CWE-306: Missing Authentication vulnerabilities

Two state-mutating endpoints in pgAdmin 4's SQL Editor blueprint -- DELETE /sqleditor/close/<trans_id> and POST /sqleditor/initialize/sqleditor/update_connection/<sgid>/<sid>/<did> -- were the only routes in the module missing the @pga_login_required decorator. Both reach a pickle.loads sink on session['gridData'][<trans_id>]['command_obj']: the close endpoint via close_sqleditor_session(), and update_sqleditor_connection via check_transaction_status(). In server mode these endpoints were reachable without any authenticated pgAdmin session. The defect is a missing-authentication-on-critical-function (CWE-306) wrapper around a deserialization-of-untrusted-data sink (CWE-502). Exploiting it for remote code execution requires the attacker to also forge a server-side session file whose gridData entry contains a malicious pickle payload, which in turn requires both (a) knowledge of pgAdmin's Flask SECRET_KEY (no chain to leak it is described here -- the attacker must already possess it) and (b) write access to pgAdmin's sessions/ directory on the host. Neither precondition is granted by this defect on its own. When those preconditions are met from another channel (misconfigured deployment, prior compromise, leaked configuration), the missing auth gate is the final hop that turns an existing partial compromise into unauthenticated code execution in the pgAdmin process -- and, by extension, on the host under whatever account runs pgAdmin. Fix is a one-line @pga_login_required decorator on each of the two endpoints, matching the convention used by every other route in the module. The is_authenticated / MFA chain now runs before the trans_id is dereferenced, so an unauthenticated request is rejected before reaching the deserialization path. The defect is server-mode only. In DESKTOP mode pgAdmin's before_request hook re-authenticates DESKTOP_USER on every request, so no endpoint can be exercised in an unauthenticated state and no auth decorator (or its absence) is meaningful. The accompanying regression test mirrors the attacker's path -- harvests an X-pgA-CSRFToken from GET /login and replays it against both endpoints -- and self-skips outside server mode for that reason; it is wired into the existing server-mode CI workflow alongside the data-isolation tests. This issue affects pgAdmin 4: from 6.9 before 9.16.

Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose information over a network.

mcp-pinot is a Python-based Model Context Protocol (MCP) server for interacting with Apache Pinot. In versions 3.0.1 and below, mcp-pinot defaults to running an HTTP MCP server bound to 0.0.0.0:8080 with no authentication enabled. All MCP tools, including SQL query execution, schema creation, and table-config mutation, are reachable by any network-adjacent caller. The server proxies these calls using server-side Pinot credentials, producing a confused-deputy condition that yields full read/write access to the configured Pinot cluster. This issue has been fixed in version 3.1.0

The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and Civilian Board of Contract Appeals (CBCA) Electronic Docketing System (EDS) does not authenticate password change requests to the '/update-profile/N' API endpoint. A remote, unauthenticated attacker could change an arbitrary user's password.

A broken authorization boundary in the RTSP media delivery pipeline of Shenzhen Liandian Communication Technology LTD V380 IP Camera firmware AppFHE1_V1.0.6.020230803 enables unauthenticated network actors to bypass the device’s credential-enforced live-view workflow and directly retrieve real-time video stream data.

Windows-MCP versions prior to 0.7.5 have a vulnerability where certain HTTP modes expose the MCP control plane without authentication and enable wildcard CORS. This allows attackers to access the control plane from arbitrary origins or non-browser clients and execute arbitrary PowerShell commands as the Windows user running Windows-MCP. The issue is fixed in version 0.7.5.

Jovancoding Network-AI versions 5.7.1 and earlier contain a critical vulnerability where the MCP SSE server defaults to an empty secret, allowing unauthenticated invocation of all 22 MCP tools. This flaw permits any non-browser client to execute critical functions without credentials. The issue was partially mitigated in version 5.4.5 by restricting CORS to localhost, but the empty secret and authorization bypass remained until fixed in version 5.7.2.

Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Identity Spoofing. This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.6, from 6.1.0 before 6.1.*, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.*.

Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Fake the Source of Data. This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.3, from 6.1.0 before 6.1.*, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.*.

Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Code execution, Denial of service, Information disclosure, Information tampering, Remote execution, Script injection, and Unauthorized access.

A vulnerability in nltk's WordNet Browser HTTP server (up to version 3.9.3) allows unauthenticated remote shutdown via a specific GET request, causing denial of service. The server listens on all interfaces and lacks authentication for this critical function. This issue impacts service availability by terminating the server process immediately.

CVE-2026-0647 is a high-severity vulnerability in Rockwell Automation FLEX I/O EtherNet/IP Adapters, specifically the 1794-AENTR model. It involves missing authentication on the device's embedded web server, allowing an unauthenticated attacker to change the web interface password via a crafted HTTP GET request. Exploitation could lead to unauthorized access, account takeover, and disruption of the device's web server availability. The affected version is 2.012. No official patch or remediation guidance has been provided yet.

Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentication vulnerability (CWE-287) in the system configuration module.

CVE-2026-50085 is a high-severity vulnerability in the Aqara Board service that allows unauthenticated MQTT command payloads to be forwarded to the platform's HiveMQ broker. This missing authentication for a critical function (CWE-306) can lead to partial compromise of confidentiality, high impact on integrity, and low impact on availability. When combined with related vulnerabilities CVE-2026-50082, CVE-50083, and CVE-50084, it may enable a fully unauthenticated remote takeover of affected devices.

CVE-2026-50082 is a vulnerability in the Aqara Cloud Developer Portal that allows issuance of developer tokens to any email address supplied by an attacker, due to missing authentication for a critical function. This flaw is classified under CWE-306. It has a CVSS 3.1 base score of 6.5 (medium severity). When combined with other related vulnerabilities (CVE-2026-50083, CVE-2026-50084, CVE-2026-50085), it could enable an unauthenticated attacker to fully take over affected devices.

Improper access control in Devolutions PowerShell Universal 2026.1.7 and earlier allows an unauthenticated remote attacker to obtain the OpenAPI specification of user-defined REST endpoints.

The iRM-IEI Remote Management developed by IEI Integration Corp has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to exploit a specific functionality to obtain partial system configuration information.

An unauthorized access vulnerability exists in the PcSuite APP. The vulnerability can be exploited by attackers to Unauthorized access to the victim’s device.

Brickcom cameras allow unauthenticated access to live snapshot images via the /ONVIF endpoint and no authentication is required to retrieve still images from the camera feed.

During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges.