PT-2026-114166

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.83 n8n versions prior to 2.41.4 n8n versions prior to 2.42.1 Description An authentication bypass exists due to dynamic-path webhook resolution matching requests based solely on the path, ignoring the server-generat...

PT-2026-114176

Name of the Vulnerable Software and Affected Versions Better Auth versions 1.4.0-beta.18 through 1.7.6 Description An authentication bypass allows unauthenticated attackers to sign in as other users by reusing OAuth state values as Magic Link tokens. An attacker can initiate an OAuth sign-in...

CVE-2026-100169: Improper Authentication

Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.presociallogin in...

CVE-2026-93635: Improper Neutralization of Special Elements used in an LDAP Query

LDAP filter injection in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to alter external LDAP search filters. On domains using search-filter authentication and lazy provisioning, this creates a password oracle for external directory users. Authenticated S/MIME...

CVE-2026-73535: Missing Critical Step in Authentication

Gitea's OpenID connect handler accepts a user's password without enforcing enrolled TOTP or WebAuthn verification before completing sign-in and linking an OpenID identifier. When OpenID sign-in is enabled, an attacker who knows the victim's password can obtain a session and link an...

PT-2026-114287

Name of the Vulnerable Software and Affected Versions KEDA versions prior to 2.21.0 Description A namespace administrator can exploit a flaw by creating TriggerAuthentication and ScaledObject resources, setting the hashiCorpVault.address to a tenant-controlled endpoint and selecting Kubernetes...

PT-2026-113807

Name of the Vulnerable Software and Affected Versions Junos OS affected versions not specified Junos OS Evolved affected versions not specified Description An improper authentication issue exists in the J-Web management interface and NETCONF session handling. This flaw allows an unauthenticated...

VulnCheck KEV: CVE-2025-41450

Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2...

CVE-2026-89070: Authentication Bypass by Capture-replay

Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer OIDC module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

PT-2026-114322

Name of the Vulnerable Software and Affected Versions MOVEit Transfer versions prior to 2025.1.6 MOVEit Transfer versions 2026.0.0 through 2026.0.3 Description An authentication bypass exists in the OIDC module due to a capture-replay flaw. Approximately 1,700 instances have been identified...

CVE-2026-104108: Improper Authentication

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise maps an authenticated OIDC identity to a local account using mutable preferredusername or email claims and does not require emailverified for email-based naming. An...

Active Directory Domain Services Code Execution

The vulnerability of Active Directory Domain Services for Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

PT-2026-114425

Name of the Vulnerable Software and Affected Versions curl versions prior to 8.23.0-1.1 Description When processing an HTTP redirect to a URL containing userinfo a username:password component, curl may incorrectly retain and re-transmit the HTTP Negotiate authentication state from the original...

PT-2026-114270

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description The OpenID connect handler allows a user's password to be accepted without requiring enrolled TOTP Time-based One-Time Password or WebAuthn verification before completing the sign-in process an...

PT-2026-114360

Three critical authentication bypass flaws in Bisheng open-source LLM DevOps platform allow unauthenticated attackers to gain full admin control and expose cross-user data. Technical Breakdown: - CVE-2026-96679 Legacy SSO Bypass: The POST /user/sso endpoint accepts arbitrary usernames in JSON...

CVE-2026-109969: Missing Authentication for Critical Function

A flaw was found in the clevis PKCS11 pin. The clevis-pkcs11-afunix-socket-unlock daemon creates AFUNIX sockets without explicit permission restrictions or peer credential verification. Under a permissive process umask, any local user can connect to the control socket and inject arbitrary...

PT-2026-113609

Name of the Vulnerable Software and Affected Versions Abandoned Cart Pro for WooCommerce versions prior to 10.8.1 Description An authentication bypass exists due to the use of MAC-free AES-CTR encryption for cart-recovery link tokens. The 8-byte CTR nonce is stored within the ciphertext blob, and...

PT-2026-114352

Name of the Vulnerable Software and Affected Versions F5 NGINX Kubernetes Ingress Controller versions 5.5.0 through 5.6.x Description An authentication and authorization bypass exists when the system is configured with the ExternalAuth policy or Ingress external authentication. The controller...

PT-2026-114073

Komodo through 2.3.3 contains an authentication bypass vulnerability in the Periphery agent that allows unauthenticated attackers to connect as a trusted Core because empty core public keys and passkeys lists fail open by default. Attackers reaching port 8120 can present any generated keypair to...

CVE-2026-57489: Authentication Bypass by Spoofing

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise deployments with AUTHBYPASS enabled trust the configured reverse-proxy identity header without verifying that the request originated from FRTRUSTEDPROXIES. When the...