Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution.
Affected Spring Products and Versions:
Spring Tools for Eclipse: 5.2.0 and earlier
Spring Tools for VSCode / Cursor / Theia: 2.2.0 and earlier
CVE-2026-13306 is a vulnerability in the Autel MaxiCharger AC Elite Home EV charger that allows attackers with physical access to bypass authentication via the exposed USB interface. The flaw arises because the device does not require authentication before granting access to critical functions over USB. This vulnerability affects version 1.39.51 of the product. The CVSS score is 4.3 (medium severity), reflecting limited attack vector and impact. No public exploits or patches are currently known.
CVE-2026-5057 is a high-severity vulnerability in ATEN Unizon version 2.6.253.001 where the RpcProvider class lacks authentication for critical functions. This allows remote attackers to cause a denial-of-service (DoS) condition without needing to authenticate. The flaw arises because the system does not verify the identity of users before granting access to sensitive functionality, enabling exploitation that disrupts service availability.
Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.7, the standalone flyto-verification service in src/core/verification_service.py exposes unauthenticated POST /run on 0.0.0.0:8344 and uses client-supplied callback_url for an outbound POST with X-Internal-Key: $FLYTO_RUNNER_SECRET while bypassing target_allowed, allowing unauthenticated SSRF and runner secret exfiltration. This issue is fixed in version 2.26.7.
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 traditional is vulnerable to server-side request forgery (SSRF) when the SIP container feature (sipServlet-1.1) is enabled.
CVE-2026-62325 is a critical vulnerability in goshs, a single-binary file server, affecting versions from 2.1.3 up to but not including 2.1.4. The issue arises from improper authentication checks in the SFTP password handler, allowing unauthenticated file access when certain flags are used. This vulnerability is fixed in version 2.1.4.
IBM WebSphere Application Server versions 8.5 and 9.0 contain a critical vulnerability (CVE-2026-14446) involving missing authentication for a critical function in the administrative console. This flaw allows unauthorized users to bypass access controls, potentially leading to privilege escalation. The vulnerability has a CVSS score of 9.8, indicating a critical severity with high impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by remote code execution with the collectiveController-1.0 feature enabled.
In firmware versions 2.7.7 and earlier, the Arris BGW210‑700 gateway fails to enforce any server‑side authentication on its /cgi-bin/*.ha management endpoints, relying solely on client‑side CSS/JavaScript gating that can be bypassed by any HTTP client. This allows unauthenticated attackers on the LAN to read sensitive configuration data, modify persistent device settings, or trigger backend diagnostic operations. The issue appears systemic across the CGI handler chain.
Missing authentication for critical function vulnerability in Universal Software Inc. UKBS allows Accessing Functionality Not Properly Constrained by ACLs.
This issue affects UKBS: through 28072026.
NOTE: The vendor was contacted and it was learned that the product is not supported.
A lack of authentication in the mobile app (APK v5.5.0) for Ghost Robotics' Vision 60 robot allows an unauthenticated attacker connected to the device's internal Wi-Fi network to gain unrestricted access to the web administration interface and the HTTP API. Due to the lack of authorization mechanisms, the attacker can view real-time camera feeds, control the robot’s movements, manage sensors (GPS, RTK, SAM, LIDAR), and execute critical operational commands (Play, Pause, Stop, E-Stop). Successful exploitation completely compromises the confidentiality, integrity, and physical security of the system.
The Tycon Systems TPDIN-Monitor-WEB2
ships without HTTP credentials configured, intended for an installer to set them on first use. On firmware 2.4.4 and earlier, a unit left in this unconfigured state serves the web management interface without requiring any login. An attacker with network access to such a unit can reach full device controls, including power relay management, device reboot, remote access service configuration, and network settings, which could allow disruption of connected infrastructure or physical damage to equipment.
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
APIFold reads an OpenAPI 3.x or Swagger 2.x specification and generates a live, production-ready MCP server endpoint. Prior to commit 7f19b52280f414f57af2b79a95333d1c8fbeece5, the `/webhooks/:serverSlug/:eventName` endpoint accepts arbitrary unauthenticated JSON and stores it in Redis and the `webhook_events` PostgreSQL table without any signature check or authentication requirement. The root cause is that `createWebhookRouter` is called at `server.ts:188` without a `validators` map, so `receivers.ts:80`'s optional-chaining guard evaluates to `undefined` and the signature-validation block (`receiver.ts:81–95`) is unconditionally skipped. Any unauthenticated network client that knows a valid server slug can inject arbitrary payloads, which are subsequently served as trusted resource state to legitimate MCP clients. Commit 7f19b52280f414f57af2b79a95333d1c8fbeece5 patches the issue.
CVE-2026-64812 is a critical vulnerability in JetBrains IntelliJ IDEA that allows unauthorized input injection during a Remote Development session in versions before 2026.2. This vulnerability can lead to complete compromise of confidentiality, integrity, and availability of the affected system. No official patch or remediation guidance has been provided yet.
Nhost is an open source Firebase alternative with GraphQL. In versions of Nhost CLI prior to 1.46.0, the hidden `nhost configserver` used by `nhost dev` exposes the Mimir GraphQL API with dummy authorization directives and permissive CORS. When a developer is running the local development environment, any process that can reach the developer's localhost service, including a web page loaded from an arbitrary origin, can query the configserver for local Nhost configuration and secrets and can mutate the local `.secrets` file. This impacts developers using `nhost dev`: project admin secrets, JWT signing keys, webhook secrets, Grafana credentials, and custom environment variables can be read, and attacker-controlled secrets can be written to the local development project. Version 1.46.0 of Nhost CLI contains a fix.
PraisonAI versions prior to 4.6.40 have an improper access control vulnerability in the call server's agent control API. When the environment variable CALL_SERVER_TOKEN is not set, the authentication mechanism fails open, allowing unauthenticated remote clients to control agents. This includes listing, inspecting, invoking, and unregistering agents. The call server binds to all network interfaces (0.0.0.0), increasing exposure risk. Version 4.6.40 addresses this issue.
CVE-2026-47393 affects MervinPraison's PraisonAI multi-agent system. The vulnerability arises because the code-generator for a Flask API server disables authentication by default, exposing critical endpoints without access control. This allows unauthenticated users to interact with the API, potentially accessing sensitive data and controlling LLM orchestration. Versions prior to 4.6.40 ship with this insecure default. The issue is fixed in version 4.6.40 by enabling authentication via configuration.
CVE-2026-47391 is a critical remote code execution vulnerability in MervinPraison PraisonAI prior to version 4.6.40. The vulnerability arises from an unauthenticated JSON-RPC endpoint that exposes a tool using Python's eval(), allowing arbitrary code execution. This affects deployments using the official A2A example or similar unauthenticated configurations. The flaw also exposes task history and cancellation APIs, increasing confidentiality and integrity risks. Version 4.6.40 includes a patch for this issue.