A vulnerability was determined in DTStack Taier up to 1.4.0. The affected element is the function preHandle of the file taier-data-develop/src/main/java/com/dtstack/taier/develo...

CVE-2026-11618

A vulnerability was determined in DTStack Taier up to 1.4.0. The affected element is the function preHandle of the file

历史摘要 · 未重新核验 · NVD

A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authent...

CVE-2026-50751

A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows

历史摘要 · 未重新核验 · NVD

On Tapo C520WS v2, restricted accounts (for example, hub users) are intended to execute only a...

CVE-2026-34123

On Tapo C520WS v2, restricted accounts (for example, hub users) are intended to execute only a limited set of low‑sensit

历史摘要 · 未重新核验 · GitHub Advisory

On Tapo C520WS v2, restricted accounts (for example, hub users) are intended to execute only a limited set of low‑sensitivity operations. Due to a logic flaw in the device’s API...

CVE-2026-34123

On Tapo C520WS v2, restricted accounts (for example, hub users) are intended to execute only a limited set of low‑sensit

历史摘要 · 未重新核验 · NVD

UDS Identity Config builds the Keycloak configuration image (realm, plugins, theme, truststore, JARs) consumed by UDS Core's Identity deployment. In versions 0.11.0 through 0.26...

CVE-2026-46389

UDS Identity Config builds the Keycloak configuration image (realm, plugins, theme, truststore, JARs) consumed by UDS Co

历史摘要 · 未重新核验 · NVD

An Improper Authentication vulnerability in the /api/Cdn/GetFile endpoint of linqi allows unauthenticated, remote attackers to bypass file access controls. The ValidateAnonFileA...

CVE-2026-11345

An Improper Authentication vulnerability in the /api/Cdn/GetFile endpoint of linqi allows unauthenticated, remote attack

历史摘要 · 未重新核验 · NVD

Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Acc...

CVE-2026-6274

Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electron

历史摘要 · 未重新核验 · NVD

On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, and routing enabled on the access VLAN of the ports, a malicious suppli...

CVE-2023-5502

On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, and routing en

历史摘要 · 未重新核验 · NVD

The local MQTT broker does not enforce topic-level Access Control Lists (ACLs). This allows any client to subscribe using wildcard characters (# or +) to enumerate hidden networ...

CVE-2026-49186

该漏洞存在于本地 MQTT broker 中，由于未对主题级别实施访问控制列表（ACL），任何客户端都可以使用通配符（# 或 +）订阅主题。攻击者可通过通配符订阅枚举隐藏的网络设备（如 IoT 设备、传感器等），获取敏感信息，甚至发布伪造的

历史摘要 · 未重新核验 · NVD

A vulnerability was identified in ealpha072 Student-Management-System up to...

CVE-2026-10777

A vulnerability was identified in ealpha072 Student-Management-System up to 01451bd7a2f58cdda07bd0b86e3967582e3ecd08. Af

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was identified in ealpha072 Student-Management-System up to 01451bd7a2f58cdda07bd0b86e3967582e3ecd08. Affected by this issue is some unknown functionality of the...

CVE-2026-10777

该漏洞影响 ealpha072 开发的 Student-Management-System（学生管理系统），涉及截至 commit 01451bd7a2f58cdda07bd0b86e3967582e3ecd08 的所有版本。该系统采用滚动

历史摘要 · 未重新核验 · NVD

Froxlor's API Authentication bypasses 2FA Authentication

## Summary Froxlor's API authentication (`FroxlorRPC::validateAuth`) does not enforce Two-Factor Authentication. When a

历史摘要 · 未重新核验 · GitHub Advisory

The ARMember Premium plugin for WordPress is vulnerable to an insecure password reset mechanism...

CVE-2026-5076

The ARMember Premium plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, a

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was detected in sayan365 student-management-system up to...

CVE-2026-10619

A vulnerability was detected in sayan365 student-management-system up to 7f3c9ce7d410332335c2affac93a385485051800. This

历史摘要 · 未重新核验 · GitHub Advisory

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. This affects...

CVE-2026-10617

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. This affects the function resolveAut

历史摘要 · 未重新核验 · GitHub Advisory

authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, the Source stage can be bypassed by sending an empty POST. This issue has bee...

CVE-2026-49448

authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, the Source stage can

历史摘要 · 未重新核验 · NVD

authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, an attacker with the ability to change a source connection, and an account in...

CVE-2026-49443

authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, an attacker with the

历史摘要 · 未重新核验 · NVD

CloudburstMC Protocol is a protocol library for Minecraft Bedrock Edition. Prior to version 3.0.0.Beta12-20260420.182526-15, CloudburstMC Protocol is partially missing validatio...

CVE-2026-45289

CloudburstMC Protocol is a protocol library for Minecraft Bedrock Edition. Prior to version 3.0.0.Beta12-20260420.182526

历史摘要 · 未重新核验 · NVD

A vulnerability was detected in sayan365 student-management-system up to 7f3c9ce7d410332335c2affac93a385485051800. This impacts an unknown function. The manipulation results in ...

CVE-2026-10619

A vulnerability was detected in sayan365 student-management-system up to 7f3c9ce7d410332335c2affac93a385485051800. This

历史摘要 · 未重新核验 · NVD

The ARMember Premium plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, and including, 7.3.1. The plugin stores a plaintext copy o...

CVE-2026-5076

The ARMember Premium plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, a

历史摘要 · 未重新核验 · NVD