#Authentication Bypass
All CosmicBytez Labs articles tagged #Authentication Bypass, across news, security advisories, how-to guides, and projects.
- Security
CVE-2026-105133: Ahsay AhsayCBS Authentication Bypass Chained to Unauthenticated RCE
Attackers chain an AhsayCBS auth bypass with OS command injection for unauthenticated SYSTEM-level RCE, dropping webshells and XMRig miners.
- Security
CVE-2026-97657: Abandoned Cart Pro for WooCommerce Authentication Bypass
Malleable AES-CTR encryption and a bypassable HMAC let attackers forge cart-recovery tokens and take over any WooCommerce account.
- Security
CVE-2026-104935: Ivanti Connect Secure Authentication Bypass by Spoofing
Ivanti confirms active exploitation of a pre-auth spoofing flaw in Connect Secure VPN gateways that lets attackers execute arbitrary commands remotely.
- Security
CVE-2026-104732: Advanced IP Blocker 2FA Step-Skip Authentication Bypass
A missing step-1 check in Advanced IP Blocker's 2FA login flow lets attackers brute-force a 6-digit TOTP code and fully bypass authentication (CVSS 9.8).
- Security
CVE-2026-16823: Critical Authentication Bypass in IBM Verify Access and Identity Access
Critical CVSS 9.1 flaw (CVE-2026-16823) lets remote, unauthenticated attackers bypass security restrictions in IBM Verify Access/Identity Access.
- Security
CVE-2026-97720: Apache Impala JWT/OAuth Authentication Bypass
Apache Impala executor webservers accept any valid JWT without checking its signature, letting attackers bypass JWT/OAuth auth entirely.
- Security
CVE-2026-79820: HPE Integrated Lights-Out 7 Remote User Validation Failure
Critical CVSS 9.0 authentication bypass in HPE iLO 7 firmware could let remote attackers gain full administrative control of affected BMCs.
- Security
CVE-2026-105207: ZITADEL Unauthenticated Account Takeover via Unverified IdP Linking
ZITADEL links accounts to external identity providers without verifying a primary factor, letting attackers sign in as any known user.
- News
Fortra Patches Critical Vulnerabilities in BoKS
Fortra fixed 8 BoKS flaws, including a 9.9 CVSS AD auth bypass, 9.1 root command injection, and 9.8 remote buffer overflow bug.
- Security
CVE-2026-82042: Critical Authentication Bypass in UTMStack's InternalApiKeyFilter
CVSS 9.8 auth bypass in UTMStack: a forged Utm-Internal-Key header grants full admin API access. Fixed in 11.2.16.
- Security
Critical Auth Bypass in DevKit Pro Lets Unauthenticated Attackers Take Over WordPress Admin Accounts
Critical CVSS 9.8 auth bypass in DevKit Pro (≤2.3.0) lets unauthenticated attackers forge a cookie and take over any WordPress administrator account.
- Security
Critical Auth Bypass in Divi Membership Lets Attackers Log In as Any User
CVE-2026-19660 (CVSS 9.8): a forged paypal_param GET request lets unauthenticated attackers log in as any WordPress user, including admins.
- News
Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager
Cisco warns attackers are actively exploiting CVE-2026-76504, a critical 9.8 CVSS auth bypass granting admin API access to SD-WAN Manager.
- Security
CVE-2026-101077: Netcore NR289-GE Authentication Bypass in the boa_temp Handler
A critical, CVSS 10 missing-authentication flaw in Netcore NR289-GE routers has a public exploit and an unresponsive vendor, with no patch in sight.
- Security
Contrast Coordinator Recovery Seed Verification Bypass (CVE-2025-71426)
A recovering Contrast Coordinator fails to verify the supplied seed, letting an attacker stand up a rogue Coordinator to impersonate a workload owner.
- Security
Coolify GitHub App Setup Handler Auth Bypass (CVE-2026-100746)
A missing-auth flaw in Coolify's GitHub App redirect handler lets remote attackers manipulate the state parameter to bypass auth.
- Security
CVE-2026-85984: miniOrange OTP Login Plugin Authentication Bypass
Unauthenticated attackers can log in as any WordPress admin via a missing password check in miniOrange OTP Login ≤ 5.5.5 (CVSS 9.8).
