cve.bz

CWE-306: Missing Authentication for Critical Functionality, page 5

Filter

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

What the weakness is: CWE-306 at MITRE

Ask an AI about CWE-306

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-306: Missing Authentication for Critical Functionality and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/306.html and https://cve.bz/cve/cwe/306?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.9CVE-2026-111644EPSS 0.4%

    Misaka Danmu Server through 2.8.9 contains a missing authentication vulnerability that allows unauthenticated attackers to access audit, diagnostics, data-check, scan-index and health routes under /api/ui lacking the get_current_user depen…

  2. 9.3CVE-2026-111643EPSS 0.6%

    Misaka Danmu Server through 2.8.9 contains an authentication bypass vulnerability that allows unauthenticated attackers to write arbitrary configuration keys via the unprotected POST /api/ui/config-history/rollback endpoint. Attackers can …

  3. 9.3CVE-2026-111641EPSS 0.4%

    FastapiAdmin through 3.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain sessions for any user by abusing unprotected auto-login endpoints. Attackers can list users via /api/v1/auth/auto-logi…

  4. 6.9CVE-2026-111637EPSS 0.5%

    NexoPOS through 6.2.4 contains a missing authentication vulnerability that allows unauthenticated attackers to read accounting transaction records via GET /api/fields/{resource}/{identifier}. Attackers can request transaction field classes…

  5. 9.3CVE-2026-111626EPSS 0.4%

    Webreaper Damselfly through 4.5.3 contains an authentication bypass vulnerability that allows unauthenticated attackers to access all /api/* routes because controller authorization attributes are commented out. Attackers can send PUT /api/…

  6. 6.3CVE-2026-111624EPSS 0.3%

    Umbraco CMS before 17.7.1 and 18.2.1 contains a missing authorization vulnerability that allows unauthenticated clients to connect to the backoffice PreviewHub and BackofficeHub SignalR hubs. Attackers can complete the SignalR negotiate st…

  7. 6.9CVE-2026-111617EPSS 0.4%

    WHartTest through 2.8.1 contains a missing authentication vulnerability that allows unauthenticated attackers to connect to the /ws/ui/web/ and /ws/ui/actuator/ WebSocket endpoints because UiAutomationConsumer accepts every connection. Att…

  8. 8.7CVE-2026-111613EPSS 0.6%

    AllData through 0.7.1 contains an unauthenticated JDBC injection vulnerability that allows remote attackers to open arbitrary database connections by supplying jdbcUrl and jdbcDriverClass values to the data-dts /jobJdbcDatasource/test endp…

  9. 9.6CVE-2026-57169EPSS 0.3%

    Dockhand is a Docker management application. Prior to 1.0.34, the in-browser container terminal endpoint /api/containers/<id>/exec does not enforce authentication on the WebSocket upgrade request. When an unauthenticated attacker has netwo…

  10. 8.7CVE-2026-105667EPSS 0.2%

    In the default configuration, the HL7 listener accepts ADT^A40 patient-merge messages without authenticating the sending application. A remote sender can reassign studies and related workflow records from one patient identity to another. T…

  11. 9.3CVE-2026-105279EPSS 0.3%

    In the default configuration, the archive accepts DICOM associations from an unregistered calling AE. A remote peer can use C-FIND and C-GET to enumerate and retrieve patient information and medical images. It can also use C-STORE to file …

  12. 9.8CVE-2026-64959EPSS 0.4%

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), Missing Authentication for Critical Function vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network…

  13. 9.3CVE-2026-111322EPSS 0.9%

    Archon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/* control API, which binds to 0.0.0.0 by default. Attackers with network access can send messages to the …

  14. 9.2CVE-2026-111312EPSS 0.6%

    OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /api/health-data/[id] GET, PATCH and DELETE handlers that query records by id without session or authorId checks. Unauthenticated attackers w…

  15. 9.8CVE-2026-105038EPSS 0.6%

    The EnergizeLab Eilik and EilikO FastAPI AI inference and profiling services expose AI model administration functions without authentication. An unauthenticated remote attacker can change AI model configuration and switch the model in use …

  16. 8.2CVE-2026-105034EPSS 0.6%

    The EnergizeLab Eilik NestJS auth service issues device tokens for arbitrary robot serial numbers without authentication. An unauthenticated remote attacker can obtain a valid device token for any serial number and act as that device again…

  17. 9.3CVE-2026-84731EPSS 1.3%

    An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal management HTTP header. The vulnerability is caused by a misconfigur…

  18. 8.9CVE-2026-39997EPSS 0.2%

    A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to gain access to the system. We have already fixed the vulnerabilit…

  19. 9.3CVE-2026-34006EPSS 0.4%

    A missing authentication for critical function vulnerability has been reported to affect sMedio DTCP MOVE. If exploited, the vulnerability could allow remote attackers to gain access to the system. We have already fixed the vulnerability …

  20. 7.5CVE-2026-76659EPSS 0.3%

    A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service.

  21. 5.3CVE-2026-76656EPSS 0.2%

    A vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service when traceroute is executed under certain conditions.

