Skip to content
OpenAdvisories

Vendor

CERT.PL

2 known vulnerabilities.

Products

MWDB Core 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.0
    CVE-2026-66723

    Missing authentication requirement in Remote Instances proxy API in MWDB Core

    MWDB Core versions >=2.2.0 and <2.19.0 contain a missing authorization vulnerability in the Remote Instances proxy API. The proxy API does not verify authentication for incoming requests, allowing an unauthenticated remote attacker to send arbitrary requests …

    CERT.PL MWDB Core