共收录 42 条相关情报。
← 返回所有主题CVE-2026-1621
Authentication bypass by primary weakness vulnerability in Universal Software Inc. E-Municipality allows Exploitation of
CVE-2026-65935
Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key v
CVE-2026-19292
Re-pairing with a legitimate device can use a lower security level than previous making brute-forcing the LTK easier. Se
CVE-2026-62427
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi
CVE-2026-9597
Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4 fail to verify whether a guest account is deactivated before crea
CVE-2026-9571
Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to invalidate OAuth refresh tokens upon
CVE-2026-35159
Dell Client Platform BIOS contains an Authentication Bypass by Primary Weakness vulnerability. An unauthenticated attack
CVE-2026-41052
### Impact A vulnerability has been identified in Rancher Manager that allows users assigned the Project Owner role to
CVE-2026-10539
A Control-M/Server communication command does not sufficiently filter or sanitize user-supplied input. Under certain con
CVE-2026-41052
Improper privilege handling could be used by users with Project Owner role to escalate privileges, in Rancher versions 2
CVE-2025-4994
The SafeLine SL6 and SL6+ devices integrated into elevator emergency intercom systems are vulnerable to an authenticatio
CVE-2025-7064
Authentication bypass by primary weakness vulnerability in ABB Freelance. This issue affects Freelance: through 2013, 2
CVE-2026-25555
OpenBullet2 through version 0.3.2 contains an authentication bypass vulnerability in the API key authentication middlewa
CVE-2026-41054
In `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\0/sys/ent
CVE-2026-6334
Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to enforce client identity binding during the OAuth autho
CVE-2026-6334
Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to enforce client identity binding during the OAuth autho
CVE-2026-2652
A vulnerability in mlflow/mlflow versions 3.9.0 and earlier allows unauthenticated access to certain FastAPI routes when
CVE-2026-2652
A vulnerability in mlflow/mlflow versions 3.9.0 and earlier allows unauthenticated access to certain FastAPI routes when
CVE-2026-6266
A flaw was found in the AAP gateway. The user auto-link strategy, introduced in AAP 2.6, automatically links an external
CVE-2026-4670
Authentication bypass by primary weakness vulnerability in Progress Software MOVEit Automation allows Authentication Byp