  22. 8.7CVE-2026-110838EPSS 0.3%

    FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authentication, allowing unauthenticated attackers to inject keyboard input. Attackers can negotiate TLS-only RDP and send an input…

  23. 8.2CVE-2026-71854EPSS 0.2%

    OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests. Prior to version 2.260622.0, on a default installation, the `/api/player/**` lessons endpoints can be ca…

  24. 3.7CVE-2026-64856EPSS 0.2%

    FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.20.0, FileRise /api/file/snippet.php does not apply the standard authenticated-session guard before processing short text pr…

  25. 7.4CVE-2026-57492EPSS 0.3%

    FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise treats an empty or missing users.txt file as a fresh installation even after setup previously completed. If s…

  26. 5.3CVE-2026-104110EPSS 0.3%

    FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.24.0, FileRise Pro /api/pro/portals/get.php returns a configured client portal's full internal record to an unauthenticated …

  27. 6.5CVE-2026-104106EPSS 0.3%

    FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise permits an authenticated session with a valid CSRF token to disable TOTP without recent full reauthentication…

  28. 5.5CVE-2026-110669EPSS 0.6%

    A security vulnerability has been detected in cemtan sar2html 4.0.0. This affects the function deleteHost/deleteRange/deleteAll of the file sar2html.py. Such manipulation leads to missing authentication. The attack may be performed from re…

  29. 8.4CVE-2026-55786EPSS 0.4%

    Flyto2 Core is an execution kernel for automation and AI-agent workflows. From 2.26.2 until 2.26.4, the HTTP MCP POST /mcp route accepts unauthenticated JSON-RPC tools/call requests and forwards execute_module arguments to the module regis…

  30. 9.2CVE-2026-102748EPSS 0.6%

    Dgraph is an open source distributed GraphQL database. Prior to 25.4.0, Dgraph Zero registers administrative HTTP routes on port 6080 without authentication when the administrative interface is enabled. The /removeNode route accepts attack…

  31. 8.2CVE-2026-100406EPSS 0.4%

    dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications. From 2.0.0-alpha.0 until 2.0.0-alpha.5, dbt docs serve exposes the unauthenticated POST /api/v1/que…

  32. 9.3CVE-2026-109439EPSS 0.6%

    Lantronix XPress-DR and XPress-DR-I (CoBos-family) firmware through 8.1.0.0 contains a missing authentication vulnerability that allows remote attackers to read and persistently overwrite device configuration by sending crafted frames to t…

  33. 9.2CVE-2026-110632EPSS 0.7%

    Report One MyReport Updater through 2.1.1 exposes an unauthenticated gRPC service on TCP port 9095 that allows remote attackers to redirect the SYSTEM updater by invoking the UpdateConfigReferent method. Attackers can point the updater to …

  34. 6.3CVE-2026-110619EPSS 0.8%

    frp 0.41.0 through 0.71.1 contains a missing authentication vulnerability that allows unauthenticated remote attackers to access pprof debug endpoints because handlers are registered on the root mux outside Basic Authentication. Attackers …

  35. 8.6CVE-2026-110618EPSS 0.4%

    SmsForwarder through 3.5.0 contains a missing authentication vulnerability in its AndServer HTTP server that allows unauthenticated network attackers to invoke remote-control APIs. Attackers can call the default-enabled endpoints to read S…

  36. 9.2CVE-2026-110616EPSS 1.0%

    NullHub through 2026.5.29 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/* management API because the auth_token field defaults to null and is never assigned. Attackers sending requ…

  37. 9.8CVE-2026-16740EPSS 1.7%

    Missing authentication for critical function vulnerability in TR7 Cyber ​​Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber ​​Defense Inc. TR7 ASP on physical appliance allows OS Command Injection. This issue affects TR7 ASP: from 1…

  38. 8.7CVE-2026-103905EPSS 0.5%

    The authentication middleware of the JTL-Shop administration backend processes the plugin safe mode toggle on the admin logout route before checking whether the requesting user is authenticated. An unauthenticated remote attacker can there…

  39. 4.7CVE-2026-109969EPSS 0.1%

    A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon creates AF_UNIX sockets without explicit permission restrictions or peer credential verification. Under a permissive process umask, any local user ca…

  40. 8.7CVE-2026-108473EPSS 0.3%

    Multiple Kasa devices contain an improper authentication vulnerability in the local device-management protocol. An unauthenticated adjacent attacker may send management instructions to an affected device without adequate authentication or …

  41. 7.0CVE-2026-97793EPSS 0.2%

    Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.

  42. 5.5CVE-2026-96858EPSS 0.5%

    Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally.

  43. 7.0CVE-2026-96313EPSS 0.2%

    Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

  44. 5.5CVE-2026-96183EPSS 0.4%

    Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.

  45. 7.8CVE-2026-85884EPSS 0.4%

    Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.

  46. 8.8CVE-2026-83928EPSS 0.6%

    Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.

  47. 5.5CVE-2026-83854EPSS 0.3%

    Improper access control in Windows Notification allows an authorized attacker to disclose information locally.

  48. 7.1CVE-2026-83715EPSS 0.3%

    Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally.

  49. 4.7CVE-2026-83656EPSS 0.3%

    Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.

  50. 7.8CVE-2026-83654EPSS 0.3%

    Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.