The Joomla extension Gridbox is vulnerable an authenticated bypass, potentially leading to full admin access.
CVE-2026-61425
The Joomla extension Gridbox is vulnerable an authenticated bypass, potentially leading to full admin access.
#cwe-288
共收录 218 条相关情报。
← 返回所有主题Frappe LMS is an open source learning management system. In version 2.51.0 and earlier, a user could bypass payment validation for courses by using unrelated batch. This has bee...
CVE-2026-39385
Frappe LMS is an open source learning management system. In version 2.51.0 and earlier, a user could bypass payment vali
Frappe LMS enrollment bypass in paid courses via unrelated batch
CVE-2026-39385
Frappe LMS is an open source learning management system. In version 2.51.0 and earlier, a user could bypass payment vali
Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based)...
CVE-2026-57980
Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based) allows an unauthorized attac
Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a network.
CVE-2026-57980
CVE-2026-57980 是 Microsoft Edge（基于 Chromium）中的一个认证绕过漏洞，利用替代路径或通道实现。未经授权的攻击者可通过网络远程利用该漏洞，执行篡改操作，例如修改浏览器设置、注入恶意内容或绕过安全策略。漏
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an authentication bypass through an alternative path or channel. A successful explo...
CVE-2026-47481
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an authentication bypass t
Authentication Bypass Using an Alternate Path or Channel vulnerability in VillaTheme Abandoned Cart Recovery for WooCommerce woo-abandoned-cart-recovery allows Authentication Ab...
CVE-2026-57698
Authentication Bypass Using an Alternate Path or Channel vulnerability in VillaTheme Abandoned Cart Recovery for WooComm
Authentication Bypass Using an Alternate Path or Channel vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Password Recovery Exploi...
CVE-2026-57697
Authentication Bypass Using an Alternate Path or Channel vulnerability in Metagauss ProfileGrid profilegrid-user-profil
Authentication Bypass Using an Alternate Path or Channel vulnerability in miniOrange Security...
CVE-2026-57807
Authentication Bypass Using an Alternate Path or Channel vulnerability in miniOrange Security Software Pvt Ltd. OAuth Si
Authentication Bypass Using an Alternate Path or Channel vulnerability in miniOrange Security Software Pvt Ltd. OAuth Single Sign On - SSO (OAuth Client) allows Password Recover...
CVE-2026-57807
Authentication Bypass Using an Alternate Path or Channel vulnerability in miniOrange Security Software Pvt Ltd. OAuth Si
A protection mechanism failure in the Code 27 Companion Hub allows an attacker with physical access to completely bypass kiosk restrictions via a factory reset
CVE-2026-36028
A protection mechanism failure in the Code 27 Companion Hub allows an attacker with physical access to completely bypass
MicroRealEstate allows adversaries to bypass authentication due to a lack of token state management. This would permit adversaries targeting MicroRealEstate deployments to brute...
CVE-2026-57867
MicroRealEstate allows adversaries to bypass authentication due to a lack of token state management. This would permit a
An authentication bypass vulnerability exists in the default SFTP server component utilized...
CVE-2026-5268
An authentication bypass vulnerability exists in the default SFTP server component utilized across the Ciena products li
An authentication bypass vulnerability exists in the default SFTP server component utilized across the Ciena products listed. This vulnerability allows a remote, unauthenticated...
CVE-2026-5268
An authentication bypass vulnerability exists in the default SFTP server component utilized across the Ciena products li
In multi-tenanted deployments, the application consent management mechanism fails to correctly...
CVE-2025-13475
In multi-tenanted deployments, the application consent management mechanism fails to correctly isolate consent scopes be
In multi-tenanted deployments, the application consent management mechanism fails to correctly isolate consent scopes between tenants. Consent granted by a user for a specific S...
CVE-2025-13475
In multi-tenanted deployments, the application consent management mechanism fails to correctly isolate consent scopes be
Steeltoe vulnerable to management-port isolation bypass via spoofed Host header
CVE-2026-50194
### Summary When Steeltoe management endpoints are configured to listen on an alternate port (`Management:Endpoints:Por
Improper neutralization of input terminators vulnerability in The Wikimedia Foundation Mediawiki ...
CVE-2026-58517
Improper neutralization of input terminators vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension
Improper neutralization of input terminators vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension allows Authentication Bypass. This issue affects Mediawi...
CVE-2026-58517
Improper neutralization of input terminators vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension
AS228T with Authentication Bypass Vulnerability
CVE-2026-12579
AS228T with Authentication Bypass Vulnerability