CWE-306

2,847 vulnerabilities with CWE-306

CVE-2026-44847 HIGH

MaxKB: Webhook Trigger Authentication Bypass

CVSS 7.5

CVE-2026-44775 MEDIUM

Kavita: No authentication at /api/Reader/image

CVE-2026-44668 CRITICAL

Faction: Unauthenticated Read, Modify, and Delete of Boilerplate Templates

CVSS 9.8

CVE-2026-48692 HIGH

FastNetMon Community Edition <= 1.2.9 - Unauthenticated Remote Code Execution via gRPC API

CVSS 8.1

CVE-2026-9371 MEDIUM

ItzCrazyKns Vane API route.ts missing authentication

CVSS 5.6

CVE-2026-9152 CRITICAL

Unauthenticated SOAP Endpoint in Altium 365 SearchService Allows Cross-Tenant Data Exfiltration and Index Destruction

CVE-2026-9141 CRITICAL

Taiko AG1000-01A Rev 7.3/8 Authentication Bypass via Web Interface

CVSS 9.8

CVE-2026-39310 HIGH

Trilium Notes: Authentication Bypass in Clipper API for Electron (Desktop) Builds

CVSS 8.6

CVE-2026-20223 CRITICAL

Cisco Secure Workload Unauthorized API Access Vulnerability

CVSS 10.0

CVE-2026-8602 CRITICAL

Missing authentication for critical function in ScadaBR

CVSS 9.1

CVE-2026-8706 MEDIUM

Sensitive user data could be leaked to other applications through Reader mode

CVSS 6.5

CVE-2026-31071 CRITICAL

LalanaChami Pharmacy Management System - Unauthenticated Critical Function Access via API Endpoints

CVSS 9.1

CVE-2026-8737 MEDIUM

Sanluan PublicCMS Trade Address Query TradeAddressListDirective.java execute missing authentication

CVSS 5.3

CVE-2026-45397 MEDIUM

Open WebUI: Unauthenticated RAG Configuration Disclosure

CVSS 5.3

CVE-2026-45248 MEDIUM

Hedera Guardian Authentication Bypass Information Disclosure

CVSS 5.3

CVE-2026-44592 CRITICAL

Gradient: Unauthenticated worker on /proto → arbitrary NAR write / cache poisoning

CVSS 9.4

CVE-2026-42283 HIGH

DevSpace UI Server WebSocket CheckOrigin does not validate source

CVSS 7.7

CVE-2026-0247 HIGH

Prisma Access Agent Endpoint DLP: Authorization Bypass Vulnerabilities

CVSS 7.8

CVE-2026-42289 HIGH

ChurchCRM: Cross-Site Request Forgery (CSRF) Leading to Admin Privilege Escalation

CVSS 8.8

CVE-2026-42303 MEDIUM

Fides: Privacy Request Identity Verification Bypass Vulnerability via Duplicate Detection

CVE-2026-31245 MEDIUM

mem0 1.0.0 - Unauthenticated Arbitrary Memory Record Creation via Memory Creation API Endpoint

CVSS 5.3

CVE-2026-31244 MEDIUM

mem0 1.0.0 - Missing Authentication

CVSS 6.5

CVE-2026-31243 MEDIUM

mem0 1.0.0 - Unauthenticated SQL Statement Execution via DELETE /memories Endpoint

CVSS 6.5

CVE-2026-31242 CRITICAL

mem0 v1.0.0 - Unauthenticated SQL Injection via DELETE /memories Endpoint

CVSS 9.1

CVE-2026-31241 MEDIUM

mem0 1.0.0 - Unauthenticated Memory Deletion via DELETE /memories Endpoint

CVSS 6.5