Missing Authentication for Critical Function

Named by 3 kept items in this workspace.

Search every workspace for Missing Authentication for Critical Function. It matches the name as written, so it can find other things that share it.

The items that name it 3

CISA Adds Two Known Exploited Vulnerabilities to Catalog
advisory2026-10-30
Weakness class describing CVE-2026-111357 in Ivanti Connect Secure; the page gives no CWE id
Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities
advisory2026-09-08
Missing authentication on MCP HTTP endpoint allows unauthenticated privileged tool calls
advisory
MCP HTTP endpoint accepts tools/call JSON-RPC requests with no authentication, session, origin, or token check, dispatching directly to the orchestrator's tool registry

All techniques in this workspace.