fastify versions >= 4.0.0 and before 5.12.2 can route a malformed URL sent under one plugin prefix to the custom not-found handler of a different sibling plugin, and invoke it w...

CVE-2026-76169

fastify versions >= 4.0.0 and before 5.12.2 can route a malformed URL sent under one plugin prefix to the custom not-fou

历史摘要 · 未重新核验 · NVD

Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an...

CVE-2026-62916

Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevat

历史摘要 · 未重新核验 · GitHub Advisory

Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-62916

Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevat

历史摘要 · 未重新核验 · NVD

SiYuan: Anonymous publish-password authentication bypass via getHeadingChildrenDOM / getHeading*Transaction / getBacklinkDoc (publish mode)

**CVE:** This vulnerability corresponds to [CVE-2026-68584](https://nvd.nist.gov/vuln/detail/CVE-2026-68584). ### Summa

历史摘要 · 未重新核验 · GitHub Advisory

Unauthenticated Broken Authentication in Really Simple SSL <= 9.8.0 versions.

CVE-2026-84777

Unauthenticated Broken Authentication in Really Simple SSL <= 9.8.0 versions.

历史摘要 · 未重新核验 · NVD

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA Protected Page allows Functionality Bypass. This issue affects CAPTCHA Protected Page ve...

CVE-2026-81168

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA Protected Page allows Functiona

历史摘要 · 未重新核验 · NVD

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Disable Login Page allows Functionality Bypass. This issue affects Disable Login Page versions: ...

CVE-2026-16647

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Disable Login Page allows Functionality

历史摘要 · 未重新核验 · NVD

Disable Login Page - Moderately critical - Access bypass - SA-CONTRIB-2026-111

CVE-2026-16647

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Disable Login Page allows Functionality

历史摘要 · 未重新核验 · OSV.dev

CAPTCHA Protected Page - Moderately critical - Cookie Forgery - SA-CONTRIB-2026-105

CVE-2026-81168

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA Protected Page allows Functiona

历史摘要 · 未重新核验 · OSV.dev

Unauthenticated Broken Authentication in RegistrationMagic <= 6.0.9.8 versions.

CVE-2026-82225

Unauthenticated Broken Authentication in RegistrationMagic <= 6.0.9.8 versions.

历史摘要 · 未重新核验 · GitHub Advisory

Unauthenticated Broken Authentication in RegistrationMagic <= 6.0.9.8 versions.

CVE-2026-82225

Unauthenticated Broken Authentication in RegistrationMagic <= 6.0.9.8 versions.

历史摘要 · 未重新核验 · NVD

Gophish through 0.12.1 fails to enforce account lockout and password change requirements in the API authentication middleware. Attackers with valid API keys can bypass these sec...

CVE-2026-82269

Gophish through 0.12.1 fails to enforce account lockout and password change requirements in the API authentication middl

历史摘要 · 未重新核验 · NVD

Xiiaozet LK100Wt contains an authentication weakness within an administrative service that may allow an attacker to bypass intended access controls and obtain command executio...

CVE-2026-76943

Xiiaozet LK100Wt contains an authentication weakness within an administrative service that may allow an attacker to byp

历史摘要 · 未重新核验 · NVD

In FreeBSD 15.0, the kernel structure used to represent user credentials changed: previously the primary group ID was stored in the first element of the array containing the lis...

CVE-2026-58092

In FreeBSD 15.0, the kernel structure used to represent user credentials changed: previously the primary group ID was st

历史摘要 · 未重新核验 · NVD

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal...

CVE-2026-16639

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On all

历史摘要 · 未重新核验 · GitHub Advisory

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. This issue affects Internation...

CVE-2026-16639

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On all

历史摘要 · 未重新核验 · NVD

The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via the 'Enable Password Authorization' setting. The device increments a retry counte...

CVE-2026-63587

The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via the 'Enable Password Aut

历史摘要 · 未重新核验 · NVD

Unauthenticated Broken Authentication in WPLegalPages <= 3.7.0 versions.

CVE-2026-78259

Unauthenticated Broken Authentication in WPLegalPages <= 3.7.0 versions.

历史摘要 · 未重新核验 · GitHub Advisory

Unauthenticated Broken Authentication in WPLegalPages <= 3.7.0 versions.

CVE-2026-78259

Unauthenticated Broken Authentication in WPLegalPages <= 3.7.0 versions.

历史摘要 · 未重新核验 · NVD

Unauthenticated Broken Authentication in User Registration & Membership Pro <= 5.4.5 versions.

CVE-2026-74001

Unauthenticated Broken Authentication in User Registration & Membership Pro <= 5.4.5 versions.

历史摘要 · 未重新核验 · NVD