19037 matches found
PT-2026-112413
Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description Weak authentication allows an unauthorized attacker to perform spoofing over a network, which enables them to affect the system. Recommendations At the moment,...
CVE-2026-83657: Weak Authentication
Weak authentication in Windows Modern Device Management MDM allows an authorized attacker to perform tampering locally...
CVE-2026-85376: Weak Authentication
Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...
CVE-2026-85323: Weak Authentication
Weak authentication in Network Device Enrollment Service NDES allows an authorized attacker to perform spoofing over a network...
CVE-2026-83840: Weak Authentication
Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-85939: Weak Authentication
Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network...
CVE-2026-83674: Weak Authentication
Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-70005: Weak Authentication
Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-69982: Weak Authentication
Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-110104: Use of Password Hash With Insufficient Computational Effort
Xxyopen novel through 3.5.0 contains a weak password hashing vulnerability that allows attackers to recover plaintext passwords because UserServiceImpl.register stores unsalted MD5 digests in userinfo.password. Attackers who obtain the password column through a database leak or backup exposure ca...
CVE-2026-88101: Weak Authentication
Weak authentication in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...
CVE-2026-83511: Weak Authentication
Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-83586: Weak Authentication
Weak authentication in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...
CVE-2026-85328: Weak Authentication
Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally...
CVE-2026-69802: Weak Authentication
Weak authentication in Network Device Enrollment Service NDES allows an unauthorized attacker to execute code over a network...
CVE-2026-85922: Weak Authentication
Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network...
PT-2026-112856
Name of the Vulnerable Software and Affected Versions Azure Key Vault affected versions not specified Description Weak authentication allows an unauthorized attacker to bypass a security feature over a network. This authentication-bypass flaw could expose keys, certificates, and secrets used acro...
Microsoft Windows: CVE-2026-83674: Active Directory Federation Services (AD FS) Spoofing Vulnerability
Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
Microsoft Windows: CVE-2026-85328: Windows Projected File System Elevation of Privilege Vulnerability
Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally...
PT-2026-112716
Name of the Vulnerable Software and Affected Versions Network Device Enrollment Service NDES affected versions not specified Description Weak authentication in the Network Device Enrollment Service NDES allows an authorized attacker to perform spoofing over a network. Recommendations At the momen...