- Security
CVE-2026-31377: Apache Doris FE Meta Service Authentication Bypass
Apache Doris FE meta service (CVE-2026-31377, CVSS 7.5) lets unauthenticated attackers reach internal metadata endpoints via spoofed node info.
- Security
CVE-2026-5430: WSO2 Multiple Products Path Traversal Vulnerability
CISA added CVE-2026-5430 to its KEV catalog after active exploitation of a critical, unauthenticated WSO2 API management flaw.
- Security
CVE-2026-78308: DIAEnergie Authentication Bypass Grants Unauthenticated Admin Access
A critical, pre-auth flaw in Delta Electronics' DIAEnergie ICS energy-management platform lets remote attackers bypass login entirely.
- Security
SAML Single Sign On Plugin Flaw Enables WordPress Account Takeover
CVE-2026-82842 lets a malicious identity provider assert any login name, letting attackers authenticate as any WordPress user, including admins.
- News
Cisco Zero-Day Highlights API Endpoint Authentication Issues
CVE-2026-76460, a maximum-severity CVSS 10.0 auth bypass in Cisco ISE, is under active exploitation and now sits in CISA's KEV catalog.
- Security
CVE-2026-63472: Vendure External-Authentication Account Takeover
A CVSS 9.1 flaw lets attackers bind their external login to a victim's Vendure account by email match alone, enabling full account takeover.
- News
Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks
Cisco warns of an actively exploited CVSS 10.0 auth bypass in ISE (CVE-2026-76460); CISA added it to KEV with a Sep 19 deadline.
- News
Artifactory Flaws Chained in Attacks Deploying Backdoor Malware
Attackers chain three JFrog Artifactory flaws to forge admin tokens and deploy Rust-based backdoors in under five minutes.
- Security
Frontegg SAML SSO Plugin Flaw Lets Anyone Log In as WordPress Admin
CVE-2026-75800 lets unauthenticated attackers forge SAML responses and log in as any WordPress user, including administrators.
- Security
CVE-2026-42018: JFrog Artifactory Auth Bypass Chained for Admin Takeover
JFrog Artifactory can return an anonymous admin token to unauthenticated callers; attackers are chaining this in the wild. Added to CISA KEV.
- Security
CVE-2026-18922: SASL Auth Flaw Lets Attackers Seize Directory Manager on 389 Directory Server
A stale SASL identity left over from a failed bind can be inherited by a later successful bind, letting attackers gain Directory Manager rights.
- Security
Cua Computer-Server Auth Bypass Enables Unauthenticated RCE
Cua computer-server before v0.3.42 skips authentication when a container name env var is unset and binds to all interfaces, exposing desktop...
- Security
Critical Auth Bypass in Frontend Admin Plugin Enables Full Account Takeover
A critical flaw in the Frontend Admin by DynamiApps WordPress plugin lets unauthenticated attackers hijack any account, including admins.
- Security
MStore API Plugin: Unauthenticated JWT Forgery Auth Bypass
Missing signature verification in MStore API's Firebase phone-auth handler lets attackers forge JWTs and impersonate any WordPress account.
- Security
CVE-2026-85181: CAT Session Cookie Forgery Grants Admin Access
CAT relies solely on an unkeyed Java hashCode for session integrity, letting attackers forge admin cookies and bypass IP binding via X-Forwarded-For.
- Security
WWBN AVideo Brute-Force Rate Limit Bypass (CVE-2026-82644)
CVE-2026-82644 lets attackers skip login rate limiting on WWBN AVideo by spoofing a bot User-Agent, enabling unlimited password guessing.
- Security
MyHome Core WordPress Plugin: Auth Bypass Enables Admin Takeover (CVE-2026-15980)
CVE-2026-15980 (CVSS 9.8) lets unauthenticated attackers forge activation tokens to hijack WordPress accounts via MyHome Core.
- Security
rust-iot-platform: Missing Auth Guards Expose the Entire User-Management API (CVE-2026-82452)
CVE-2026-82452 (CVSS 9.8): rust-iot-platform's REST API lacks auth checks — anyone can create, edit, or delete accounts, no login required.
