Known Vulnerabilities for Authentication by Cakephp
Listed below are 10 of the newest known vulnerabilities associated with "Authentication" by "Cakephp".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-92808 json | A server-side request forgery (SSRF) vulnerability exists in the UnifiedLogin service of Altium Enterprise Server. An unauthe... | Not Provided | 2026-09-16 | 2026-09-16 |
| CVE-2026-92806 json | phpList versions before 3.6.17 fail to validate cross-site request forgery tokens in the mass subscriber removal form handler... | Not Provided | 2026-09-16 | 2026-09-16 |
| CVE-2026-92803 json | LibreTranslate through 1.9.6 omits the access_check decorator from the download_file route, allowing unauthenticated access t... | Not Provided | 2026-09-16 | 2026-09-16 |
| CVE-2026-92794 json | OpenSign through 2.41.3 fails to validate caller identity in the getDocument cloud function when one-time-password verificati... | Not Provided | 2026-09-16 | 2026-09-16 |
| CVE-2026-92751 json | CMAK through 3.0.0.6 fails to install a cross-site request forgery filter, allowing attackers to perform state-changing actio... | Not Provided | 2026-09-16 | 2026-09-16 |
| CVE-2026-92720 json | Kubero through 3.1.1 fails to apply authentication guards to the notifications API endpoints, allowing unauthenticated attack... | Not Provided | 2026-09-16 | 2026-09-16 |
| CVE-2026-92625 json | Control iD iDSecure versions prior to 4.8.3.0 are affected by an unauthenticated Denial of Service. The /api/license/rest... | Not Provided | 2026-09-16 | 2026-09-16 |
| CVE-2026-92616 json | FileRise before version 3.28.0 contains a privilege escalation vulnerability that allows authenticated low-privilege attacker... | Not Provided | 2026-09-16 | 2026-09-16 |
| CVE-2026-92592 json | Craft CMS 4.8.0 through 4.18.5 and 5.0.0 through 5.10.12 sign an authenticated user's attacker-controlled license-shun cookie... | Not Provided | 2026-09-16 | 2026-09-16 |
| CVE-2026-92578 json | WWBN AVideo through 29.0 contains an authentication bypass vulnerability where the stored password hash is accepted as a vali... | Not Provided | 2026-09-16 | 2026-09-16 |