NewsFortinet PSIRT
Authentication bypass
More on Authentication
Other advisories
- Not ratedCVE-2026-123046The SEOJuice WordPress plugin before 2.12.0 does not correctly restrict a REST API authentication filter, disabling WordPress's REST nonce protection for the…
- Not ratedosv:CLEANSTART-2026-YX72294go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP
- LowCVE-2026-5514IBM Bob 2.0.3 allows unauthorized extensions to retrieve session tokens via the authentication provider API. The token is exposed in the account identifier f…
- HighCVE-2026-124679Authentication bypass by spoofing vulnerability in Apache APISIX.
- MediumCVE-2026-124666Authentication bypass by spoofing vulnerability in Apache APISIX.
- LowCVE-2026-124719Authentication bypass by spoofing vulnerability in Apache APISIX.
- MediumCVE-2026-129152SurveyKing 1.12.0 through 1.13.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to submit survey responses because Ans…
- CriticalCVE-2026-129161Dromara free-fs 2.0.1 through 2.3.1 contains an improper restriction of authentication attempts vulnerability that allows unauthenticated attackers to brute-…
Other news entries
- New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM AccessNewsThe Hacker News
- Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication BypassNewsThe Hacker News
- Exploit Attempts for GPUStack Authentication Bypass (CVE-2026-102895), (Thu, Nov 12th)NewsSANS ISC Diary
- Hackers Deploy Malware in Fresh ScreenConnect CampaignNewsSecurityWeek
- Critical Xen Orchestra Flaws Exploited in AttacksNewsSecurityWeek
- Railway breach leads to $740,000 in fraudulent AI chargesNewsBleepingComputer
- Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin AccessNewsThe Hacker News
- Critical Xen Orchestra auth bypass flaw exploited to hijack VM serversNewsBleepingComputer
Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-271
ID