CWE-306

2,205 vulnerabilities with CWE-306

CVE-2026-27595 HIGH

Parse Dashboard 7.3.0-9.0.0 - Auth Bypass

CVSS 7.5

CVE-2026-26340 HIGH

Tattile Smart+/Vega/Basic <1.181.5 - Auth Bypass

CVSS 7.5

CVE-2026-27584 HIGH

ActualBudget <26.2.1 - Info Disclosure

CVSS 7.5

CVE-2026-3053 HIGH

DataLinkDC dinky <1.2.5 - Auth Bypass

CVSS 7.3

CVE-2026-23693 CRITICAL

ElementsKit Lite <3.7.9 - SSRF

CVSS 10.0

CVE-2026-27471 CRITICAL

ERP <=15.98.0/16.0.0-rc.1-16.6.0 - Auth Bypass

CVSS 9.1

CVE-2026-26048 HIGH

Wi-Fi Router - DoS

CVSS 7.5

CVE-2026-24790 HIGH

PLC Device - Command Injection

CVSS 8.2

CVE-2026-26319 HIGH

OpenClaw <=2026.2.13 - Auth Bypass

CVSS 7.5

CVE-2026-27182 HIGH

Saturn Remote Mouse Server - Command Injection

CVSS 8.4

CVE-2026-1670 CRITICAL

Affected Products - Info Disclosure

CVSS 9.8

CVE-2026-2577 CRITICAL

Nanobot WhatsApp Bridge - Auth Bypass

CVSS 10.0

CVE-2026-26333 CRITICAL

Calero VeraSMART <2022 R1 - Unauthenticated Code Injection

CVSS 9.8

CVE-2026-26190 CRITICAL

Milvus < 2.5.27 - Missing Authentication

CVSS 9.8

CVE-2026-26055 HIGH

Yoke - Missing Authentication

CVSS 7.5

CVE-2026-26235 HIGH

JUNG Smart Visu Server 1.1.1050 - DoS

CVSS 7.5

CVE-2026-1729 CRITICAL

AdForest theme <6.0.12 - Auth Bypass

CVSS 9.8

CVE-2026-25084 CRITICAL

ZLAN5143D - Auth Bypass

CVSS 9.8

CVE-2026-24789 CRITICAL

Unprotected API - Info Disclosure

CVSS 9.8

CVE-2026-2249 CRITICAL

METIS DFS <oscore 2.1.234-r18 - RCE

CVSS 9.8

CVE-2026-2248 CRITICAL

METIS WIC <= oscore 2.1.234-r18 - RCE

CVSS 9.8

CVE-2026-1603 HIGH KEV

Ivanti Endpoint Manager < 2024 - Authentication Bypass

CVSS 8.6

CVE-2026-25938 CRITICAL

Frangoteam Fuxa < 1.2.11 - Missing Authentication

CVSS 9.8

CVE-2026-25895 CRITICAL

Frangoteam Fuxa < 1.2.10 - Path Traversal

CVSS 9.8

CVE-2026-25885 HIGH

PolarLearn <0-PRERELEASE-16 - SSRF

CVSS 7.5