Bypass Vulnerability

Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-73025: Weak Authentication

Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-77483: Weak Authentication

Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network...

PT-2026-87943

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Weak authentication allows an authorized attacker to elevate privileges over a network, which can lead to unauthorized system impact. Recommendations At the moment, there is no information...

PT-2026-87934

Name of the Vulnerable Software and Affected Versions Windows iSCSI affected versions not specified Description Weak authentication in the Windows iSCSI Target service allows an unauthorized remote attacker to bypass security restrictions over a network. Recommendations At the moment, there is no...

EUVD-2026-69787

Phison PS3111-S11 controller firmware versions through SBFQT1.3 expose privileged vendor unique commands over the ATA interface with absent or defeatable authentication mechanisms. Attackers can bypass the weak CRC-16 based unlock handshake or exploit builds with no VUC lock to read and write...

EUVD-2024-55746

Oxford Nanopore MinKNOW before 24.06 relies on a client's source IP address for authentication...

PT-2026-84597

Oxford Nanopore MinKNOW before 24.06 relies on a client's source IP address for authentication...

CVE-2026-73819

Ebyte NE2-D11 (and NA111-M ) vendor configuration utility contains a weak authentication flaw: under certain credential conditions, administrative functions are accessible without verifying the operator's identity. An unauthenticated attacker on the adjacent network could modify critical settings...

CVE-2026-73819 Ebyte NA111-M Weak Authentication

The affected Ebyte product's vendor configuration utility permits access to administrative functions without verifying the operator's identity under certain credential conditions. An unauthenticated attacker on the adjacent network could modify critical settings or change access credentials,...

CVE-2026-73819 Ebyte NA111-M Weak Authentication

The affected Ebyte product's vendor configuration utility permits access to administrative functions without verifying the operator's identity under certain credential conditions. An unauthenticated attacker on the adjacent network could modify critical settings or change access credentials,...

CVE-2026-73819: Weak Authentication

The affected Ebyte product's vendor configuration utility permits access to administrative functions without verifying the operator's identity under certain credential conditions. An unauthenticated attacker on the adjacent network could modify critical settings or change access credentials,...

sj v2.8.1

sj Swagger Jacker sj is a command line tool designed to assist with auditing of exposed Swagger/OpenAPI definition files by checking the associated API endpoints for weak authentication. It also provides command templates for manual vulnerability testing. It does this by parsing the definition fi...

CVE-2026-65098

NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...

EUVD-2026-66095

NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...