Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.8The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::CredentialServlet.EPSS 0.4%Oct 13, 2026
- High8.8ZITADEL 3.0.0 before 4.18.0 Unauthenticated Username Change via Login V1Oct 12, 2026
- Medium5.3SurrealDB 3.0.0 before 3.3.0 Missing Authentication in revoke RPC MethodOct 12, 2026
- Medium5.5A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6.EPSS 0.5%Oct 12, 2026
- High8.7OpenAgents Workspace backend through launcher-v1.0.17 contains an information disclosure vulnerability that allows unauthenticated attackers to list all workspaces via…EPSS 0.3%Oct 11, 2026
- Critical9.3Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a missing authentication vulnerability in bundled xxl-job-admin JobInfoController endpo…EPSS 0.5%Oct 8, 2026
- High8.7An authentication flaw exists in the Brocade ASCG administrative management service component.EPSS 0.2%Oct 8, 2026
- High8.6A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0.EPSS 0.2%Oct 8, 2026
- High8.7A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0.EPSS 0.2%Oct 8, 2026
- High8.5A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1.EPSS 0.1%Oct 8, 2026
- Critical9.8In Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthenticated user with network access to the Patroni Representational State Transfer (REST) Application Pr…EPSS 0.4%Oct 7, 2026
- Critical9.8A flaw was found in FreeIPA.EPSS 1.0%Sep 7, 2026
- High8.8MikroTik RouterOS Missing Authentication for Critical Function VulnerabilityKEVEPSS 1.6%Sep 5, 2026
- Critical9.3MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP server that allows unauthenticated clients to write variables.EPSS 0.8%Sep 3, 2026
- Critical9.3MOOS core-moos through 10.4.0 lacks authentication in the wire protocol, allowing unauthenticated clients to connect with full publish, subscribe, and database clear privileges.EPSS 0.8%Sep 3, 2026
- Critical10.0Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network.EPSS 0.9%Sep 3, 2026
- High8.8PaperCut NG/MF Missing Authentication for Critical Function VulnerabilityKEVEPSS 85.6%Aug 28, 2026
- Critical9.3rConfig Core 8.0.0 before 8.2.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register accounts with full Administrato…EPSS 0.8%Aug 24, 2026
- High8.8RansomLook contains a missing authentication vulnerability in the /admin/crypto/group/new endpoint.EPSS 0.7%Aug 24, 2026
- High7.1Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the adm…EPSS 0.2%Aug 24, 2026
- High8.5DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within Bluetooth range to modify Wi-Fi configuration parameters, inc…EPSS 0.2%Aug 24, 2026
- High8.7The HTTP media server running on DJI drones serves stored photos and videos through the endpoint without authenticating the requesting client.EPSS 0.4%Aug 24, 2026
- High7.5Combodo iTop is a web based IT service management tool.EPSS 0.5%Aug 21, 2026
- Critical9.3TrueConf Server Missing Authentication for Critical Function VulnerabilityKEVEPSS 1.5%Aug 19, 2026
- Critical9.8Microsoft SharePoint Server Missing Authentication for Critical Function VulnerabilityKEVEPSS 1.0%Jul 14, 2026