共收录 318 条相关情报。
← 返回所有主题CVE-2026-117656
Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the Sign in with Apple strategy in pow-auth A
CVE-2026-63115
ActivityPub is a multi-tenant ActivityPub server for Ghost, built with Fedify. From 1.0.0 until 1.2.6, the `Undo` handle
CVE-2026-104623
A security vulnerability exists in the authorization handling for the local (management) cluster shell feature of SUSE R
CVE-2026-119703
xiaozhi-esp32-server through 0.9.8 contains an authentication bypass vulnerability in WebSocketServer._handle_auth that
CVE-2026-104615
A security vulnerability was discovered in SUSE Rancher Fleet's cluster registration flow, in Fleet versions before 0.12
CVE-2026-91914
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by Spoofing vulnerability. An una
CVE-2026-115962
Authentication Bypass by Spoofing vulnerability in myCred myCred mycred allows Identity Spoofing.This issue affects myCr
CVE-2026-118653
Echo is a Go web framework. From 4.0.0 until 5.1.0, Context.RealIP falls back to client-supplied X-Forwarded-For or X-Re
CVE-2026-86391
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions
CVE-2026-90717
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions
CVE-2026-90465
A missing authentication vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster i
CVE-2026-92546
Authentication bypass by spoofing vulnerability in Keepnet Labs Cybersecurity Inc. Agentic AI / Agentic Ally allows Auth
CVE-2026-82117
Authentication Bypass by Spoofing Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before
CVE-2026-76938
Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Man
CVE-2026-107147
The twofactor_gauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoofed client address h
CVE-2026-70381
An access-control vulnerability has been identified in the web server configuration. Some resources intended for on-devi
CVE-2026-115933
Postiz signs its session, invitation and password reset tokens with one shared secret and without any marker of what a t
CVE-2026-93629
An organizer authentication vulnerability in Zimbra Collaboration Suite (ZCS) allows an unauthenticated email sender to
CVE-2026-93628
An attendee authentication vulnerability in the email calendar processing of Zimbra Collaboration Suite (ZCS) allows an
CVE-2026-93627
An organizer authentication vulnerability in the email calendar processing of Zimbra Collaboration Suite (ZCS) allows an