共收录 218 条相关情报。
← 返回所有主题CVE-2026-88828
The Blacklist Manager for WooCommerce WordPress plugin from 1.3.0 to 2.3.1 does not enforce its user blocking on every a
CVE-2026-93928
Authentication Bypass Using an Alternate Path or Channel vulnerability in Magepeople inc. Taxi Booking Manager for WooCo
CVE-2026-81868
### Summary When Steeltoe's certificate-based authorization (`UseCertificateAuthorization`) is configured, the default
CVE-2026-81868
Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applicati
CVE-2026-62101
Unauthenticated Broken Authentication in EduAdmin Booking <= 5.4.2 versions.
CVE-2026-14917
A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validate_assertion_signature option is
CVE-2026-27546
An unauthenticated remote attacker can exploit an authentication bypass in the _account_log function to log in as an adm
CVE-2026-57134
PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, MCPSecurity.evaluatePolicy() in src/praisonai-ts/src/mc
CVE-2026-91143
goproxy through 15.3 fails to apply HTTP proxy basic authentication to CONNECT tunnel requests, allowing unauthenticated
CVE-2026-88260
Authentication bypass using an alternate path or channel and Improper validation of syntactic correctness of input vulne
CVE-2026-88260
Authentication bypass using an alternate path or channel and Improper validation of syntactic correctness of input vulne
CVE-2026-81906
Concrete CMS OAuth callback login path prior to version 9.5.3 did not check whether an account was active or email-valid
CVE-2026-81906
Concrete CMS OAuth callback login path prior to version 9.5.3 did not check whether an account was active or email-valid
CVE-2026-81796
Unauthenticated Broken Authentication in WP Travel <= 12.0.3 versions.
CVE-2026-81787
Unauthenticated Broken Authentication in IMPress for IDX Broker <= 3.3.0 versions.
CVE-2026-81783
Subscriber Broken Authentication in MailMunch – Grow your Email List <= 3.2.5 versions.
CVE-2026-88861
Capgo (Cap-go/capgo.app) contains an authentication bypass affecting all versions (no patched version available at time
CVE-2026-83527
An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated att
CVE-2026-77103
CommServe contained an authentication bypass issue affecting access authorization and information disclosure. Software c
CVE-2026-62650
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Server-side authorization checks in the web