39 New Methods That Compromise Passkey Authentication
More on Authentication
Other advisories
- MediumCVE-2026-116193Rclone 1.64.0 before 1.75.2 serve webdav Authentication Bypass via OPTIONS Requests
- LowCVE-2026-115362OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Expired AppRole SecretID Authentication Bypass
- HighCVE-2026-90797Apache CouchDB: Pre-authentication gzip decompression bomb via POST /_session
- HighCVE-2026-111739Two Factor Authentication: Sicherheitslücke
- HighCVE-2026-111739Two Factor Authentication: Sicherheitslücke
- Not ratedosv:CVE-2026-61569AVideo-Encoder: pre-authentication streamer-login SQL injection
- Not ratedosv:CVE-2026-61571AVideo-Encoder: missing authentication on control and status endpoints
- Not ratedosv:CVE-2026-118690Signal K Server before 2.33.0 Missing Authentication via /skServer/ziplogs
Other news entries
- Microsoft urges Entra ID admins to migrate users to passkeysNewsBleepingComputer
- Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security PatchNewsThe Hacker News
- American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign ExposedNewsThe Hacker News
- HPE Patches Dozens of Critical Flaws in Networking ProductsNewsSecurityWeek
- Malicious downloads can trick AI coding agents into compromising themselvesNewsCSO Online
- Dual BIOS: The laptop security feature SMBs don’t know they needNewsCSO Online
- HPE patches eight max severity RCE and auth bypass AOS flawsNewsBleepingComputer
- Cisco Patches 34 Vulnerabilities Across Multiple ProductsNewsSecurityWeek
ID