- Security
Omnivore API: JWT Algorithm Confusion in Apple Sign-In Enables Account Takeover (CVE-2026-82454)
CVE-2026-82454 (CVSS 9.1): a JWT alg-confusion bug in Omnivore's Apple sign-in lets attackers forge tokens and take over any linked account.
- News
PaperCut Releases Second Emergency Patch for Exploited Flaws
PaperCut ships Emergency Patch Release 2 for CVE-2026-81578 and CVE-2026-82078 after researchers bypassed the first fix in active attacks.
- Security
CVE-2023-49105: CISA Adds ownCloud Auth Bypass to KEV After Nuclear Data Theft
CISA added ownCloud's critical pre-signed URL auth-bypass flaw (CVSS 9.8) to its KEV catalog after it was used to steal Philippine nuclear data.
- Security
WordPress Jawn Theme Unauthenticated Privilege Escalation
CVE-2026-78477 allows unauthenticated attackers to escalate to WordPress administrator in Jawn theme versions up to 1.4.2, CVSS 9.8 critical.
- Security
CVE-2026-11861: FreeIPA AD Trust Bypass Lets Attackers Impersonate Kerberos Clients
A CVSS 9.6 flaw in FreeIPA lets Active Directory users bypass authentication to FreeIPA services by impersonating client names in Kerberos TGT requests.
- Security
CVE-2026-75860: WordPress JSON Options Plugin Unauthenticated Options Update (CVSS 9.8)
Critical WordPress plugin flaw lets unauthenticated attackers update arbitrary options, enabling privilege escalation and full site takeover.
- Security
CVE-2026-75627: Bastillion Authentication Bypass via Path Traversal
Bastillion's controller dispatcher fails to validate URI paths, letting unauthenticated attackers bypass auth filters and access administrative functions.
- Security
CVE-2026-71566: KubeVirt Auth Bypass via FakeFish Credential Ignore
CVSS 9.3 critical: KubeVirt's FakeFish BMC emulator ignores provided credentials, letting any user claim admin access.
- Security
CVE-2026-74799: SiYuan pprof Debug Endpoints Exposed Without Authentication
SiYuan before 3.7.4 exposes Go pprof debug endpoints unauthenticated, leaking in-memory secrets including API keys and auth codes.
- Security
CVE-2026-19977: EFM ipTIME A3004T Authentication Bypass — CVSS 10.0
Critical auth bypass (CVSS 10.0) in EFM ipTIME A3004T routers lets unauthenticated attackers gain full admin access via session URL manipulation.
- News
Hackers Exploit macOS Screen Sharing Flaw to Deploy Monero Miner
Netherlands NCSC warns hackers are actively exploiting a macOS authentication bypass in Screen Sharing after public exploit code emerged, deploying Monero...
- Security
CVE-2026-16142: TrueBooker WordPress Plugin Unauthenticated Account Takeover
A CVSS 9.8 flaw in TrueBooker for WordPress allows unauthenticated attackers to take over any user account via a vulnerable AJAX handler.
- Security
CVE-2026-15303: WordPress 6Storage Rentals Authentication Bypass
Critical authentication bypass in 6Storage Rentals WordPress plugin v2.27.0 allows unauthenticated users to create privileged accounts via exposed AJAX handler.
- Security
CVE-2026-15341: WordPress User Session Synchronizer — Account Takeover
Critical auth bypass in User Session Synchronizer plugin v1.4.0 lets unauthenticated attackers hijack any WordPress account via session sync on every request.
- Security
CVE-2026-12949: Critical Account Takeover in WordPress Wishlist Member Plugin
Critical CVSS 9.8 flaw in WordPress Wishlist Member plugin allows unauthenticated account takeover in versions up to 3.34.1.
- Security
CVE-2026-59500: Priority Portal Generator Authentication Bypass — CVSS 10.0
Maximum severity CVE in Priority ERP's portal addon allows unauthenticated remote attackers to bypass authentication entirely. Patch immediately.
