CWE-306

Everything RedTeam Monitor has reported about CWE-306: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

HKUDS Vibe-Trading <0.1.7 Flaw Lets Attackers Execute Root Commands Without Credentials

A missing authentication check in HKUDS Vibe-Trading versions before 0.1.7 allows attackers to execute root commands and upload files without credentials.

Oct 21, 2026

Vulnerabilities

Dromara Skyeye Exposes Servers to Critical 9.3 Script Injection Without Vendor Patch

A missing authentication bug in Dromara Skyeye allows remote attackers to execute arbitrary scripts on host systems without logging in.

Oct 9, 2026