Export limit exceeded: 417088 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (5106 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-107605 | 1 Swann Communications | 1 Swifi-se2kic | 2026-10-26 | 6.2 Medium |
| SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to view live video feed without authentication. | ||||
| CVE-2026-107606 | 1 Swann Communications | 1 Swifi-se2kic | 2026-10-26 | 6.2 Medium |
| SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to retrieve a snapshot of the live feed without authentication. | ||||
| CVE-2026-107607 | 1 Swann Communications | 1 Swifi-se2kic | 2026-10-26 | 6.2 Medium |
| SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to access a real-time video stream without authentication. | ||||
| CVE-2026-16740 | 1 Tr7 Cyber defense Inc. | 1 Tr7 Asp | 2026-10-26 | 9.8 Critical |
| Missing authentication for critical function vulnerability in TR7 Cyber Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber Defense Inc. TR7 ASP on physical appliance allows OS Command Injection. This issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7 ASP: from 1.6.42.239 before 1.6.1554.2331. | ||||
| CVE-2026-110616 | 1 Nullclaw | 1 Nullhub | 2026-10-26 | 8.1 High |
| NullHub through 2026.5.29 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/* management API because the auth_token field defaults to null and is never assigned. Attackers sending requests without Authorization or Origin headers to non-loopback listeners can control agent instances, rewrite configurations including provider credentials, and manage cron jobs and MCP servers. | ||||
| CVE-2026-110618 | 1 Pppscn | 1 Smsforwarder | 2026-10-26 | 8.1 High |
| SmsForwarder through 3.5.0 contains a missing authentication vulnerability in its AndServer HTTP server that allows unauthenticated network attackers to invoke remote-control APIs. Attackers can call the default-enabled endpoints to read SMS, call logs and contacts, send SMS, and export or overwrite configuration via the clone API. | ||||
| CVE-2026-110632 | 1 Report One | 1 Myreport Updater | 2026-10-26 | 8.1 High |
| Report One MyReport Updater through 2.1.1 exposes an unauthenticated gRPC service on TCP port 9095 that allows remote attackers to redirect the SYSTEM updater by invoking the UpdateConfigReferent method. Attackers can point the updater to a malicious reference server serving modified module archives with matching MD5 digests to write files and execute code as SYSTEM. | ||||
| CVE-2026-109439 | 1 Lantronix | 2 Xpress-dr, Xpress-dr-i | 2026-10-26 | 9.8 Critical |
| Lantronix XPress-DR and XPress-DR-I (CoBos-family) firmware through 8.1.0.0 contains a missing authentication vulnerability that allows remote attackers to read and persistently overwrite device configuration by sending crafted frames to the unauthenticated UDP configuration protocol on port 30718. Attackers can send a type 0xF8 query to read live configuration data and a type 0xFD frame with exactly 0x78 body bytes to rewrite the device IP address and serial-channel forwarding records, causing changes to commit to EEPROM and persist across reboots. The XPress-DR product series reached end-of-life/end-of-support in February 2025. | ||||
| CVE-2026-34006 | 1 Qnap Systems | 1 Smedio Dtcp Move | 2026-10-26 | N/A |
| A missing authentication for critical function vulnerability has been reported to affect sMedio DTCP MOVE. If exploited, the vulnerability could allow remote attackers to gain access to the system. We have already fixed the vulnerability in the following version: sMedio DTCP MOVE 1.4.5 and later | ||||
| CVE-2026-111283 | 1 Bmc Helix | 1 Bmc Helix Network Management | 2026-10-26 | 9 Critical |
| BMC Helix Network Management on-prem 26.3.00 before 26.3.01 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as the local administrator with any password when SAML single sign-on is configured. Attackers can submit the administrator username with an arbitrary password on the web login page to obtain a SuperAdmin session, modify device credentials, run device commands, and alter audit records. | ||||
| CVE-2026-111312 | 1 Openhealthforall | 1 Openhealth | 2026-10-26 | 7.7 High |
| OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /api/health-data/[id] GET, PATCH and DELETE handlers that query records by id without session or authorId checks. Unauthenticated attackers who know a HealthData record id can read another user's medical record data and file metadata, overwrite it with arbitrary JSON, or delete it. | ||||
