Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.3WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend.Feb 27, 2026
- Critical9.3WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend.Feb 27, 2026
- Critical9.3WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend.Feb 27, 2026
- Critical9.3WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend.Feb 27, 2026
- Critical9.3WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend.EPSS 0.5%Feb 27, 2026
- High7.5Umbraco Engage is a business intelligence platform.Feb 26, 2026
- Critical9.3OpenViking through version 0.1.18, prior to commit 0251c70, contains a broken access control vulnerability that allows unauthenticated attackers to gain ROOT privilege…EPSS 0.4%Feb 26, 2026
- High8.5Unitree Go2 firmware versions V1.1.7 through V1.1.9, and V1.1.11 (EDU) do not implement DDS authentication or authorization for the Eclipse CycloneDDS topic rt/api/pro…Feb 26, 2026
- Low1.1A flaw has been found in Chia Blockchain 2.1.0.Feb 25, 2026
- Low2.9A security vulnerability has been detected in Chia Blockchain 2.1.0.Feb 25, 2026
- Medium6.2Due to missing authentication, a user with physical access to the device can misuse the mesh functionality for adding a new mesh device to the network to gain access t…Feb 25, 2026
- Critical9.8Missing Authentication for Critical Function vulnerability in ePati Cyber Security Technologies Inc.Feb 25, 2026
- Critical9.9Parse Dashboard is a standalone dashboard for managing Parse Server apps.Feb 25, 2026
- High8.7Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior expose RTSP streams without requiring authentication.Feb 24, 2026
- Critical9.2Actual is a local-first personal finance tool.Feb 24, 2026
- Critical9.3Slican NCP/IPL/IPM/IPU devices are vulnerable to PHP Function Injection.EPSS 0.4%Feb 24, 2026
- Medium5.5A vulnerability was determined in DataLinkDC dinky up to 1.2.5.Feb 24, 2026
- Critical9.3ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor (elementskit-lite) WordPress plugin versions prior to 3.7.9 expose the REST endpoint /…Feb 23, 2026
- Critical9.3ERP is a free and open source Enterprise Resource Planning tool.Feb 21, 2026
- High7.5The Wi-Fi router is vulnerable to de-authentication attacks due to the absence of management frame protection, allowing forged deauthentication and disassociation fram…Feb 20, 2026
- High8.2The underlying PLC of the device can be remotely influenced, without proper safeguards or authentication.Feb 20, 2026
- Critical9.8Sensitive data disclosure and manipulation due to missing authentication.EPSS 0.7%Feb 20, 2026
- High7.5Ivanti Endpoint Manager (EPM) Authentication Bypass VulnerabilityKEVEPSS 88.3%Feb 10, 2026
- Critical9.3SmarterTools SmarterMail Missing Authentication for Critical Function VulnerabilityKEVEPSS 88.2%Jan 23, 2026
- Critical9.3A malicious actor can access camera configuration information, including account credentials, without authenticating when accessing a vulnerable URL.EPSS 0.8%Dec 10, 2025