PT-2026-114859

Authentication bypass vulnerability in Stela, versions prior to 1.60.1, due to the use of a cookie named “authProcess” without validating its integrity. The application stores the user identifier userId and the status of the authentication process validSteps in this cookie and relies on these...

VulnCheck KEV: CVE-2026-103895

The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.5.8 via the mobypasslogin function. This is due to modelayotpprocess short-circuiting the authentication flow before password validation or...

CVE-2026-110924: Incomplete Cleanup

Rejected reason: CVE-2026-110924 has been marked as a duplicate of CVE-2026-106553...

PT-2026-115112

Name of the Vulnerable Software and Affected Versions joserfc versions prior to 1.7.4 Description The deserialize json function in the joserfc.jws module incorrectly handles JWS General JSON Serialization when the signatures array is empty. The verify general json function fails to perform any...

CVE-2026-57183: Improper Authentication

Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, checkApiAuth in src/main/java/com/erudika/scoold/utils/ScooldUtils.java accepts a JWT signed with appsecretkey or parasecretkey for /api/config and /api/stats without requiring a registered API-key jti, and maps the...

PT-2026-115276

Name of the Vulnerable Software and Affected Versions OpenHealth versions prior to 0.2.1 Description Missing authentication and authorization in the '/api/health-data/id' GET, PATCH, and DELETE handlers allow unauthenticated attackers to access medical records. By knowing a HealthData record id, ...

CVE-2026-111312: Missing Authentication for Critical Function

OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /api/health-data/id GET, PATCH and DELETE handlers that query records by id without session or authorId checks. Unauthenticated attackers who know a HealthData record id can read another user's medic...

CVE-2026-45451: Improper Authentication

: Improper Authentication vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only B10 / C10 – UniLogic versions prior to 1.41.329...

Ivanti Connect Secure 25.1.2.2 Authentication Bypass

Ivanti Connect Secure versions 25.1.1.1 and earlier, 25.1.2.2 and earlier, and 22.8R2.4 and earlier contain an authentication bypass vulnerability. This detection tool checks whether the X-DSCGI-PATH header reaches a protected handler without writing to the target...

Mitsubishi Electric GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code CVE-2023-4863, bypass authentication CVE-2026-16436 and CVE-2026-16437, or perform arbitrary operations CVE-2026-16438, resulting in information disclosure, tampering with,...

CVE-2026-101287: Reliance on Cookies without Validation and Integrity Checking

Authentication bypass vulnerability in Stela, versions prior to 1.60.1, due to the use of a cookie named “authProcess” without validating its integrity. The application stores the user identifier userId and the status of the authentication process validSteps in this cookie and relies on these...

TP-Link Wi-Fi Range Extenders Improper Authentication

Multiple TP-Link Wi-Fi range extenders contain an improper authentication issue in the HTTP web-management login flow. The included proof of concept passively captures login traffic and derives alternative credential values that authenticate to the affected device...

Hikvision IP Camera Authentication Bypass

Hikvision IP cameras affected by CVE-2017-7921 allow unauthenticated retrieval of an encrypted configuration file. This proof of concept retrieves and decrypts the file to recover administrator credentials. https://packetstorm.news/download/235867...

pac4j-jwt 6.3.2 Authentication Bypass

pac4j-jwt version 6.3.2 and earlier affected release lines contain an authentication bypass in JwtAuthenticator when processing encrypted JWTs. The proof of concept creates a JWE-wrapped unsigned JWT with arbitrary claims. https://packetstorm.news/download/235858...

CVE-2026-102764: Authentication Bypass by Spoofing

The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance...

Gitea 1.26.2 Reverse Proxy Authentication Bypass

Gitea version 1.26.2 Docker images trust reverse proxy authentication headers from any source, allowing unauthenticated impersonation through X-WEBAUTH-USER. This Docker-based proof of concept provides a CTF environment demonstrating access to a private repository...

Keycloak 26.7.1 Reset Credentials Authentication Bypass

Keycloak versions 26.0.0 through 26.7.1 contain an authentication bypass in the reset-credentials flow that can permit an unauthenticated attacker to set a user's password. https://packetstorm.news/download/235836...

Unity Linux 20.1070e Security Update: tomcat (UTSA-2026-130361)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130361 advisory. Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a client makes a DIGEST...

CVE-2026-19863: Authentication Bypass Using an Alternate Path or Channel

An unauthenticated client may access certain protected resources when using EthereumAuthenticator if the request path contains the configured login path. This is caused by the authenticator using an unanchored substring match when identifying the login page. If the login path appears later within...

UBUNTU-CVE-2026-88834

A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user existence oracle may exist in certain build configurations. An attacker could distinguish existing from non-existing usernames by observing authentication failure behavior. Impact is limite...