- Security
PicketLink SAML Authentication Bypass — Forged Assertions Accepted Without Validation
CVE-2026-10579 (CVSS 9.8): PicketLink Federation's SAML handler accepts forged assertions, allowing unauthenticated remote attackers to authenticate as...
- Security
CVE-2026-14450: MaaS API Auth Bypass via Forged HTTP Headers
A critical CVSS 9.9 flaw in the MaaS API allows any pod within a Kubernetes cluster to bypass the Kuadrant AuthPolicy gateway by forging X-MaaS-Username...
- News
N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persist
N-able has released a mandatory second hotfix for N-central after attackers exploiting CVE-2026-18556 and CVE-2026-18577 pivoted through Take Control to...
- Security
CVE-2026-28005: Critical Privilege Escalation in Kadence WooCommerce Email Designer
A critical unauthenticated privilege escalation flaw (CVSS 9.8) in Kadence WooCommerce Email Designer <= 1.5.19 allows attackers to gain admin access with...
- Security
CVE-2025-63823: My Safetipin Android App Exposes Hardcoded Credentials (CVSS 9.8)
A critical hardcoded credentials vulnerability in the My Safetipin Android app v5.2.1 allows remote attackers to bypass authentication and gain...
- Security
CVE-2026-61514: Puwell IP Camera Authentication Bypass
A critical authentication bypass in Puwell IP Camera firmware 2.x through 4.x allows unauthenticated attackers to access live video streams, control...
- Security
CVE-2026-18577: N-able N-central Authentication Bypass and Account Takeover
N-able N-central contains an authentication bypass via alternate path vulnerability enabling full account takeover, added to CISA KEV as an incomplete...
- Security
CVE-2026-15964: WordPress SSO Plugin Critical Authentication Bypass
The Single Sign On For TNG plugin for WordPress contains a critical authentication bypass (CVSS 9.8) allowing unauthenticated attackers to reset any...
- Security
CVE-2026-8457: WooCommerce Social Login Authentication Bypass (CVSS 9.8)
A critical authentication bypass vulnerability in the WooCommerce - Social Login WordPress plugin allows unauthenticated attackers to log in as any...
- Security
CVE-2026-52539: Hardcoded JWT Secret in Outstatic CMS Enables Admin Takeover
Outstatic CMS versions up to and including 2.1.9 ship a publicly known default JWT signing secret, allowing unauthenticated attackers to forge valid admin...
- Security
CVE-2026-14545: TrueBooker WordPress Plugin Lets Anyone Take Over Admin Accounts
An unauthenticated password reset flaw in TrueBooker (before v1.2.4) lets any attacker set an arbitrary password on any WordPress account — including...
- Security
CVE-2026-12394: MemberGlut Plugin Lets Anyone Register as WordPress Admin
A critical privilege escalation flaw in the MemberGlut WordPress plugin allows unauthenticated users to register with any role — including administrator —...
- Security
CVE-2026-13597: WeChat QR Login WordPress Plugin Authentication Bypass
A critical authentication bypass in the WeChat QR login WordPress plugin allows unauthenticated attackers to forge login events for any account — the...
- Security
CVE-2026-61884: Tycon Systems TPDIN-Monitor-WEB2 Authentication Bypass (CVSS 9.8)
A critical authentication bypass in the Tycon Systems TPDIN-Monitor-WEB2 web interface allows unauthenticated remote attackers to gain full administrative...
- Security
CVE-2026-15981: WordPress SAML SSO Authentication Bypass (CVSS 9.8)
A critical authentication bypass in the WordPress SAML Single Sign On plugin allows unauthenticated attackers to log in as any user, including...
- Security
CVE-2026-14291: WordPress Security Ninja Premium 2FA Authentication Bypass
The Security Ninja Premium WordPress plugin before version 5.290 contains a critical authentication flaw that allows attackers to bypass two-factor...
- Security
CVE-2026-16232: Check Point SmartConsole Improper Authentication
A critical improper authentication flaw in Check Point SmartConsole allows unauthenticated remote attackers to steal login tokens and gain full admin...
- News
Critical Palo Alto VPN Bug Now Exploited by Qilin Ransomware Gang
The Qilin ransomware gang is actively exploiting a critical PAN-OS GlobalProtect authentication bypass vulnerability to breach enterprise networks,...
