Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.17, when the trusted_proxies option is configured, heimdall extracts c...

CVE-2026-57210

Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.17, when the

来源摘录 · NVD

The rsyncd service of the CGM CLININET is vulnerable to Authentication Bypass via IP spoofing. Access is granted based solely on the client's source IP address. An attacker able...

CVE-2025-30052

The rsyncd service of the CGM CLININET is vulnerable to Authentication Bypass via IP spoofing. Access is granted based s

来源摘录 · NVD

Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user. The flaw stems from trusting client-sup...

CVE-2022-51026

Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to lo

来源摘录 · NVD

Traefik from v3.7.0 before v3.7.14 contains an authentication bypass vulnerability in its Kubernetes Ingress-NGINX provider that forwards client-supplied Ssl-Client-* headers on...

CVE-2026-114640

Traefik from v3.7.0 before v3.7.14 contains an authentication bypass vulnerability in its Kubernetes Ingress-NGINX provi

历史摘要 · 未重新核验 · NVD

Traefik v3.7.0 before v3.7.14 mTLS Header Spoofing via Ingress-NGINX HTTP Router

CVE-2026-114640

Traefik from v3.7.0 before v3.7.14 contains an authentication bypass vulnerability in its Kubernetes Ingress-NGINX provi

历史摘要 · 未重新核验 · OSV.dev

SuggestArr before 3.0.0 contains an authentication bypass vulnerability in its local_bypass authentication mode where enforce_authentication() in api_service/auth/middleware.py ...

CVE-2026-113703

SuggestArr before 3.0.0 contains an authentication bypass vulnerability in its local_bypass authentication mode where en

历史摘要 · 未重新核验 · NVD

Microsoft Security Advisory CVE-2026-70179 - ASP.NET Core Elevation of Privilege Vulnerability

CVE-2026-70179

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Micr

历史摘要 · 未重新核验 · GitHub Advisory

Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally.

CVE-2026-83845

Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locall

来源摘录 · NVD

No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-105008

No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.

历史摘要 · 未重新核验 · NVD

Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2....

CVE-2026-104935

Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arb

历史摘要 · 未重新核验 · NVD

Frappe framework before 13.32.0 uses weak authentication for print view access, because the print view key can be derived from data exposed by other whitelisted API endpoints. A...

CVE-2023-54411

Frappe framework before 13.32.0 uses weak authentication for print view access, because the print view key can be derive

历史摘要 · 未重新核验 · NVD

The HTTP Basic Authentication modules in ((OTRS)) Community Edition 6 and prior accept the authenticated username from either the REMOTE_USER or HTTP_REMOTE_USER environment var...

CVE-2026-93582

The HTTP Basic Authentication modules in ((OTRS)) Community Edition 6 and prior accept the authenticated username from e

历史摘要 · 未重新核验 · NVD

Vikunja is an open-source self-hosted task management platform. In versions 1.0.0 through 2.3.0, when an administrator enables the per-provider `emailfallback` option on an Open...

CVE-2026-62367

Vikunja is an open-source self-hosted task management platform. In versions 1.0.0 through 2.3.0, when an administrator e

历史摘要 · 未重新核验 · NVD

Vikunja: OIDC email-fallback account linking ignores email_verified, enabling local-account takeover

CVE-2026-62367

## Summary With the per-provider OIDC `emailfallback` option enabled, Vikunja links an SSO login to a pre-existing **lo

历史摘要 · 未重新核验 · GitHub Advisory

pyLoad: Rate-Limit Bypass and Audit-Log Spoofing via Trusted Client-Controlled `X-Forwarded-For` Header

## Summary pyLoad determines the "client IP" used for its rate-limiting decorator and for its security/audit logging by

历史摘要 · 未重新核验 · GitHub Advisory

Authentication Bypass by Spoofing vulnerability in WPMU DEV Forminator forminator allows Identity Spoofing.This issue affects Forminator: from n/a through 1.57.2.

CVE-2026-96336

Authentication Bypass by Spoofing vulnerability in WPMU DEV Forminator forminator allows Identity Spoofing.This issue af

历史摘要 · 未重新核验 · NVD

Authentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identity Spoofing.This issue affects GiveWP: from n/a through 4.16.8.1.

CVE-2026-96333

Authentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identity Spoofing.This issu

历史摘要 · 未重新核验 · NVD

An authentication bypass and command injection vulnerability exists in the inter-switch remote...

CVE-2026-87663

An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Broc

历史摘要 · 未重新核验 · GitHub Advisory

An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST...

CVE-2026-87670

An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway. The intern

历史摘要 · 未重新核验 · GitHub Advisory

An authentication and access control bypass vulnerability exists in the web server management...

CVE-2026-87686

An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabri

历史摘要 · 未重新核验 · GitHub Advisory