| CVE-2026-116634 | 1 Cheaper-inference | 1 Omniroute | 2026-10-26 | 5.9 Medium |
| OmniRoute 3.8.50 before 3.8.52 contains a missing authentication vulnerability that allows unauthenticated attackers to issue sync tokens via POST /api/sync/tokens when requireLogin is disabled. Attackers can use the issued token against GET /api/sync/bundle to retrieve decrypted provider credentials and plaintext API keys, with tokens persisting after login is re-enabled. | ||||
| CVE-2026-111637 | 1 Blair2004 | 1 Nexopos | 2026-10-26 | 5.3 Medium |
| NexoPOS through 6.2.4 contains a missing authentication vulnerability that allows unauthenticated attackers to read accounting transaction records via GET /api/fields/{resource}/{identifier}. Attackers can request transaction field classes like ns.entity-transaction with sequential ids to retrieve names, values, account ids, and descriptions without nexopos.read.transactions permission. | ||||
| CVE-2026-111643 | 1 L429609201 | 1 Misaka Danmu Server | 2026-10-26 | 9.8 Critical |
| Misaka Danmu Server through 2.8.9 contains an authentication bypass vulnerability that allows unauthenticated attackers to write arbitrary configuration keys via the unprotected POST /api/ui/config-history/rollback endpoint. Attackers can set the ipWhitelist key to their own /32 address, or alter trustedProxies and webhookApiKey, to access every protected endpoint as the administrator. | ||||
| CVE-2026-111644 | 1 L429609201 | 1 Misaka Danmu Server | 2026-10-26 | 7.3 High |
| Misaka Danmu Server through 2.8.9 contains a missing authentication vulnerability that allows unauthenticated attackers to access audit, diagnostics, data-check, scan-index and health routes under /api/ui lacking the get_current_user dependency. Attackers can read audit logs with login IPs, server logs and environment paths, delete episode rows, clear media-server mappings, and wipe audit history. | ||||
| CVE-2026-111650 | 1 Hoshinosuzumi | 1 Chronoframe | 2026-10-26 | 8.6 High |
| ChronoFrame through 1.0.0 contains a missing authentication vulnerability in the server/api/wizard/ handlers that allows unauthenticated attackers to reconfigure already configured instances. Attackers can POST to /api/wizard/storage to activate an attacker-controlled S3 or OpenList provider, redirecting uploads and storage reads, and overwrite site and map settings. | ||||
| CVE-2026-111653 | 1 53ai | 1 53aihub | 2026-10-26 | 5.3 Medium |
| 53AIHub through 0.5.3 contains a missing authentication vulnerability that allows unauthenticated attackers to overwrite any enterprise's profile by sending PUT requests to /api/enterprises/:id. Because UpdateEnterprise only enforces checks when IS_SAAS is true, attackers can enumerate sequential enterprise IDs and overwrite logos, display names and branding for defacement and phishing. | ||||
| CVE-2026-111659 | 1 Wayn111 | 1 Waynboot-mall | 2026-10-26 | 6.5 Medium |
| Waynboot-mall through 2.0.0 contains a missing authentication vulnerability that allows unauthenticated attackers to forge orders by calling the internal /callback/order/submit message-queue callback. Attackers can supply arbitrary userId, addressId and cart ids in the order JSON to create orders for any member, expose stored shipping details, clear carts, and decrement stock. | ||||
| CVE-2026-111675 | 1 Xiaochong0302 | 1 Course-tencent-cloud | 2026-10-26 | 7.4 High |
| Course-tencent-cloud through 2.0.1 contains an improper restriction of authentication attempts vulnerability that allows unauthenticated attackers to brute force 6-digit SMS/email verification codes, which are never invalidated or attempt-limited. Attackers who know a victim's phone or email can trigger a code and rotate source IPs against the password reset and verify login endpoints to take over accounts. | ||||
| CVE-2026-111694 | 1 Qiantongtech | 1 Qknow | 2026-10-26 | 5.3 Medium |
| qKnow through 2.4.3 contains a missing authentication vulnerability that allows unauthenticated remote attackers to access /flyflow workflow integration endpoints permitted in SecurityConfig. Attackers can POST sequential userId values to /flyflow/userById or call roleAll and deptListByParentDeptId to enumerate user phone numbers, roles, and department structure. | ||||