- Security
CVE-2026-13439: WordPress Easy Form Builder Unauthenticated Privilege Escalation (CVSS 9.8)
A critical unauthenticated privilege escalation vulnerability in the Easy Form Builder by WhiteStudio WordPress plugin allows attackers to reset admin...
- Security
CVE-2026-47865: Critical Authentication Bypass in VMware Avi Load Balancer
A CVSS 9.8 authentication bypass vulnerability allows unauthenticated remote attackers to gain full access to the VMware Avi Load Balancer Control Plane....
- Security
CVE-2026-45695: Kopia Backup Tool Exposes Unauthenticated HTTP API
A critical authentication bypass in Kopia, a cross-platform backup tool for Windows, macOS, and Linux, allows unauthenticated access to repository API...
- Security
CVE-2026-12492: WooCommerce OTP Login Plugin Auth Bypass — Full Admin Takeover
The Happy Coders OTP Login for WooCommerce plugin before 2.8 allows unauthenticated attackers to bypass OTP verification and log in as any WordPress user,...
- Security
CVE-2026-15013: WordPress SAML SSO Plugin — Algorithm Confusion Auth Bypass
The miniOrange SAML Single Sign On plugin for WordPress through version 5.4.3 allows unauthenticated attackers to log in as any user via an RSA-to-HMAC...
- Security
CVE-2026-49352: 9Router Hardcoded JWT Secret Allows Complete Authentication Bypass
A critical CVSS 9.8 vulnerability in 9Router versions 0.2.21–0.4.43 exposes a hardcoded fallback JWT secret in source code, enabling attackers to forge...
- Security
CVE-2026-11964: WordPress User Registration Plugin PayPal Webhook Bypass
The User Registration & Membership WordPress plugin before 5.2.2 fails to verify PayPal webhook signatures, allowing unauthenticated attackers to forge...
- Security
CVE-2026-15489: SQL Injection in TOKO-ONLINE-ROTI Login Endpoint
A high-severity SQL injection vulnerability in the TOKO-ONLINE-ROTI bakery management system allows remote attackers to manipulate the login.php Username...
- Security
CVE-2026-12761: miniOrange WordPress Social Login Auth Bypass Enables Full Admin Takeover
A critical authentication bypass chain in the miniOrange Social Login and Register WordPress plugin allows unauthenticated attackers to crack a trivially...
- News
Hackers Exploit Critical Auth Bypass in Official Gitea Docker Image
Attackers are actively exploiting a critical authentication bypass in the official Gitea Docker image, allowing unauthenticated users to impersonate any...
- Security
CVE-2026-5955: BiEticaret E-Commerce SQL Injection (CVSS 9.8)
A critical SQL injection vulnerability in Inrove Software's BiEticaret e-commerce platform (versions before v3.3.57) allows unauthenticated attackers to...
- Security
CVE-2026-13019: Esri ArcGIS Portal Critical Unauthenticated API Access
A critical missing authentication vulnerability in Esri Portal for ArcGIS 12.1 and earlier allows remote unauthenticated attackers to access protected API...
- Security
CVE-2026-53483: Dell PowerProtect Data Domain Authentication Bypass — CVSS 9.8
A critical authentication bypass in Dell PowerProtect Data Domain allows unauthenticated remote attackers to gain access to the backup platform. Combined...
- Security
CVE-2026-9695: DELMIA Apriso Manufacturing MES — Improper Authentication Enables Privileged Server Access
A critical CVSS 9.8 improper authentication vulnerability in Dassault Systèmes DELMIA Apriso (releases 2020–2026) allows unauthenticated attackers to gain...
- Security
CVE-2026-24013: Apache IoTDB Authentication Bypass via Forged Session ID
A critical authentication bypass in Apache IoTDB allows unauthenticated attackers to forge Thrift RPC session IDs and receive valid time-series query...
- Security
CVE-2026-14652: SQL Injection in SourceCodester Shopping Cart Admin Login
A high-severity SQL injection vulnerability in SourceCodester Simple and Nice Shopping Cart Script 1.0 allows remote attackers to manipulate the admin...
