Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CWE-306 (关键功能的认证机制缺失) — Vulnerability Class 1091

1091 vulnerabilities classified as CWE-306 (关键功能的认证机制缺失). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2026-1724 Missing Authentication for Critical Function in GitLab — GitLab 6.8 Medium2026-03-25
CVE-2026-32326 SHARP多款产品 访问控制错误漏洞 — home 5G HR01 9.1 -2026-03-25
CVE-2026-2417 Missing Authentication for Critical Function in Pharos Controls Mosaic Show Controller — Mosaic Show Controller 9.8 -2026-03-24
CVE-2026-33159 Craft CMS: Unauthenticated users could execute project configuration sync operations that should be restricted trusted users — cms 8.6 -2026-03-24
CVE-2026-33340 LoLLMs WEBUI has unauthenticated Server-Side Request Forgery (SSRF) in /api/proxy endpoint — lollms-webui 9.1 Critical2026-03-24
CVE-2019-25632 phpFileManager 1.7.8 Local File Inclusion via index.php — phpFileManager 6.2 Medium2026-03-24
CVE-2026-4649 Auth bypass in Apache Artemis allows reading all internal messages — KNIME Business Hub 6.5 -2026-03-24
CVE-2026-4640 Galaxy Software Services｜Vitals ESP - Missing Authentication — Vitals ESP 7.5 High2026-03-24
CVE-2026-33719 AVideo Vulnerable to Unauthenticated CDN Configuration Takeover via Empty Default Key Bypass and Mass-Assignment in status.json.php — AVideo 8.6 High2026-03-23
CVE-2025-15517 Authorization Bypass in HTTP Server Endpoints on TP-Link Archer NX200, NX210, NX500 and NX600 — Archer NX600 v3.0 9.8 -2026-03-23
CVE-2026-31846 Unauthenticated Credential Disclosure via /goform/ate in Nexxt Nebula 300+ — Nebula 300+ / Tenda F3 V2.0 Firmware 6.5 Medium2026-03-23
CVE-2026-4582 Shenzhen HCC Technology MPOS M6 PLUS Bluetooth missing authentication — MPOS M6 PLUS 5.0 Medium2026-03-23
CVE-2026-4562 MacCMS Timming API Endpoint Timming.php weak authentication — MacCMS 7.3 High2026-03-22
CVE-2026-2756 OmniPEMF NeoRhythm BLE missing authentication — NeoRhythm 5.0 Medium2026-03-21
CVE-2019-25568 Memu Play 6.0.7 Privilege Escalation via Insecure File Permissions — Memu Play 9.8 Critical2026-03-21
CVE-2026-32896 OpenClaw < 2026.2.21 - Unauthenticated Webhook Access via Passwordless Fallback in BlueBubbles Plugin — OpenClaw 4.8 Medium2026-03-21
CVE-2026-32064 OpenClaw < 2026.2.21 - Missing VNC Authentication in Sandbox Browser noVNC Observer — OpenClaw 7.7 High2026-03-21
CVE-2026-29796 IGL-Technologies eParking.fi Missing Authentication for Critical Function — eParking.fi 9.4 Critical2026-03-20
CVE-2026-33231 NLTK has unauthenticated remote shutdown in nltk.app.wordnet_app — nltk 7.5 High2026-03-20
CVE-2026-25192 CTEK Chargeportal Missing Authentication for Critical Function — Chargeportal 9.4 Critical2026-03-20
CVE-2026-22898 QVR Pro — QVR Pro 9.8 -2026-03-20
CVE-2026-33070 FileRise has Unauthenticated Share Link Deletion — FileRise 3.7 Low2026-03-20
CVE-2026-4476 Yi Technology YI Home Camera CGI Endpoint ipc missing authentication — YI Home Camera 6.3 Medium2026-03-20
CVE-2026-33038 AVideo affected by unauthenticated application takeover via exposed web installer on uninitialized deployments — AVideo 8.1 High2026-03-20
CVE-2026-32985 Xerte Online Toolkits <= 3.14 Unauthenticated Template Import Arbitrary File Upload Leading to Remote Code Execution — Xerte Online Toolkits 9.8 Critical2026-03-20
CVE-2026-32041 OpenClaw < 2026.3.1 - Unauthenticated Browser Control Access via Failed Auth Bootstrap — OpenClaw 6.9 Medium2026-03-19
CVE-2025-71257 BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Authentication Bypass — FootPrints 7.3 High2026-03-19
CVE-2026-24062 Insufficient XPC Client validation leading to local privilege escalation in Arturia Software Center — Software Center 7.3 -2026-03-18
CVE-2026-22174 OpenClaw < 2026.2.22 - Gateway Token Disclosure via Chrome CDP Probe — OpenClaw 6.8 Medium2026-03-18
CVE-2026-2603 Keycloak: keycloak: unauthorized authentication via disabled saml identity provider — Red Hat build of Keycloak 26.2 8.1 High2026-03-18

Vulnerabilities classified as CWE-306 (关键功能的认证机制缺失) represent 1091 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.