CVE-2025-13591: Observable Discrepancy

The authentication endpoint of WSO2 Identity Server fails to provide a consistent system response when a username does not exist in the system, allowing attackers to differentiate between valid and invalid usernames. This difference in responses can be leveraged to enumerate existing user account...

PT-2026-117322

Name of the Vulnerable Software and Affected Versions Apache Answer versions prior to 2.0.3 Description An authentication bypass exists in the reaction API endpoint. The system fails to enforce content visibility controls, which allows unauthorized users to read reaction metadata from restricted...

PT-2026-117488

Name of the Vulnerable Software and Affected Versions WSO2 Identity Server affected versions not specified Description The authentication endpoint fails to provide a consistent system response when a username does not exist, allowing attackers to differentiate between valid and invalid usernames...

ROS-20261019-73-0056

The vulnerability in Nomad is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2026-107186: Improper Authentication

An unauthenticated user can send a DWR request with isPasswordUppercase as one call method and the next call method can be set to a run workflow rule. This allows for workflow rules to be run without authentication...

Apache Camel 4.22.0 Shiro Authentication Bypass

Apache Camel version 4.22.0 camel-shiro contains an authentication bypass when a thread-bound Shiro subject has the same principal as a later exchange, allowing its presented credentials to evade verification. This proof of concept demonstrates the issue. https://packetstorm.news/download/236339...

PT-2026-117662

TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerability in the DS JSON API. A crafted JSON request containing both a protected operation and public onboarding-related fields may cause module-level authorization checks to be applied inconsistently, allowing protected camera...

CVE-2026-86589: Incorrect Implementation of Authentication Algorithm

Incorrect implementation of authentication algorithm vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. A flaw in the User Center login integration can cause a newly created external user session to omit its external identity, allowing subsequent requests to bypass...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : RabbitMQ Server vulnerabilities (USN-8933-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8933-1 advisory. It was discovered that RabbitMQ Server incorrectly handled CORS wildcard origin configuration...

Microsoft Bookings Authentication Bypass Privilege Escalation

The vulnerability of the Microsoft Bookings application for scheduling, online customer records, and meetings involves exploiting authentication using a user-controlled key. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...

Microsoft SharePoint Server Auth Bypass Info Disclosure

The vulnerability in the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...

GitLab Authentication Bypass

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

GitLab Authentication Bypass Info Disclosure

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Active Directory Federation Services Spear Phishing

The vulnerability of the Active Directory Federation Services ADFS for Windows operating systems is related to the ability to bypass authentication through spoofing. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks remotely...

Azure App Service for Linux Authentication Bypass RCE

The vulnerability of the Azure App Service for Linux platform for deploying, scaling, and administering web applications is related to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Azure Event Grid Broker Spoofing

The vulnerability of Azure Event Grid brokers is related to deficiencies in the authentication process. Exploiting this vulnerability could allow attackers to carry out spoofing attacks remotely...

GitLab Authentication Bypass File Upload

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to upload arbitrary files remotely...

GitLab Authentication Bypass Info Disclosure

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

PostgreSQL PgBouncer Authentication Bypass

The vulnerability of the PostgreSQL PgBouncer connection pool software is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms and gain unauthorized access to the system...

Navigation section of Microsoft

The vulnerability in the Navigation section of Microsoft Edge and Google Chrome browsers is related to improper authorization. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...