#cwe-288

共收录 218 条相关情报。

← 返回所有主题
漏洞预警2026-10-22 发布INFO

Traefik before v2.11.58 and v3.7.14 contains an authentication bypass vulnerability in its SNI check, which is skipped when request TLS state is nil. Unauthenticated clients can...

CVE-2026-114635

Traefik before v2.11.58 and v3.7.14 contains an authentication bypass vulnerability in its SNI check, which is skipped w

历史摘要 · 未重新核验 · NVD

安全公告2026-10-22 发布INFO

Traefik before v2.11.58 and v3.7.14 SNI Check Bypass via HTTP/2 Scheme

CVE-2026-114635

Traefik before v2.11.58 and v3.7.14 contains an authentication bypass vulnerability in its SNI check, which is skipped w

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-16 发布INFO

A potential authentication bypass vulnerability was reported in some Lenovo tablets that could...

CVE-2026-89057

A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physica

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication...

CVE-2026-110852

n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication bypass because dynamic-path

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-13 发布MEDIUM

Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.

CVE-2026-85865

Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.

CVE-2026-83787

Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security

来源摘录 · NVD

漏洞预警2026-10-13 发布INFO

An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management servic...

CVE-2026-11731

An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper validation of sub-requests.

CVE-2026-19622

IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to gain unauthorized administrative access due to improper authentication.

CVE-2026-19620

IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to gain unauthorized administrative access due to impr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, the HTTP configuration mutation routes require RequireSecureSession, but /mcp and /mcp_message require...

CVE-2026-84360

Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, the HTTP configuration mutation routes requir

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Unauthenticated Broken Authentication in eRoom <= 1.7.1 versions.

CVE-2026-62038

Unauthenticated Broken Authentication in eRoom <= 1.7.1 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Authentication Bypass Using an Alternate Path or Channel vulnerability in Omegathemes Grocery Shopping Store grocery-shopping-store allows Password Recovery Exploitation.This is...

CVE-2026-93949

Authentication Bypass Using an Alternate Path or Channel vulnerability in Omegathemes Grocery Shopping Store grocery-sho

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

A malicious user with physical access to the device can boot the switch from factory settings without authentication, use the default administrative credentials to obtain admini...

CVE-2026-33272

A malicious user with physical access to the device can boot the switch from factory settings without authentication, us

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue affects Jetpack: from n/a t...

CVE-2026-106602

Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Rec

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue affects Jetpack: from n/a t...

CVE-2026-106601

Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Rec

历史摘要 · 未重新核验 · NVD

安全公告2026-10-08 发布INFO

An authentication bypass vulnerability exists in the web management interface of Brocade Fabric...

CVE-2026-94585

An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-07 发布INFO

A security vulnerability has been identified in FlexNet Publisher lmadmin. The vulnerability exists in a SOAP handler, where a hardcoded authentication bypass could allow an una...

CVE-2026-19572

A security vulnerability has been identified in FlexNet Publisher lmadmin. The vulnerability exists in a SOAP handler, w

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Subscriber Broken Authentication in Simple JWT Login 4.0.0 versions.

CVE-2026-39793

Subscriber Broken Authentication in Simple JWT Login 4.0.0 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Unauthenticated Broken Authentication in Graphina <= 3.1.12 versions.

CVE-2026-39769

Unauthenticated Broken Authentication in Graphina <= 3.1.12 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Unauthenticated Broken Authentication in Advanced Google reCAPTCHA <= 5.40 versions.

CVE-2026-100518

Unauthenticated Broken Authentication in Advanced Google reCAPTCHA <= 5.40 versions.

历史摘要 · 未重新核验 · NVD