Skip to content

/

ZeroHour

ZeroHour aggregates public sources — security and AI press, vendor advisories, NVD, CISA KEV, FIRST EPSS, leak-site trackers and Have I Been Pwned — and classifies them with AI. Summaries can be wrong: read the original. All times are UTC.

News CVEs Incidents Tags Daily brief Traffic Sources RSS & API Kiosk Health Sitemap

Home
News feed
Exploited now

Security

CVEs
Ransomware & breaches
Threat actors & entities
IOCs

AI

AI & models

Explore

Tags
Daily brief
Analytics
Traffic & readers
Ask the feed
Sources

You

Watchlist
Saved
RSS, API & alerts

06:59 UTC· 8m ago

#authorization-bypass — news, CVEs and analysis · ZeroHour

today 43 visits · 56 views · 7 reads·all time 17K views

Tag

#authorization-bypass

7 stories this week · 29 this month · 30 in 6 months · mostly security

stories per day · 30 days

Related#apache 11 #patch 8 #cve 6 #iam 6 #access-control 4 #rest-api 4 #sql-injection 4 #syncope 4 #nifi 3 #stored-xss 3 #access-gateway 2 #ai-platform 2 #apache-doris 2 #auth0 2 #cisco 2 #cms 2 #database 2 #information-disclosure 2

26 stories, newest first · one card per story

1–24 of 26← Prev1 / 2Next →

oss-security·1d ago

CVE-2026-82348: Apache Roller: Cross-weblog resource tampering via unscoped authoring lookups

#apache #apache-roller #cve-2026-82348

CVE-2026-82348

Cyber Security News·1d ago high

Critical ServiceNow Vulnerabilities Let Attackers Bypass Authorization – Update Now!

#servicenow #sql-injection #authorization-bypass

3 sources 3 min

oss-security·2d ago

CVE-2026-95811: Lemonldap::NG::Handler versions from 2.0.0 before 2.16.10, from 2.17.0 before 2.21.6, from 2.22.0 before 2.23.4 for Perl allow an equivalent spelling of a path to bypass the locationRules that restrict it

#lemonldap-ng #perl #cve-2026-95811

CVE-2026-95811

oss-security·2d ago

CVE-2026-85491: Catalyst::Seal versions before 0.03 for Perl allow one request to disable a path or route a later one past an authorization check via a dispatch memo keyed on the request path alone

#perl #catalyst #authorization-bypass

CVE-2026-85491

Cyber Security News·3d ago high

Apache Tomcat Update Fixes WebSocket and HTTP/2 Flaws Affecting Server Security

#apache #tomcat #websocket

3 min

oss-security·4d ago

rsyslog imdtls permitted-peer authorization bypass

#rsyslog #imdtls #dtls

Vulnerability

GBHackers·8d ago

WordPress 7.1.1 Fixes 11 Security Flaws Including Stored XSS and Path Traversal

#authorization-bypass #cms #patch

3 min

Cyber Security News·8d ago

WordPress Urges Immediate Update After Fixing 11 Security Vulnerabilities

#authorization-bypass #cms #path-traversal

3 min1

Cisco Security Advisories·10d ago

Cisco BroadWorks CommPilot Application Software Authorization Bypass Vulnerability

#authorization-bypass #broadworks #cisco

Advisory

Cisco Security Advisories·10d ago

Cisco Identity Services Engine Authorization Bypass Vulnerabilities

#authorization-bypass #cisco #ise

Advisory

oss-security·10d ago

CVE-2026-82561: Apache NiFi: Missing Authorization for Components Referenced in Flow Update Methods

#access-control #apache #authorization-bypass

CVE-2026-82561

oss-security·12d ago

CVE-2026-73668: Apache Syncope: Cross-realm disclosure of confidential ConnId bundles configuration values

#apache #authorization-bypass #connid

CVE-2026-73668

oss-security·12d ago

CVE-2026-73579: Apache Syncope: Non-recursive Any search could skip Realms restrictions

#apache #authorization-bypass #cve-2026-73579

CVE-2026-73579

1

oss-security·12d ago

CVE-2026-73236: Apache Syncope: Cross-Realm authorization bypass in delegated administration

#apache #authorization-bypass #cve-2026-73236

CVE-2026-73236

oss-security·12d ago high

CVE-2026-72524: Apache Doris: Authorization bypass allowing a low-privilege user to read/write/drop arbitrary tables

#apache-doris #authorization-bypass #cve

CVE-2026-72524

1

oss-security·12d ago

CVE-2026-68570: Apache Doris: Authorization bypass leading to unauthorized data access

#apache-doris #authorization-bypass #cve

CVE-2026-68570

oss-security·13d ago

CVE-2026-82432: Apache Storm Nimbus: Blobstore Authorization Bypass via Rebalance Configuration Overrides

#apache #authorization-bypass #blobstore

CVE-2026-82432

1

oss-security·13d ago

CVE-2026-82431: Apache Storm Client: Authorization Bypass When nimbus.groups Is Configured Without nimbus.users

#acl #apache-storm #authorization-bypass

CVE-2026-82431

Canadian Centre for Cyber Security·15d ago

HashiCorp security advisory (AV26-910)

#advisory #authorization-bypass #consul

1

GBHackers·15d ago high

Okta Patches Auth0 and Access Gateway Vulnerabilities Let Attackers Enable XSS, Authentication Bypass and SQL Injection

#access-gateway #ad-ldap-connector #auth0

4 min1

Cyber Security News·15d ago

Okta Fixes Auth0 and Access Gateway Flaws Enabling XSS, Auth Bypass, and SQL Injection

#access-gateway #auth0 #authorization-bypass

3 min1

oss-security·16d ago

CVE-2026-80354: Apache Camel K: Camel K Builder trait mavenProfiles ValueSources resolve tenant-named secrets in operator namespace

#apache #authorization-bypass #camel-k

CVE-2026-80354

1

CERT/CC Vulnerability Notes·23d ago high

VU#889462: Casdoor authentication server is vulnerable to authorization bypass

#authorization-bypass #casdoor #cert-cc

CVE-2026-15630

3 min

CISA Advisories·23d ago

Tycon Systems TPDIN-Monitor-WEB3

#authorization-bypass #cisa #csrf

CVE-2026-77847

2 sources 4 min