MySQL MCP Server is a Model Context Protocol server that enables secure interaction with MySQL databases. Prior to 0.4.2, setting MCP_TRANSPORT=sse causes src/mysql_mcp_server/server.py to construct SseServerTransport without security_settings or enable_dns_rebinding_protection, while the Starlette routes /, /sse, and /messages/ have no authentication and the service binds to 0.0.0.0 by default. A network attacker can directly reach execute_sql, or can use DNS rebinding to make a victim's browser relay same-origin requests to a locally bound service, and supply a query that reaches cursor.execute(query). This allows unauthenticated disclosure and modification of the configured database; when the MySQL account has FILE privileges, the same access can read or write server files and may enable code execution. The default stdio transport is not affected. This issue is fixed in 0.4.2.
When a particular authentication mode is configured, the reverse proxy forwards requests for a bundled third-party administrative interface directly to that interface without applying the gateway's own authentication requirement first. All access control for this administrative interface, which manages the credential store used to gate every other service in the deployment, is delegated entirely to that third-party interface's own login mechanism. Any authentication weakness in that bundled interface would compromise the credential store protecting the rest of the deployment.
Mousehole is a background service to update a seedbox IP for MAM and web app to manage it. Prior to version 0.4.05, Mousehole's HTTP/WebSocket management boundary is reachable without application-layer authentication or browser/LAN provenance checks. The service stores a MyAnonamouse (MAM) session cookie in state and reuses the same cookie-bearing serialization for persisted state, public API responses, and WebSocket state updates. Any client that can reach the published Mousehole port can read cookie-bearing state, connect to WebSocket state updates, replace the stored cookie, or force MAM update side effects. The deployment examples publish port 5010 broadly with Docker's `5010:5010` syntax, which can make the issue reachable on mixed-trust LAN/VPN interfaces. Version 0.4.0 patches the issue.
A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions.
WeenyGenius, a computer lab management system developed by Howyar Technologies, has a Missing Authentication vulnerability. Unauthenticated attackers on the same network can easily spoof student or teacher endpoints. Impersonating a student can disrupt normal classroom operations, whereas impersonating a teacher can induce student computers to initiate connections, thereby gaining remote control over the student endpoints.
CVE-2026-88062 is a critical code injection vulnerability in diegosouzapw OmniRoute versions prior to 3.8.49. The vulnerability exists in the POST /api/acp/agents endpoint, which accepts attacker-controlled inputs that can lead to arbitrary code execution in the server container. Authentication controls can be bypassed when requireLogin is false or during initial bootstrap, allowing remote anonymous exploitation. No fixed version is currently available.
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted HTTP request to an administrative endpoint. A remote attacker could exploit this vulnerability to cause the server to exhaust filesystem space.
GeoVision GV-LPC2211 V1.13 exposes a network-accessible PTZ control service without authentication, allowing remote clients to retrieve PTZ information and issue PTZ or raw serial commands.
CVE-2026-49362 is a vulnerability in Apache Artemis and Apache ActiveMQ Artemis that allows an unauthenticated remote attacker to create arbitrary durable queues via the CORE protocol. This leads to unauthorized manipulation of the broker state and potential denial of service. The issue affects Apache Artemis versions from 2.50.0 through 2.56.0 and Apache ActiveMQ Artemis versions from 1.0.0 through 2.44.0. The vulnerability is fixed in version 2.57.0.
CVE-2026-49363 is a vulnerability in Apache Artemis and Apache ActiveMQ Artemis where an unauthenticated remote attacker can obtain cluster node details by sending a SUBSCRIBE_TOPOLOGY request using the CORE protocol before authentication. This affects Apache Artemis versions from 2.50.0 through 2.56.0 and Apache ActiveMQ Artemis versions from 1.0.0 through 2.44.0. The issue is fixed in version 2.57.0.
An unauthenticated network-adjacent attacker can leverage discovery to capture cluster administrative credentials during the initial cluster connection handshake.
This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.0.0 through 2.44.0.
Users are recommended to upgrade to version 2.57.0, which fixes the issue.
CVE-2026-57967 is a critical vulnerability in Apache Artemis and Apache ActiveMQ Artemis that allows an unauthenticated remote attacker to hijack an existing session by crafting a CORE protocol SESSION_REATTACH packet. This flaw affects Apache Artemis versions 2.50.0 through 2.56.0 and Apache ActiveMQ Artemis versions 1.0.0 through 2.44.0. The issue is fixed in version 2.57.0.
CVE-2026-67593 is a critical vulnerability in Apache Artemis and Apache ActiveMQ Artemis that allows a remote attacker to delete a queue on the Artemis broker by sending a crafted Openwire RemoveSubscriptionInfo command. This can occur before or after the connection authentication and authorization stages. The issue affects Apache Artemis versions from 2.50.0 through 2.56.0 and Apache ActiveMQ Artemis versions from 1.0.0 through 2.44.0. The vulnerability is fixed in version 2.57.0.
After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel.
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
CVE-2026-11838 is a vulnerability in the Library Reservation System by Yordam Informatics Technology Consulting that involves missing authentication for a critical function, allowing input data manipulation. It affects versions before 22.2. The vulnerability has a medium severity with a CVSS score of 4.3. A fix is available in version 22.2.
Eclipse aeriOS's Identity Manager deployment in its current development version had insecure default configurations and credentials, exposing Keycloak and PostgreSQL services via Kubernetes NodePort and Docker Compose. Default fixed credentials allowed administrative access, risking unauthorized access or modification of identity data. The issue is addressed by randomizing passwords, using Kubernetes Secrets, restricting service exposure, and warning against using predefined development users in production.
CVE-2026-73004 is a vulnerability in Microsoft Windows 10 Version 21H2 involving missing authentication for a critical function in Windows Autopilot. This flaw allows an authorized local attacker to perform tampering. The issue affects multiple builds of Windows 10 21H2 and related versions prior to specific fixed builds. Microsoft has released official fixes for this vulnerability.
CVE-2026-72964 is a medium severity vulnerability in Microsoft Windows 10 Version 1607 related to missing authentication for a critical function in Windows Internet Connection Sharing (ICS). This flaw allows an authorized local attacker to perform tampering without proper authentication. The vulnerability affects multiple Windows 10 builds prior to their respective fixed versions. An official fix is available from Microsoft.