Xen Orchestra auth bypass exploited to take over XCP-ng hosts
A crafted empty-JSON cookie logs attackers in as an existing token owner; Vates fixed it in 6.9.1 and 6.10.0.
Stories per day · 30 days
17 RSS
Relatedkev16fortinet14openssh13cisa10musl10connect-secure9ivanti9rce7ssh7alpine-linux6cve-2026-1049356zero-day6beyondtrust5command-injection5saml5sshole5vpn5alpine4
249 stories, newest first · one card per story
Stories tagged #authentication-bypass
Fortinet patches nearly 100 vulnerabilities across its products
About 17 fixes are critical, including code execution and authentication bypass, with no exploitation stated.
CISA lists Barracuda ESG auth bypass in KEV (CVE-2026-116606)
An unauthenticated attacker can restore a crafted backup and change global configuration; the due date is November 13.
1
OpenSSH musl flaw CVE-2026-123158 exploited for SSH access
The bug needs musl, no PAM, a SHA-256 or SHA-512 password account, and a passwordless shadow entry; Alpine is most exposed.
3
FortiAuthenticator authorization flaw may bypass authentication
Fortinet scores the CWE-863 issue 9.1; the revised notice does not name versions, a fix, or exploitation.
FortiOS and FortiSASE OSPF flaw lets unauthenticated attackers send LSAs
Fortinet rates the CWE-305 weakness 9.3; the notice gives no versions, fix, or exploitation status.
FortiManager and FortiAnalyzer flaws let admins escalate privileges
An authenticated administrator can bypass authorization or impersonate internal services through crafted GUI requests.
Hard-coded password in FortiAuthenticator may bypass checks
An unauthenticated attacker may gain access only in circumstances outside their control; Fortinet scores it 9.0.
Fortinet fortilogd spoofing flaw can disrupt high-availability state
CVSSv3 is 8.2 across Analyzer, Manager, and FortiSASE-Sovereign; no versions or exploitation are stated.
SonicWall patches seven SonicOS firewall flaws; CISA lists SAML bypass
Five of the Gen 7 and Gen 8 bugs allow unauthenticated remote attacks; only CVE-2026-19868 has a workaround.
CISA Warns of SonicWall SonicOS SSLVPN Vulnerability Exploited in Attacks
CISA added a SonicWall SonicOS SSLVPN vulnerability to its Known Exploited Vulnerabilities catalog, warning of bypasses of SAML and MFA.
1
Hackers Begin Exploiting OpenSSH SSHole Authentication Bypass Vulnerability
SANS researcher reports active exploitation attempts against OpenSSH SSHole flaw allowing access to password-disabled accounts; fixes available.
CISA lists OpenSSH auth bypass in KEV catalog (CVE-2026-123158)
Federal agencies must apply vendor mitigations or stop using the product by November 12, 2026.
SonicWall SSL-VPN flaw CVE-2026-19868 can bypass SAML MFA
SonicWall calls exploitation only potential; Gen7 through 7.3.3-7015 and Gen8 through 8.2.2-8015 need firmware, with no workaround.
Philips Hue Bridge Pro flaw lets adjacent attackers bypass authentication
ZDI rates CVE-2026-122044 at CVSS 8.8 and says no authentication is required to exploit it.
SSHHole: OpenSSH allows any password over 256 characters on musl systems
Bypass authentication in OpenSSH musl versions with any string longer than 256 characters, affecting Alpine, OpenWRT and IoT devices.
Barracuda ESG Authentication Bypass Flaw Opens Path to Root
Patching required for chained authentication bypass and command injection flaws in Barracuda products.
IBM patches critical Langflow flaws enabling authentication bypass and RCE
The patches fix four vulnerabilities in Langflow versions 1.0.0 to 1.12.8, including two critical ones rated 9.8 CVSS, and affect Hono framework upgrades.
IBM Discloses Critical Langflow Vulnerabilities for Remote Code Execution
Seven vulnerabilities in Langflow versions 1.0.0-1.12.8 fixed in 1.13.0, including unauthenticated RCE with CVSS 9.8.
Critical Langflow Flaws Allow Unauthenticated Code Execution
Four flaws in Langflow 1.0.0-1.12.8 enable unauthenticated RCE and auth bypass; upgrade to 1.13.0 fixes them.
Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware
CVE-2026-20127, patched in February 2026, lets attackers add rogue peers and steal IPsec key material from controllers.
KeyDrift malware steals SD-WAN encryption keys via CVE-2026-20127
UAT-11473 uses a CVSS 10.0 auth bypass on Cisco Catalyst SD-WAN to plant in-process key stealers; fixes exist but no workaround.
Siemens Mendix SAML module allows assertion-replay login bypass
Unauthenticated attackers can replay a valid IdP-initiated SAML response; fixes are V4.2.4 and V3.6.29.
Cisco Catalyst SD-WAN peering flaw bypasses authentication for admin access
An unauthenticated remote attacker can send crafted requests and log in with administrative privileges.