Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate...
CVE-2026-69843
Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a netwo
#cwe-290
共收录 318 条相关情报。
← 返回所有主题Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to...
CVE-2026-77903
Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a ne
Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-69843
Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a netwo
Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-77903
Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a ne
Authentication Bypass by Spoofing vulnerability in team-alembic ash_authentication allows an attacker who can plant a remember-me cookie in a victim's browser to replace that vi...
CVE-2026-76949
Authentication Bypass by Spoofing vulnerability in team-alembic ash_authentication allows an attacker who can plant a re
Authentication Bypass by Spoofing vulnerability in team-alembic ash_authentication allows an attacker who operates one identity-provider connection of a dynamic_oidc strategy to...
CVE-2026-91039
Authentication Bypass by Spoofing vulnerability in team-alembic ash_authentication allows an attacker who operates one i
pgAdmin 4's Webserver authentication source is intended to accept an identity asserted by the web server or reverse proxy in front of pgAdmin, delivered through the WSGI/CGI env...
CVE-2026-86863
pgAdmin 4's Webserver authentication source is intended to accept an identity asserted by the web server or reverse prox
libp2p is a JavaScript implementation of the libp2p networking stack. From 8.0.0 until 12.0.24, @libp2p/peer-store in packages/peer-store/src/index.ts uses consumePeerRecord to ...
CVE-2026-86039
libp2p is a JavaScript implementation of the libp2p networking stack. From 8.0.0 until 12.0.24, @libp2p/peer-store in pa
Unauthenticated Broken Authentication in Headless Single Sign On <= 1.7.0 versions.
CVE-2026-62108
Unauthenticated Broken Authentication in Headless Single Sign On <= 1.7.0 versions.
A vulnerability in the SSID bring-your-own-device (BYOD) onboarding workflow of Cisco ISE could allow an unauthenticated, adjacent attacker to hijack the onboarding session of&n...
CVE-2026-20071
A vulnerability in the SSID bring-your-own-device (BYOD) onboarding workflow of Cisco ISE could allow an unauthenticated
A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to gain administrative access to an affected device. This vulne...
CVE-2026-76423
A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to gain a
Under certain conditions a valid SAML IdP response may be used to impersonate another Secret...
CVE-2026-15640
Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user.
Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user.
CVE-2026-15640
Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user.
BookStack before 26.05.5 contains an authentication bypass vulnerability in its social login implementation that allows unauthenticated attackers to sign in as arbitrary users b...
CVE-2026-89022
BookStack before 26.05.5 contains an authentication bypass vulnerability in its social login implementation that allows
webhookd is a minimalist webhook server that triggers shell scripts and external processes through HTTP requests. Prior to 1.22.0, webhookd deployments without htpasswd authenti...
CVE-2026-59157
webhookd is a minimalist webhook server that triggers shell scripts and external processes through HTTP requests. Prior
Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. Prior to 0.22.19, tokenMiddleware in sr...
CVE-2026-49446
Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as
proxy-addr is a Node.js module that determines a request's client address behind trusted reverse proxies, and it backs Express req.ip and req.ips. In versions 1.1.0 through 2.0....
CVE-2026-90711
proxy-addr is a Node.js module that determines a request's client address behind trusted reverse proxies, and it backs E
On affected platforms running Arista EOS with both 802.1X port authentication and the RADIUS proxy feature configured with dynamic authorization, a low-privileged attacker on an...
CVE-2026-73449
On affected platforms running Arista EOS with both 802.1X port authentication and the RADIUS proxy feature configured wi
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to gain access to sensitive information through session IP binding bypass in Navigator for i.
CVE-2026-18065
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to gain access to sensitive information throu
A routing rule selects between two different authentication mechanisms for the same downstream...
CVE-2026-90447
A routing rule selects between two different authentication mechanisms for the same downstream service based on the valu