- Security
CVE-2026-14688: SQL Injection in itsourcecode Hotel Management Admin Login
A high-severity SQL injection vulnerability in itsourcecode Online Hotel Management System 1.0 allows remote attackers to exploit the admin login page via...
- Security
CVE-2026-20896: Gitea Docker Image Authentication Bypass
All official Gitea Docker images through v1.26.2 ship with a wildcard trusted proxy setting that lets any unauthenticated attacker impersonate any user...
- Security
CVE-2026-52830: fast-mcp-telegram Path Traversal Enables Bearer Token Bypass
A critical path traversal vulnerability in the fast-mcp-telegram Telegram MCP Server allows attackers to bypass Bearer token authentication and read...
- Security
CVE-2026-14198: Fastify Middie Middleware Path Bypass (CVSS 9.1)
Critical path bypass vulnerability in @fastify/middie versions 9.1.0 through 9.3.2 allows attackers to evade middleware protection by exploiting a %2F...
- Security
CVE-2025-71327: Flowise Authentication Bypass Grants Full API Access
A critical authentication bypass in Flowise allows unauthenticated attackers to register accounts via an unprotected API endpoint and gain full platform...
- Security
CVE-2026-11374: ManageEngine SSO Ticket Prediction Enables Unauthenticated Account Takeover
A critical authentication vulnerability in four ManageEngine products allows unauthenticated attackers to predict SSO session tickets and take over...
- Security
CVE-2026-12183: Critical Auth Bypass in Gas Station Automation System
A CVSS 9.8 authentication bypass in Nefteprodukttekhnika's BUK TS-G Gas Station Automation System allows any unauthenticated attacker to gain full...
- Security
CVE-2026-41005: Cloud Foundry UAA SAML Signature Bypass
A high-severity vulnerability (CVSS 9.0) in Cloud Foundry UAA allows attackers to bypass authentication by exploiting the incorrect treatment of XML...
- Security
CVE-2009-10007: Catalyst::Plugin::Authentication Session Fixation
CVSS 9.1 session fixation flaw in Perl's Catalyst auth plugin (before 0.10_027) lets attackers impersonate authenticated users by pre-planting a known...
- Security
CVE-2026-6274: Critical Authentication Bypass in DTS Redline WR3200 Router
A critical authentication bypass vulnerability in the DTS Electronics Redline WR3200 router allows unauthenticated attackers to access functionality protected…
- Security
CVE-2026-49448: authentik Source Stage Authentication Bypass (CVSS 9.8)
A critical authentication bypass in authentik allows attackers to skip the Source stage entirely by sending an empty POST request, completely circumventing…
- Security
CVE-2026-8293: Really Simple Security WordPress Plugin 2FA Authentication Bypass
The Really Simple Security WordPress plugin before 9.5.10.1 fails to enforce the second-factor challenge on two REST API endpoints, allowing attackers with a…
- Security
CVE-2026-48188: OTRS Database Layer SQL Injection — Authentication Bypass
A critical SQL injection vulnerability (CVSS 9.1) in OTRS and ((OTRS)) Community Edition allows unauthenticated attackers to bypass authentication entirely…
- Security
CVE-2026-10167: School Student Management System Cookie Auth Bypass
A high-severity authentication bypass vulnerability in OUSL-GROUP BrinaryBrains School Student Management System allows manipulation of the sign_auth_cookie…
- News
Palo Alto GlobalProtect VPN Auth Bypass Flaw Now Exploited in Attacks
Palo Alto Networks warns that CVE-2026-0257, a CVSS 7.8 authentication bypass in PAN-OS GlobalProtect, is under active exploitation by hackers attempting...
- News
PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation
Palo Alto Networks warns that CVE-2026-0257, a CVSS 7.8 authentication bypass in PAN-OS GlobalProtect and Prisma Access, is being actively exploited by...
- Security
CVE-2026-7459: WordPress Simple History Plugin Account Takeover
A broken authentication check in the Simple History WordPress plugin (versions up to 5.26.0) allows Subscriber-level users to take over any WordPress...
