CWE-308

CWE-308 · 7 records · 5 with a public proof-of-concept

Records the NVD classes under CWE-308, highest CVSS first.

  1. HIGH 8.3CVE-2026-111884public PoC2026-10-17

    phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta does not require the current password when changing an account e-mail in the user control panel (UserController::updateData, api/user/data/update), checking only the session and CSRF token. An attacker wi…

    AI risk analysis on Exploit-DB.ai →

  2. HIGH 8.1CVE-2026-57490public PoC2026-10-14

    FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, when an administrator has enabled WebDAV, FileRise WebDAV Basic authentication validates only the account username and password through Aut…

    AI risk analysis on Exploit-DB.ai →

  3. HIGH 8.1CVE-2026-107808public PoC2026-10-09

    Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, POST /api/login checks EnabledOTP but does not require a WebAuthn assertion when EnabledPasskey is true and no TOTP secret is configured. A passkey-only account is therefore iss…

    AI risk analysis on Exploit-DB.ai →

  4. HIGH 7.5CVE-2026-198682026-11-06

    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor auth…

    sonicos · nsv 270 · nsv 470 · nsv 870 · nsa 2700 · nsa 3700

    AI risk analysis on Exploit-DB.ai →

  5. MEDIUM 6.3CVE-2026-121531public PoC2026-11-03

    A vulnerability has been found in Umami 3.3.x/3.4.0/3.4.1. This affects an unknown part of the file src/app/api/auth/login/route.ts of the component 2FA Policy Handler. The manipulation leads to use of single-factor authentication. It is possible to initiate t…

    AI risk analysis on Exploit-DB.ai →

  6. MEDIUM 5.3CVE-2026-79763public PoC2026-09-24

    Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.0 until 2.5.1, the POST /users/totp/disable and POST /users/totp/backup-codes endpoints accept the account password as the sole reauthenticat…

    AI risk analysis on Exploit-DB.ai →

  7. MEDIUM 4.3CVE-2026-908622026-10-29

    Improper authentication in the Web Transfer Module of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an attacker with a user’s password to access certain files associated with that account without satisfying mult…

    AI risk analysis on Exploit-DB.ai →