CVE-2026-62863 affects the gojue moling MCP server prior to version 0.5.0. When running in SSE mode with the `-l` option, the server's `/sse` and `/message` HTTP endpoints do not authenticate requests, and the mcp-go dependency sets a permissive CORS policy allowing all origins. This allows a malicious web page to open a cross-origin EventSource to `/sse` and read sensitive sessionId information. An attacker can then use the stolen sessionId to send unauthorized MCP tool calls to `/message`, potentially reading or writing local files, executing commands, or performing other actions. The issue is fixed in version 0.5.0.
MyTube is a self-hosted downloader and player for several video websites. Prior to version 1.10.3, `server.ts` calls `registerStaticRoutes` and `registerCloudRoutes` before `registerApiRoutes`, where `authMiddleware` and `roleBasedAuthMiddleware` are mounted. Because Express processes middleware in registration order, `staticRoutes.ts` and `cloudRoutes.ts` remain outside the authentication stack even when `loginEnabled=true`. Unauthenticated clients can access local videos through `/videos/*`, thumbnails through `/images/*` and `/images-small/*`, avatars through `/avatars/*`, subtitles through `/subtitles/*`, cloud thumbnail caches through `/api/cloud/thumbnail-cache/*`, and cloud signed URLs or redirects through `/cloud/videos/:filename` and `/cloud/images/:filename`. The frontend login wall does not protect direct media requests. Cloud routes return 404 when cloud storage is unconfigured, but that is not an authentication rejection; protected API routes correctly return 401. Combined with hidden-video path leaks, the flaw permits unauthenticated downloads of hidden media. Default loginEnabled=false single-user deployments have no authentication boundary to bypass. This issue is fixed in version 1.10.3.
CVE-2026-62264 is a vulnerability in SylphxAI's pdf-reader-mcp affecting versions 2.2.0 through before 3.0.1. When the HTTP server is enabled via MCP_TRANSPORT=http, the server logs that API key authentication is enabled but does not actually validate the X-API-Key header. This allows unauthenticated clients to access the /mcp endpoint and use PDF reading tools with the permissions of the server process. The default bind address 0.0.0.0 exposes this to any reachable client. URL-based sources can also trigger limited server-side request forgery if private IP allowance is enabled. The issue is fixed in version 3.0.1.
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. In affected deployments, the unauthenticated `/scoutsuite-report` `StaticFiles` mount in `backend/copilot.py` exposes the `scoutsuite-report` directory even though normal /api routes require JWT authentication. Generated HTML reports and `scoutsuite-results/scoutsuite_results_<name>.js` files disclose AWS, Azure and GCP IAM principals, resource inventories, misconfigurations and findings. Report names derive from caller-selected names with predictable defaults. During an admin- or analyst-initiated GCP scan, `backend/app/integrations/scoutsuite/routes/scoutsuite.py` saves the uploaded Google service-account JSON key into that same web-served directory. In `backend/app/integrations/scoutsuite/services/scoutsuite.py`, `generate_gcp_report_background` removes the key only after the scan finishes. Any anonymous client that can reach the host and request the file path can therefore retrieve the private key during the scan and use the service account's cloud permissions, as well as read retained cloud-security reports. Credential isolation is released in version 0.1.77; a release fully remediating the report-disclosure component has not been established.
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, `verify_graylog_header` in `backend/app/active_response/routes/graylog.py` and `verify_velociraptor_header` in `backend/app/incidents/routes/incident_alert.py` authenticate webhooks against `GRAYLOG_API_HEADER_VALUE` and `VELOCIRAPTOR_API_HEADER_VALUE` with the same publicly hardcoded fallback. The same default is shipped in `.env.example`. Deployments that leave either setting unset or unchanged permit an anonymous caller with the known header value to bypass the JWT authentication required by normal APIs. `POST /api/graylog/invoke` forwards attacker-selected `COMMAND`, `ACTION`, `VALUE` and `AGENT_ID` to the configured Wazuh manager without the command-enum validation of the authenticated invocation route, allowing active-response scripts to disrupt endpoints and manipulate defensive controls. `POST /api/incidents/alerts/create/threshold` and `POST /api/incidents/alerts/create/velo-sigma` accept forged alerts for arbitrary `customer_code` values and drive attacker-controlled OpenSearch queries. Active-response delivery requires a configured reachable Wazuh manager. Deployments with independently changed header secrets are not subject to this default-secret bypass. This issue is fixed in version 0.1.76.
Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Server-side request forgery.
