共收录 1261 条相关情报。
← 返回所有主题CVE-2026-82452
rust-iot-platform through commit 5df942ab contains an authentication bypass vulnerability where most REST API routes lac
CVE-2026-55678
Arc is an open, SQL-native time-series database for telemetry. From 26.02.1 until 26.06.2, Arc Enterprise clustering acc
CVE-2026-82282
Atlantis through 0.47.1 fails to authenticate the /github-app/setup endpoint, allowing unauthenticated attackers to acce
CVE-2026-82276
StarRocks through 4.0.13 contains an authentication bypass vulnerability in five REST handler classes that override exec
CVE-2026-55678
## Summary Arc Enterprise clustering accepts cluster join requests without authentication when `cluster.enabled=true` b
CVE-2026-82282
Atlantis through 0.47.1 fails to authenticate the /github-app/setup endpoint, allowing unauthenticated attackers to acce
CVE-2026-82277
Argo Rollouts dashboard through 1.10.0 binds to all interfaces and exposes mutating Rollout operations without authentic
CVE-2026-82276
StarRocks through 4.0.13 contains an authentication bypass vulnerability in five REST handler classes that override exec
CVE-2026-82266
Redpanda through 26.2.2 binds the Admin API to 0.0.0.0:9644 with admin_api_require_auth defaulting to false, treating un
CVE-2026-82265
Zipkin through 3.6.1 exposes Spring Boot Actuator endpoints on the tracing API port without authentication, allowing una
CVE-2026-78239
Xiiaozet LK100W exposes a critical management function that can be invoked without authentication, allowing a remote at
CVE-2026-77977
Ebyte gateway product's vendor configuration utility does not require authentication before allowing certain disruptive
CVE-2026-73125
Ebyte device web management interface does not consistently enforce authentication before granting access to administra
CVE-2026-68929
FastGPT is an open-source LLM platform for building AI applications on a knowledge base. In versions prior to 4.15.2, th
CVE-2026-68929
FastGPT is an open-source LLM platform for building AI applications on a knowledge base. In versions prior to 4.15.2, th
CVE-2026-76640
Unitree G1 EDU firmware through 1.5.2 contains multiple chained vulnerabilities in the BLE GATT server and WiFi provisio
CVE-2026-76639
Unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code execution vulnerability that allows networ
CVE-2026-81735
startServer.ts in the mcp-http-server package of UI-TARS-desktop defaulted its listen address to '::' when no host was g
CVE-2026-81664
The OpenFaaS gateway registers GET /system/telemetry in gateway/main.go and, when basic_auth is enabled, wraps each admi
CVE-2026-81098
The Telnyx MCP server exposed its HTTP transport on every interface and did not require a caller credential. packages/mc