CWE-306

2,343 vulnerabilities with CWE-306

CVE-2026-33366 MEDIUM

BUFFALO Wi-Fi router products - Unauthenticated Denial of Service via Forced Reboot

CVSS 5.3

CVE-2026-3527 MEDIUM

AJAX Dashboard - Critical - Access bypass - SA-CONTRIB-2026-022

CVSS 6.5

CVE-2026-24068 HIGH

Missing XPC Client & NSXPC endpoint validation leads to privilege escalation in Vienna Assistant (MacOS) - Vienna Symphonic Library

CVSS 8.8

CVE-2026-1724 MEDIUM

Missing Authentication for Critical Function in GitLab

CVSS 6.8

CVE-2026-32326 MEDIUM

Sharp home 5G HR01 <=38JP_0_490 - Auth Bypass

CVSS 5.7

CVE-2026-2417 CRITICAL

Missing Authentication for Critical Function in Pharos Controls Mosaic Show Controller

CVE-2026-33159 MEDIUM

Craft CMS 4.x and 5.x - Unauthenticated Config Sync Operations

CVSS 6.5

CVE-2026-33340 CRITICAL

LoLLMs WEBUI has unauthenticated Server-Side Request Forgery (SSRF) in /api/proxy endpoint

CVSS 9.1

CVE-2026-4649 MEDIUM

Auth bypass in Apache Artemis allows reading all internal messages

CVE-2026-4640 HIGH

Galaxy Software Services｜Vitals ESP - Missing Authentication

CVSS 7.5

CVE-2026-33719 HIGH

WWBN AVideo <= 26.0 - Unauthenticated CDN Configuration Modification via par Parameter

CVSS 8.6

CVE-2026-31846 MEDIUM

Nexxt Solutions Nebula 300+ <=12.01.01.37 - Info Disclosure

CVSS 6.5

CVE-2026-4582 MEDIUM

Shenzhen HCC Technology MPOS M6 PLUS Bluetooth missing authentication

CVSS 5.0

CVE-2026-4562 HIGH

MacCMS Timming API Endpoint Timming.php weak authentication

CVSS 7.3

CVE-2026-2756 MEDIUM

OmniPEMF NeoRhythm BLE missing authentication

CVSS 5.0

CVE-2026-32896 MEDIUM

OpenClaw < 2026.2.21 - Unauthenticated Webhook Access via Passwordless Fallback in BlueBubbles Plugin

CVSS 4.8

CVE-2026-32064 HIGH

OpenClaw < 2026.2.21 - Missing VNC Authentication in Sandbox Browser noVNC Observer

CVSS 7.7

CVE-2026-33231 HIGH

NLTK has unauthenticated remote shutdown in nltk.app.wordnet_app

CVSS 7.5

CVE-2026-33203 HIGH

SiYuan <3.6.2 WebSocket Auth Keepalive - Denial of Service

CVSS 7.5

CVE-2026-29796 CRITICAL

IGL-Technologies eParking.fi Missing Authentication for Critical Function

CVSS 9.4

CVE-2026-25192 CRITICAL

CTEK Chargeportal Missing Authentication for Critical Function

CVSS 9.4

CVE-2026-22898 CRITICAL

QNAP QVR Pro < 2.7.4.14 - Missing Authentication for Critical Function

CVSS 9.8

CVE-2026-33070 LOW

FileRise has Unauthenticated Share Link Deletion

CVSS 3.7

CVE-2026-4476 MEDIUM

Yi Technology YI Home Camera CGI Endpoint ipc missing authentication

CVSS 6.3

CVE-2026-33038 HIGH

AVideo affected by unauthenticated application takeover via exposed web installer on uninitialized deployments

CVSS 8.1