- Security
CVE-2026-35676: phpMyFAQ Unauthenticated Password Reset Vulnerability
phpMyFAQ before 4.1.3 contains a CVSS 8.2 flaw allowing unauthenticated attackers to reset any account password without token validation, enabling full...
- Security
CVE-2026-3655: OTP Login WordPress Plugin Auth Bypass via Firebase Session Mismatch
A critical authentication bypass (CVSS 9.8) in the OTP Login With Phone Number WordPress plugin allows unauthenticated attackers to log in as any user due...
- Security
CVE-2026-20223: Cisco Secure Workload REST API Auth Bypass
A CVSS 10.0 authentication bypass in Cisco Secure Workload allows unauthenticated remote attackers to access internal REST APIs with full Site Admin privileges.
- Security
CVE-2026-24207: NVIDIA Triton Inference Server Auth Bypass
A critical authentication bypass vulnerability in NVIDIA Triton Inference Server could allow unauthenticated attackers to execute code, escalate...
- Security
CVE-2026-31986: Apache OFBiz Hard-Coded Cryptographic Key
Apache OFBiz versions before 24.09.06 contain a hard-coded cryptographic key vulnerability (CVSS 9.1) that allows attackers to forge authentication tokens...
- Security
CVE-2026-7637: WordPress Boost Plugin PHP Object Injection
The Boost plugin for WordPress versions up to 2.0.3 is vulnerable to PHP Object Injection via deserialization of the STYXKEY-BOOST_USER_LOCATION cookie,...
- Security
CVE-2020-37228: iDS6 DSSPro Digital Signage CAPTCHA
A critical CVSS 9.8 vulnerability in iDS6 DSSPro Digital Signage System 6.2 allows attackers to retrieve valid CAPTCHA codes from the login endpoint and...
- Security
WordPress Form Notify Plugin Auth Bypass via LINE OAuth
The Form Notify plugin for WordPress is vulnerable to authentication bypass in versions up to and including 1.1.10. Attackers can manipulate...
- News
PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours
Threat actors began exploiting CVE-2026-44338, a missing authentication flaw in the PraisonAI multi-agent orchestration framework, within just four hours...
- Security
CVE-2026-20182: Cisco Catalyst SD-WAN Controller
A critical authentication bypass vulnerability in Cisco Catalyst SD-WAN Controller and Manager allows an unauthenticated remote attacker to bypass...
- Security
CVE-2026-40621: ELECOM Wireless LAN Access Point
Critical authentication bypass vulnerability in ELECOM wireless LAN access point devices allows unauthenticated attackers to access protected URLs and...
- Security
CVE-2026-42569: phpVMS Critical Unauthenticated Legacy
A critical vulnerability (CVSS 9.4) in phpVMS before version 7.0.6 allows unauthenticated attackers to access a legacy import feature, potentially...
- Security
CVE-2026-7458: Authentication Bypass via OTP Flaw in WordPress User Verification Plugin
A critical authentication bypass in the User Verification by PickPlugins plugin for WordPress allows unauthenticated attackers to bypass OTP verification...
- Security
CVE-2026-35051: Traefik ForwardAuth Authentication Bypass
A critical CVSS 10.0 authentication bypass in Traefik's ForwardAuth middleware allows attackers to circumvent authentication when the proxy is deployed...
- Security
CVE-2026-39858: Traefik Forwarded-Header Sanitization
A second critical CVSS 10.0 authentication bypass in Traefik allows attackers to defeat ForwardAuth and snippet-based authentication middleware by...
- Security
Critical Authentication Bypass in WordPress Temporary Login
A critical CVSS 9.8 authentication bypass in the WordPress Temporary Login plugin (versions up to 1.0.0) allows unauthenticated attackers to gain...
- News
Critical cPanel and WHM Bug Exploited as Zero-Day, PoC Now
The critical CVE-2026-41940 authentication bypass vulnerability in cPanel, WHM, and WP Squared is being actively exploited in the wild and has been...
- Security
CVE-2026-41940: WebPros cPanel & WHM and WP2 Missing
WebPros cPanel, WHM, and WP2 (WordPress Squared) contain a critical authentication bypass in the login flow, allowing unauthenticated remote attackers to...
