
pfsense-api-acb-userkey
pfSense Plus MIM API toolkit b4acd7ca - High - Remote - IDOR - ACB userkey capability URL
api-securitydata-exfiltrationexploitation+7

pfSense Plus MIM API toolkit b4acd7ca - High - Remote - IDOR - ACB userkey capability URL

CVE-2026-28767: Missing Authentication on Admin Notifications Endpoint — Gardyn Home Kit (ICSA-26-055-03)

Denial of Service exploit for Microsoft HoloLens Device Portal via repeated API pairing requests, causing CPU overload and system unresponsiveness.