Xen Orchestra auth bypass exploited for admin and root access
Vates fixed VSA-2026-062, which has no CVE yet, in Xen Orchestra 6.9.1 and 6.10.0 and xo-server 5.211.2 and 5.213.1.
Stories per day · 30 days
1 RSS
Relatedactive-exploitation1ahsay1ahsaycbs1apache1apache-iotdb1chttpd1ckermit1couchdb1cve-2026-1051331cve-2026-1051341iotdb1path-traversal1rce1tls-spoofing1vates1webshell1xcp-ng1xen-orchestra1
23 stories, newest first · one card per story
Stories tagged #auth-bypass
Multiple vulnerabilities in C-Kermit include auth bypass and TLS cert spoofing
A code quality sweep uncovered authentication bypass and TLS certificate spoofing in C-Kermit.
Apache IoTDB pipeTransfer() auth bypass disclosed (CVE-2026-58663)
The oss-security note rates the flaw important and does not list versions or a fix.
CouchDB before 3.5.3 allows unauthenticated reads of prefixed system DBs
Missing checks in chttpd expose the full contents of prefixed _users or _replicator databases.
AhsayCBS Deep-Dive: Auth Bypass to RCE
Researchers detail in-the-wild AhsayCBS bugs that chain an authentication bypass into remote code execution.
CVE-2026-97720: Apache Impala: Impala Executor Webserver Auth Bypass
Apache Impala executor web servers skip JWT signature checks, allowing authentication bypass.
AI Helps Uncover MikroTrick Attack Chain in MikroTik RouterOS
MikroTrick chains two MikroTik RouterOS flaws for unauthenticated admin access, with exploitation seen before patches.
HP Advance / Output Central: unauthenticated SYSTEM RCE and two additional vulnerabilities (CVE-2026-89082/89083/89084)
HP Advance and Output Central have unauthenticated SYSTEM RCE, an auth bypass, and arbitrary file write flaws.
⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks
Weekly recap led by actively exploited Cisco ISE auth-bypass CVE-2026-76460 (CVSS 10.0), plus Plugin4Shell AI-agent RCE and KREMLIN banking malware.
USN-8792-1: Memcached vulnerability
A Memcached vulnerability in ASCII authentication could allow remote attackers to cause a denial of service.
Hackers Exploit cPanel CVE-2026-41940 Auth Bypass to Deploy Mirai Malware
Attackers are exploiting CVE-2026-41940, a critical unauthenticated cPanel/WHM auth bypass, to compromise hosting servers and recruit them into Mirai botnets.
1
Critical pgAdmin Authentication Bypass Lets Attackers Login as Administrator Without Credentials
pgAdmin 4 versions 6.2-9.17 contain critical auth bypass CVE-2026-86863 (CVSS 9.8) letting unauthenticated attackers impersonate administrators; fixed in 9.18.
3
Hackers Exploit MikroTik Vulnerabilities to Take Over MikroTik Routers Without Authentication
Attackers chained SSH authentication bypass CVE-2026-67276 and privilege flaw CVE-2026-86060 to fully hijack internet-exposed MikroTik routers before patches existed.
6
Cisco Identity Services Engine Vulnerabilities
Cisco patched ISE and ISE-PIC flaws enabling REST API authentication bypass, remote code execution, SQL injection, and XXE attacks.
More JFrog Artifactory bugs under attack, and all 3 have patches
Multiple attackers are exploiting three JFrog Artifactory CVEs, including critical auth-bypass CVE-2026-82329, to gain admin access and install backdoors.
3
Off Guard: Breaking LiteLLM from authentication bypass to cloud compromise
Wiz found LiteLLM auth bypass (CVE-2026-59822) and post-auth RCE (CVE-2026-59821) chainable to cloud compromise; the bypass is in CISA KEV with in-the-wild exploitation.
10
Fortinet Patches Critical Vulnerabilities in FortiMonitorOnSight, Chrome Extension
Fortinet patched 10 vulnerabilities including two critical authentication flaws, CVE-2026-84390 (CVSS 9.6) and CVE-2026-84388 (CVSS 9.1), in FortiMonitorOnSight and the FortiPAM Chrome extension.
3
CVE-2026-16232: Checkpoint Quantum Security Management auth bypass ...
Attackers exploit Check Point SmartConsole authentication bypass CVE-2026-16232 to take over Quantum Security Management firewall servers; CISA added it to KEV.
2
Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities
Attackers exploit newly disclosed PaperCut auth bypass CVE-2026-81578 and RCE CVE-2026-82078 to steal credentials from schools and universities in the US and Europe.
2
Flextype v1.0.0-alpha.3 NULL access_token Authentication Bypass
Flextype CMS v1.0.0-alpha.3 API endpoints accept a NULL access_token because isset() validation lets requests bypass authentication.
Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure
Threat actors exploit CVE-2026-82329, a default-config authentication bypass in JFrog Artifactory, to mint administrator tokens days after patch release.
3
[webapps] miniOrange 5.4.3 - Unauthenticated Auth Bypass
A proof-of-concept exploit for an unauthenticated authentication bypass in miniOrange 5.4.3 has been published on Exploit-DB.
[webapps] Duplicati 2.2.0.3 - JWT Signing Key Leak
A public exploit exposes JWT signing key leakage in backup software Duplicati 2.2.0.3, risking session forgery.