- Security
CVE-2026-41462: ProjeQtor Unauthenticated SQL Injection in Login
A critical unauthenticated SQL injection vulnerability in ProjeQtor project management software allows attackers to inject arbitrary SQL via the login...
- Security
CVE-2026-41248: Clerk.js Middleware Auth Bypass Exposes
A critical authentication bypass vulnerability in Clerk's JavaScript SDK allows crafted HTTP requests to skip createRouteMatcher middleware gating,...
- Security
CVE-2026-6886: Borg SPM 2007 Authentication Bypass Allows
A critical authentication bypass vulnerability in the end-of-life Borg SPM 2007 application permits unauthenticated remote attackers to log into the...
- Security
CVE-2026-24467: OpenAEV Password Reset Account Takeover
OpenAEV's password reset implementation contains multiple chained weaknesses enabling reliable account takeover in versions 1.0.0 through 2.0.12 of the...
- News
Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables
A critical authentication bypass vulnerability in nginx-ui, a popular open-source web-based Nginx management interface, is being actively exploited to...
- Security
CVE-2026-37749: SQL Injection Auth Bypass in CodeAstro
A critical SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows unauthenticated remote attackers to bypass login...
- Security
CVE-2026-34578: OPNsense LDAP Injection Enables Auth Bypass
A high-severity LDAP injection vulnerability in OPNsense's authentication connector allows unauthenticated attackers to bypass login controls by injecting...
- Security
CVE-2026-4003: WordPress Users Manager PN Plugin Privilege
A critical privilege escalation vulnerability in the Users Manager – PN WordPress plugin (v1.1.15 and below) allows unauthenticated attackers to update...
- Security
CVE-2026-1114: lollms JWT Weak Secret Key Allows Admin
A critical vulnerability (CVSS 9.8) in parisneo/lollms v2.1.0 allows attackers to brute-force the application's JWT secret key offline, forge...
- Security
CVE-2026-5555: SQL Injection in Concert Ticket Reservation
An unauthenticated SQL injection vulnerability has been disclosed in code-projects Concert Ticket Reservation System 1.0, affecting the login.php file via...
- Security
CVE-2017-20237: Hirschmann HiVision Auth Bypass Enables
A critical authentication bypass in Hirschmann Industrial HiVision versions prior to 06.0.07 and 07.0.03 allows unauthenticated remote attackers to...
- News
Cisco Patches Critical and High-Severity Vulnerabilities
Cisco has released security advisories addressing a batch of critical and high-severity vulnerabilities across multiple products, covering flaws that...
- Security
Juju Dqlite Cluster TLS Auth Bypass — Unauthenticated
A CVSS 10.0 critical vulnerability in Juju versions 3.2.0–3.6.18 and 4.0–4.0.3 allows unauthenticated attackers to connect directly to the internal Dqlite...
- Security
CVE-2026-31946: Critical JWT Signature Verification Bypass
OpenOlat versions 10.5.4 through 20.2.4 fail to verify JWT signatures in their OpenID Connect implicit flow, allowing unauthenticated attackers to...
- Security
CVE-2026-3564: ConnectWise ScreenConnect Auth Bypass via Server Cryptographic Material
A critical authentication bypass vulnerability (CVSS 9.0) in ConnectWise ScreenConnect versions prior to 26.1 allows an actor with access to server-level...
- Security
Critical Auth Bypass in Tutor LMS Pro Exposes 30,000+
The Tutor LMS Pro WordPress plugin's Social Login addon fails to verify OAuth token email matches the login request, allowing unauthenticated attackers to...
- Security
CVE-2026-3746: SQL Injection in SourceCodester Simple
A remotely exploitable SQL injection vulnerability has been disclosed in SourceCodester Simple Responsive Tourism Website 1.0, allowing attackers to...
- News
Warlock Ransomware Breaches SmarterTools via Its Own
The Warlock ransomware group exploited CVE-2026-23760, an authentication bypass zero-day in SmarterMail, to breach SmarterTools itself, compromise 12...
- Security
Critical Vulnerability Discovered in Popular Enterprise VPN
Security researchers have identified a severe authentication bypass vulnerability affecting multiple enterprise VPN products. Immediate patching recommended.