EUVD-2026-104581

Craft CMS from 5.0.0 before 5.11.0 contains an authentication bypass vulnerability that allows attackers to reuse verification codes because users/verify-email does not invalidate them for active users. Attackers who obtain a victim's emailed code can submit it to users/set-password after the...

CVE-2026-112775 Craft CMS 5.0.0 before 5.11.0 Verification Code Reuse via users/set-password

Craft CMS from 5.0.0 before 5.11.0 contains an authentication bypass vulnerability that allows attackers to reuse verification codes because users/verify-email does not invalidate them for active users. Attackers who obtain a victim's emailed code can submit it to users/set-password after the...

github.com/getkin/kin-openapi: kin-openapi: Authentication bypass via URL path decoding discrepancy

A flaw was found in kin-openapi. An unauthenticated remote attacker can bypass authentication checks on protected routes by sending requests containing encoded path separators. This issue occurs because the request validation handler inspects the decoded URL path, while certain downstream routers...

CVE-2026-85251

A flaw was found in the Apache Camel HTTP component. This flaw leads to information disclosure when the component is configured to automatically follow HTTP redirects. The client improperly forwards sensitive authentication credentials, such as OAuth bearer tokens and basic authentication...

USN-8934-1 pyjwt vulnerabilities

Kingsley Olukanni discovered that PyJWT did not properly handle unknown key identifiers when retrieving signing keys. An attacker could possibly use this issue to amplify requests to the configured key endpoint, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu...

CVE-2026-84181

CVE-2026-84181 — camel-shiro: authentication bypass via a thread-bound subject Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the Shiro security processor skipped credential verification when the Shiro Subject already bound to the current thread carried the same...

CVE-2026-24061-POC

CVE-2026-24061 - telnetd Authentication Bypass PoC Critical authentication bypass in telnetd leading to RCE as root Affects systems with telnetd versions containing the vulnerability from 2015 onwards About This PoC demonstrates CVE-2026-24061 , a critical authentication bypass vulnerability in...

CVE-2026-105236

A flaw was found in Erlang/OTP. This issue allows a remote attacker to bypass authentication and gain unauthorized access to protected services. When multiple virtual hosts share a listener, the Transport Layer Security TLS session cache does not bind cached sessions to the specific Server Name...

CVE-2024-1709

CVE-2024-1709 A Scanner for CVE-2024-1709 - ConnectWise SecureConnect Authentication Bypass Vulnerability Usage create a "hosts.txt" file within the script's directory and include the hosts you intend to scan in the file. Follow me on social media: X: https://x.com/HussainMFathy LinkedIn:...

CVE-2026-20896-Gitea-Authentication-Bypass

CVE-2026-20896 - Gitea ≤1.26.2 Authentication Bypass 1. What is Gitea? Gitea is a lightweight, open-source Git hosting platform that allows organizations and developers to manage source code repositories, track issues, review changes, and collaborate on software projects. It provides functionalit...

CVE-2026-46455

CVE-2026-46455 — camel-keycloak Missing ISACTIVE Check Expired Tokens Accepted Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-keycloak 4.18.2 Cam...

CVE-2026-6837-zyxel-export-cgi-command-injection

CVE-2026-6837: Zyxel export-cgi PKCS12 Command Injection This repository packages the public writeup, quick verification script, and supporting evidence for CVE-2026-6837. What this is CVE-2026-6837 is a post-authentication command-injection flaw in Zyxel's export-cgi handler. On the...

CVE-2026-18329

A flaw was found in NGINX. When the NGINX JavaScript njs or QuickJS qjs engines process asynchronous request bodies, an exception during access-control evaluation can cause the jsaccess phase to fail open before an explicit denial is returned. An unauthenticated remote attacker can exploit this b...

zyxel-social-login-bypass-cve-2026-8508

CVE-2026-8508: Zyxel Captive-Portal Bypass via Trusted Browser-Submitted Facebook Identity This repository packages the public writeup, quick verification script, and selected supporting artifacts for CVE-2026-8508. What this is CVE-2026-8508 is a pre-authentication trust-boundary flaw in Zyxel...

xss2shell-check

xss2shell-check Non-destructive, dependency-free detector for the CVE-2026-64638 "XSS2Shell" reflection primitive in WordPress wp-login.php. Background CVE-2026-64638 is a pre-authentication reflected XSS in WordPress core , disclosed by PWN.AI on 2026-08-07 CVSS 8.9, CWE-79 and patched in 7.0.3...

CVE-2026-107186

An unauthenticated user can send a DWR request with isPasswordUppercase as one call method and the next call method can be set to a run workflow rule. This allows for workflow rules to be run without authentication...

CVE-2026-107187

A user can access any database details, such as usernames and passwords by sending a DWR request with a specified workflow rule. The authentication bypass vulnerability can be chained with this vulnerability to perform database reads without authentication. Database write and delete operations ma...

CVE-2025-13591

The authentication endpoint of WSO2 Identity Server fails to provide a consistent system response when a username does not exist in the system, allowing attackers to differentiate between valid and invalid usernames. This difference in responses can be leveraged to enumerate existing user account...

CVE-2026-73678-PoC

CVE-2026-73678 — MindsDB Minds Platform Unauthenticated RCE CVSS 10.0 CVSS 10.0 Critical · CWE-94 / CWE-306 · GHSA-jcxw-h8ph-pxpv · VulnCheck Summary Minds Platform the open-source backend of mindsdb/mindshub, previously mindsdb/minds-platform exposes POST /api/v1/responses/ an OpenAI-compatible...

GHSA-J7H2-66J4-GHJF A russh SSH server accepts a publickey authentication whose signature uses a different algorithm than the one named in the request

Details In russh/src/server/encrypted.rs, serverreadauthrequestpk 0.63.3, around lines 880-990: The requested algorithm name pubkeyalgo is read and only used to decode the key: PublicKeyOrCertificate::decode&pubkeyalgo, &pubkeykey. The derived hashalg is then dropped...