Lara Dashboard before 1.3.0 Missing Authentication in screenshot-login Route
CVE-2026-86184
Lara Dashboard before 1.3.0 contains an authentication bypass vulnerability in the screenshot-login route that allows un
#cwe-306
共收录 1261 条相关情报。
← 返回所有主题AutoAgent contains an unauthenticated remote code execution vulnerability in the TCP server that binds to all interfaces and executes attacker-supplied commands as root. Attacke...
CVE-2026-86124
AutoAgent contains an unauthenticated remote code execution vulnerability in the TCP server that binds to all interfaces
Cua computer-server versions before 0.3.42 skip authentication when the CONTAINER_NAME environment variable is unset and bind to all interfaces by default, allowing unauthentica...
CVE-2026-86121
Cua computer-server versions before 0.3.42 skip authentication when the CONTAINER_NAME environment variable is unset and
Cua computer-server before 0.3.42 Unauthenticated RCE via Desktop Control
CVE-2026-86121
Cua computer-server versions before 0.3.42 skip authentication when the CONTAINER_NAME environment variable is unset and
TypeSpec: Unauthenticated Remote Shutdown of Spector Mock Server via POST /.admin/stop
### Summary `@typespec/spector` registers a `POST /.admin/stop` HTTP route with no authentication, authorization token,
OpenChoreo: cluster-gateway internal proxy performs no caller authentication and is not read-only — data-plane Secret disclosure and arbitrary Kubernetes mutation
CVE-2026-73842
### Summary The OpenChoreo control-plane cluster-gateway exposes internal management APIs (`/api/proxy/`, `/api/exec/`,
A security vulnerability has been detected in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. Affected is the function _conversation of the file serve...
CVE-2026-85702
A security vulnerability has been detected in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc.
A vulnerability has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue affects the function ChatCompletion.create of the file g4...
CVE-2026-85701
A vulnerability has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue
A security flaw has been discovered in jofpin trape 1.0.0/2.0. Affected by this issue is the function join_room of the file core/sockets.py of the component Admin Endpoint. The ...
CVE-2026-85637
A security flaw has been discovered in jofpin trape 1.0.0/2.0. Affected by this issue is the function join_room of the f
Nango before 0.71.6 contains a missing authentication vulnerability in the runner tRPC server...
CVE-2026-9317
Nango before 0.71.6 contains a missing authentication vulnerability in the runner tRPC server that allows unauthenticate
Nango before 0.71.6 contains a missing authentication vulnerability in the runner tRPC server that allows unauthenticated attackers to execute arbitrary JavaScript code by invok...
CVE-2026-9317
Nango before 0.71.6 contains a missing authentication vulnerability in the runner tRPC server that allows unauthenticate
A vulnerability was identified in jofpin trape 1.0.0. Affected by this vulnerability is an unknown functionality of the file core/stats.py of the component Login Endpoint. The m...
CVE-2026-85636
A vulnerability was identified in jofpin trape 1.0.0. Affected by this vulnerability is an unknown functionality of the
Nango < 0.71.6 Missing Authentication RCE via runner tRPC server
CVE-2026-9317
Nango before 0.71.6 contains a missing authentication vulnerability in the runner tRPC server that allows unauthenticate
PowerJob Worker version 5.1.2 (and likely earlier versions) exposes the /worker/deployContainer HTTP endpoint without authentication on the default transport port. This allows a...
CVE-2026-75430
PowerJob Worker version 5.1.2 (and likely earlier versions) exposes the /worker/deployContainer HTTP endpoint without au
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and affect data integrity due to missing authentication for critical functions.
CVE-2026-17057
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and affect data integrity due to
FastChat contains an authentication bypass vulnerability in the /register_worker endpoint that allows unauthenticated attackers to register arbitrary worker addresses and perfor...
CVE-2026-85695
FastChat contains an authentication bypass vulnerability in the /register_worker endpoint that allows unauthenticated at
TEN Framework 0.11.71 contains unauthenticated arbitrary file read and write vulnerabilities in the TMAN Designer file-content API endpoints. Attackers can submit POST and PUT r...
CVE-2026-85688
TEN Framework 0.11.71 contains unauthenticated arbitrary file read and write vulnerabilities in the TMAN Designer file-c
QAnything 2.0.0 contains an authentication bypass vulnerability in the /api/local_doc_qa/get_file_base64 and /api/local_doc_qa/get_doc endpoints that allows unauthenticated atta...
CVE-2026-85671
QAnything 2.0.0 contains an authentication bypass vulnerability in the /api/local_doc_qa/get_file_base64 and /api/local_
xiaobei through 5.5.2 fails to implement authentication or signature validation on webhook endpoints, allowing unauthenticated attackers to inject arbitrary messages into the ag...
CVE-2026-85667
xiaobei through 5.5.2 fails to implement authentication or signature validation on webhook endpoints, allowing unauthent
Aim 3.29.1 remote tracking server fails to authenticate requests and dispatches arbitrary methods through getattr without allowlist validation. Unauthenticated attackers can reg...
CVE-2026-85663
Aim 3.29.1 remote tracking server fails to authenticate requests and dispatches arbitrary methods through getattr withou