Cyber CrimeRCE flaw in Rejetto HFS now exploited
Attackers are exploiting CVE-2026-61500 in Rejetto HFS to bypass authentication and gain remote code execution, according to VulnCheck.
> Search
30 results for “authentication”
Cyber Crime
SecurityNetScaler Zero-Day Poses Patching Puzzle
Citrix rushed out emergency updates for a SAML authentication flaw already exploited in attacks, but administrators may need to patch twice.
SecurityFortra BoKS Patches Fix Critical Auth Bypass
Fortra fixed eight bugs in BoKS, including a 9.9-severity auth bypass and a 9.1 command injection, but reported no known exploitation.
SecurityCisco WAN Manager Flaw Opens Admin Door
A critical authentication bypass in Cisco Catalyst SD-WAN Manager let attackers reach an admin API, and the fix requires an upgrade.
SecurityTeen's Auth Flaw Opened Titan's Data Vault
A 16-year-old researcher bypassed Microsoft's Titan analytics by exploiting an unverified JWT and was paid a $5,000 bounty.
SecurityArista VeloCloud Flaw Exploited, Scores 10.0
Arista says attackers are actively exploiting CVE-2026-93952, a maximum-severity flaw in on-premises VeloCloud Orchestrator setups using certificate authentication.
Cyber CrimeGhostCode Phishing Kit Bypasses MFA
A new phishing kit abuses Microsoft's device-code flow to bypass MFA and establish persistent access to Microsoft 365 environments.
SecurityCisco ISE Zero-Day Under Attack
Cisco has fixed a maximum-severity ISE authentication bypass that attackers are already exploiting, and CISA set a three-day federal patch deadline.
Cyber CrimeArtifactory Flaws Chained Into Admin Backdoors
Wiz reports attackers chained two Artifactory token flaws to seize admin control and plant backdoors, while a third flaw was exploited separately.
Cyber CrimeCisco confirms exploited Secure FMC flaw
Cisco says attackers are exploiting a maximum-severity Secure FMC bug, but its own July advisory points to earlier activity.
SecurityIvanti's Patch Cascade: Critical RCE Flaws Resolved
Ivanti addresses critical and high-severity vulnerabilities across Neurons for ITSM, Sentry, and EPMM, urging immediate updates.
SecurityArtifactory Flaw Exploited Within Days of Patch
Attackers are exploiting CVE-2026-82329, a critical Artifactory authentication bypass, to mint admin tokens.
SecurityJFrog Flaw Exploited Days After Patch
CVE-2026-82329, a critical Artifactory auth bypass, is reportedly under active attack post-disclosure.
SecuritySilent Patch Leaves WordPress Admins Exposed
Critical MiniOrange SAML SSO flaws exploited in wild; silent patch raises risk for WordPress sites.
Cyber CrimeNotion, PDFs, and PaaS: Token Theft's New Shape
Threat actor Doubloon Dredger exploits Notion and device codes to steal authentication tokens, researchers say.
SecurityNASA ground control flaw opens door to unauthenticated commands
A critical AIT-GUI vulnerability could let attackers send commands to NASA spacecraft and instruments without authentication.
SecurityWordPress Plugin Flaw Opens Door to Admin Takeover
CVE-2026-15826 in User Profile Builder exposes 40,000+ WordPress sites to admin takeover.
SecurityFortinet's Patch Wave Targets Authentication Gaps
Fortinet resolves eight flaws, including high-severity authentication bugs in FortiWeb and FortiManager.
SecuritySharePoint Flaw Exploited After PoC Release
Threat actors are exploiting a critical SharePoint authentication bypass after Rapid7 released a PoC exploit.
TrendingAkira ransomware fails in Safe Mode but data theft follows
An Akira affiliate rebooted a victim's PC into Safe Mode, breaking its own encryptor but still stealing data.
SecurityAI-Assisted SharePoint Exploit Reaches Unauthenticated RCE
Researchers chain AI-found flaws to gain admin on SharePoint servers, bypassing authentication entirely.
SecuritySAP's Critical Patches Close Zero-Day-Style Gaps
SAP's August 2026 patch batch addresses 28 flaws, including a 10/10 severity bug in Commerce Cloud that could allow attackers to bypass authentication and execute code.
SecurityPasskey Defenses Undermined by Weak Surroundings
Recent research shows passkey protections can be bypassed without breaking the underlying cryptography.
SecurityDell OMSA Authentication Flaw Risks Access
A critical authentication vulnerability in Dell OpenManage Server Administrator allows unauthenticated remote attackers to gain unauthorized access.
SecurityCritical Azure SQL Database Flaw Found
A critical authentication bypass in Azure SQL Database allows unauthorized attackers to gain elevated privileges over a network.
SecurityIBM Langflow OSS Encryption Flaw Exposed
A cryptographic weakness in IBM Langflow OSS allows attackers to reproduce encryption keys, potentially exposing stored API keys and authentication tokens.
SecurityCISA Warns of Active N-able N-central Flaw
CISA has added an authentication bypass vulnerability in N-able N-central to its Known Exploited Vulnerabilities catalog, requiring immediate action.
SecurityResearch Exposes Google Passkey Exploits
Researchers identified three methods to compromise passkeys, highlighting vulnerabilities in Google's synchronization process.
SecurityCritical Auth Flaw Found in OpenCode Studio
A missing authentication vulnerability in OpenCode Studio versions prior to 2.4.4 allows unauthenticated attackers to steal files and delete user videos.
SecurityCritical Krayin CRM Flaw Enables Takeover
A missing authentication vulnerability in Krayin CRM version 2.2.4 allows remote attackers to hijack the administrator account and gain full system access.