共收录 1259 条相关情报。
← 返回所有主题CVE-2026-61427
## Summary PraisonAI's MCP HTTP-stream server authenticates requests only when an API key is configured; the CLI defaul
CVE-2026-60091
## Summary PraisonAI's Async Jobs API enables its API-key middleware **only when `PRAISONAI_JOBS_API_KEY` is set**, so
CVE-2026-11318
Deskin through 3.3.4.3 contains a privilege escalation vulnerability in the com.deskin.service.installer XPC service tha
CVE-2026-84272
IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component.
CVE-2026-104076
TVU Networks Receiver/Transceiver devices running firmware before version 7.9 contain a missing authentication vulnerabi
CVE-2026-87664
A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.
CVE-2026-87659
A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions bef
CVE-2026-105192
LMCache multiprocess mode, also called distributed mode, opens an unauthenticated ZeroMQ ROUTER so worker processes can
CVE-2026-102159
An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality inten
CVE-2026-70411
Dell Container Storage Modules (CSM), versions prior to 1.18.0, contains a Missing Authentication for Critical Function
CVE-2026-63690
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vuln
CVE-2026-63692
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vuln
CVE-2026-63688
Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function
CVE-2026-106038
Mooncake Store master through 0.3.13.post1 contains a missing authentication vulnerability that allows unauthenticated a
CVE-2026-106037
Mooncake through 0.3.13.post1 contains a missing authentication vulnerability in the Store REST service, which binds to
CVE-2026-94293
An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read a
CVE-2026-105486
A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/pro
CVE-2026-105786
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.1
CVE-2026-104181
App-based multi-factor authentication management actions did not consistently require the user to confirm their current
CVE-2026-71299
A flaw was found in Maestro. Its REST API write endpoints were registered without proper authentication middleware. This