SecurityWordPress Plugin Flaw Opens Door to Admin Takeover
CVE-2026-15826 in User Profile Builder exposes 40,000+ WordPress sites to admin takeover.
> Search
19 results for “authentication bypass”
Security
SecurityFortinet's Patch Wave Targets Authentication Gaps
Fortinet resolves eight flaws, including high-severity authentication bugs in FortiWeb and FortiManager.
SecuritySharePoint Flaw Exploited After PoC Release
Threat actors are exploiting a critical SharePoint authentication bypass after Rapid7 released a PoC exploit.
SecurityCritical Azure SQL Database Flaw Found
A critical authentication bypass in Azure SQL Database allows unauthorized attackers to gain elevated privileges over a network.
SecurityCISA Warns of Active N-able N-central Flaw
CISA has added an authentication bypass vulnerability in N-able N-central to its Known Exploited Vulnerabilities catalog, requiring immediate action.
SecurityCritical Auth Flaw Found in OpenCode Studio
A missing authentication vulnerability in OpenCode Studio versions prior to 2.4.4 allows unauthenticated attackers to steal files and delete user videos.
SecurityCritical Auth Bypass Found in TNG Plugin
A critical vulnerability in the Single Sign On For TNG WordPress plugin allows unauthenticated attackers to reset any user password and take over sites.
SecurityCritical SAML Bypass Hits SolarWinds Web Help Desk
A critical authentication bypass vulnerability in SolarWinds Web Help Desk allows unauthorized access for systems with SAML 2.0 enabled.
SecurityCritical Pheditor Auth Bypass Found
A flaw in the Pheditor forced password-change flow allows unauthenticated attackers to hijack administrative accounts on systems using default credentials.
SecurityLightRAG Critical Auth Bypass Vulnerability
A hardcoded secret in LightRAG allows unauthenticated attackers to bypass API key protections and gain full control over document operations.
SecurityVMware Avi Auth Bypass Flaw Detailed
A critical authentication bypass vulnerability identified in VMware Avi Load Balancer could allow unauthorized access to the control plane.
SecurityCritical Auth Bypass Found in VMware Avi
A critical authentication bypass flaw in VMware Avi Load Balancer has been disclosed, requiring immediate attention to specific versions.
SecurityUnauthenticated Execution Risk in Langflow
A critical vulnerability in IBM Langflow OSS allows remote actors to execute flows without authentication.
SecurityCritical Auth Bypass in VMware Avi Load
A critical authentication bypass vulnerability has been identified in VMware Avi Load Balancer, documented as CVE-2026-47865.
SecurityGemini Lock Screen Flaw Risks Privacy
A critical authentication bypass in Android allows unauthorized users to send messages via Gemini without requiring a device PIN.
SecurityGrav CMS 2FA Bypass Flaw Discovered
A critical vulnerability in the Grav login plugin allows attackers to bypass two-factor authentication protections.
SecurityGrav Login Plugin Vulnerability Allows Two-Factor Authentication Bypass
A critical flaw in Grav versions before 2.0.4 permits attackers to bypass two-factor authentication by overwriting existing security secrets.
SecurityEnvoy Gateway Authentication Bypass Leads to Secret Disclosure
A critical vulnerability in Envoy Gateway allows attackers to bypass path validation and access sensitive files on the gateway controller pod.
SecurityThe Illusion of Trust: Inside the Gitea Container Exploit
As hackers exploit a critical Gitea Docker flaw, the ease of bypassing authentication exposes the fragility of self-hosted DevOps security.