The web server does not check authentication on POST or PUT. An unauthenticated attacker can reboot the charger; by brute-forcing the configid, they can also set the service password and then change any setting.
A vulnerability identified as CVE-2026-88941 affects the Network Agent for Windows module of Kaspersky Security Center. It involves missing authentication for critical functionality, which could cause the Network Agent to malfunction. There is no evidence of exploitation in the wild. The vulnerability has a medium severity rating with a CVSS score of 6.2.
CVE-2026-113387 is a vulnerability in the Ortto plugin for WordPress versions prior to 1.0.25. The plugin failed to authenticate configuration update requests, relying solely on a secret exposed in public HTML. This flaw allows an unauthenticated attacker to overwrite the plugin's configuration and potentially serve arbitrary scripts. The issue is fixed in version 1.0.25.
AVideo-Encoder versions prior to 8.1.0 have missing authentication on critical endpoints, allowing unauthenticated attackers to control encoding processes, access streamer URLs, retrieve server memory statistics, and enumerate media files in readable directories. This vulnerability is fixed in version 8.1.0.
CVE-2026-61542 is a high-severity vulnerability in drhelius Gearboy emulator version prior to 3.8.7. The Gearsystem component's optional --mcp-http mode accepts unauthenticated MCP requests from any network peer, allowing remote peers to invoke emulator and debugging operations without authentication. The vulnerability arises because the MCP server binds to all interfaces and does not enforce authorization checks on POST requests to /mcp. The impact is limited to the emulator process, debugging state, and local files used as media, with no demonstrated host code execution. Gearboy 3.8.7 includes a patch that fixes this issue.
FearlessCMS versions prior to 0.1.4 contain multiple unauthenticated debug/test PHP scripts under the admin directory that allow privileged operations without authentication or CSRF protection. These scripts enable attackers to bypass admin login via crafted URIs, perform arbitrary file writes and reads including path traversal, execute stored cross-site scripting, enumerate directories, and cause disk exhaustion. The vulnerability allows site defacement, session theft, and potential full system compromise when PHP runs with elevated privileges. The issue is fixed in version 0.1.4.
CVE-2026-103409 is a critical vulnerability in Juniper Networks Session Smart Router that allows unauthenticated network attackers to gain administrative privileges by exploiting a missing authentication check on a critical function. This issue affects devices prior to onboarding to Mist/Conductor and is fixed in versions 7.0.5, 7.1.7, and 7.2.3.
CVE-2026-112197 is a critical vulnerability in the Tactis NoviGest Desktop App caused by missing authentication in its Java RMI service. This flaw allows attackers with network access to invoke remote methods without authentication, leading to unauthorized access to sensitive credentials and the ability to execute arbitrary SQL queries on the PostgreSQL database. The database account's elevated privileges enable attackers to chain these actions to execute operating system commands on the server, severely compromising confidentiality, integrity, and availability.
CVE-2026-102816 is an authorization vulnerability in the country or region configuration interface of the TP-Link RE305 v3 device. An unauthenticated attacker on the same local network can modify the wireless regulatory region settings, causing the device to reapply its wireless configuration. Exploitation can lead to wireless connection interruptions, unavailable channels, client disconnections, and instability of wireless service due to the application of incorrect regulatory parameters.
CVE-2026-90465 is an authentication bypass vulnerability in WatchGuard Fireware OS affecting the FireCluster Sync processing. An attacker on the cluster interconnect, such as a compromised cluster peer or an on-path attacker, can send specially crafted requests to perform privileged firewall management actions as root. This flaw affects multiple versions prior to fixed releases in 2026.4, 12.12.4, and 12.5.22. The vulnerability has a high severity CVSS score of 8.7.
A missing authentication vulnerability in Fireware OS's FireCluster state synchronization feature allows an unauthenticated attacker positioned on the cluster synchronization network segment to force premature VPN tunnel termination by sending crafted cluster synchronization traffic.
CVE-2026-93865 is a critical vulnerability in WatchGuard Fireware OS affecting the FireCluster synchronization daemon. It allows a remote unauthenticated attacker to perform privileged system-level administrative actions by sending crafted requests to the FireCluster management IP when clustering is enabled. The flaw is due to missing authentication for critical functionality. Fixed versions are available.
A missing authentication vulnerability in the 3D Viewer app for Nextcloud versions 1.7.9 through 3.3.1 allowed unauthorized access to password-protected shared 3D model files. The app's public file endpoint did not enforce share password checks, enabling anyone with a share token to retrieve the file contents without authentication. This issue affects only 3D file formats supported by the app and was fixed in version 3.3.2.