CWE-306

2,343 vulnerabilities with CWE-306

CVE-2026-46824 CRITICAL

Oracle Universal Work Queue 12.2.3-12.2.15 - Remote Code Execution via Work Provider

CVSS 9.9

CVE-2026-46817 CRITICAL

Oracle Payments 12.2.3-12.2.15 - Unauthenticated Remote Code Execution via File Transmission

CVSS 9.8

CVE-2026-47136 MEDIUM

RustFS: Unauthenticated RustFS console license endpoint exposes license metadata

CVE-2026-46685 MEDIUM

RustFS: Reflective CORS with credentials on S3 listener; unauthenticated license metadata endpoint on console

CVE-2026-45332 HIGH

Automad Broken Access Control: unauthenticated exposure of administrator bcrypt password hashes and TOTP secrets via public API endpoint

CVSS 7.5

CVE-2026-45044 HIGH

RustFS Profile Handlers - Authentication Bypass

CVE-2026-8697 HIGH

Improper Authentication Rate Limiting on TP-Link's Archer C64

CVSS 8.8

CVE-2026-45083 CRITICAL

Goobi viewer: Unauthenticated Solr Streaming Expression Proxy

CVSS 9.8

CVE-2026-8364 CRITICAL

Gladinet Triofox Missing Authentication for Critical Functions

CVSS 9.8

CVE-2026-45089 HIGH

Dalfox: Unauthenticated Arbitrary File Create/Append via `output` Option in Dalfox Server Mode

CVSS 8.2

CVE-2026-45088 HIGH

Dalfox: Unauthenticated Arbitrary File Read with Out-of-Band Exfiltration via `custom-payload-file` in Dalfox Server Mode

CVSS 7.5

CVE-2026-45087 CRITICAL

Dalfox: Unauthenticated Remote Code Execution via `found-action` in Dalfox Server Mode

CVSS 10.0

CVE-2026-44460 HIGH

FileRise: TOTP Bypass via Setup Endpoint Disclosing Existing Secret

CVSS 7.4

CVE-2026-44329 CRITICAL

free5GC: SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers

CVSS 10.0

CVE-2026-44328 HIGH

free5GC: SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating

CVSS 8.2

CVE-2026-44327 CRITICAL

free5GC: NEF nnef-oam route group is unauthenticated; no-token requests reach the OAM handler

CVSS 10.0

CVE-2026-44321 HIGH

free5GC: SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf)

CVSS 7.5

CVE-2026-44320 HIGH

free5GC: NEF nnef-callback route group is unauthenticated; forged callback requests are accepted into the processing path

CVSS 7.3

CVE-2026-44830 HIGH

Empty API_TOKEN disables authentication on network-reachable HTTP/SSE transport

CVE-2026-44895 CRITICAL

GitLab MCP Server: SSE transport has no authentication and wildcard CORS, exposing all GitLab tools

CVE-2026-47672 MEDIUM

epa4all-client: Unauthenticated REST API for Patient Record Writes

CVSS 6.5

CVE-2026-44847 HIGH

MaxKB: Webhook Trigger Authentication Bypass

CVSS 7.5

CVE-2026-44775 MEDIUM

Kavita: No authentication at /api/Reader/image

CVE-2026-44668 CRITICAL

Faction: Unauthenticated Read, Modify, and Delete of Boilerplate Templates

CVSS 9.8

CVE-2026-48692 HIGH

FastNetMon Community Edition <= 1.2.9 - Unauthenticated Remote Code Execution via gRPC API

CVSS 8.1