Karapace Kafka REST Authentication Bypass

The vulnerability of the Karapace interface for Kafka REST relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions and gain read-write access to data...

Microsoft Azure Entra ID Compatibility Package Privilege Bypass

The vulnerability of the compatibility package for Microsoft Azure Entra ID involves bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor to gain increased privileges...

ROS-20260908-73-0020

The vulnerability in pki-core relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

Ivanti Sentry Authentication Bypass Privilege Escalation

The vulnerability of the built-in mobile security firewall, Ivanti Sentry, relates to bypassing authentication using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to enhance their privileges and gain full access to the device...

Prisma Access Agent Improper Protection

The vulnerability of the Prisma Access Agent, a user-level remote access agent for corporate resources and applications, is related to improper protection of the alternative path. Exploiting this vulnerability allows an attacker to circumvent existing security restrictions...

ROS-20260610-73-0022

The vulnerability in Thunderbird relates to exploiting an authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions without being detected...

ROS-20260529-73-0012

The vulnerability of HashiCorp’s Vault Community Edition and Vault Enterprise, platforms for archiving corporate information, lies in the ability to bypass authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to cause service interruptions...

GitLab Authentication Bypass

The vulnerability of the Git-based software platform for collaborative code development on GitLab relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to...

HashiCorp Vault Authentication Bypass DoS

The vulnerability of HashiCorp’s Vault Community Edition and Vault Enterprise, platforms for archiving corporate information, lies in the ability to bypass authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to cause service interruptions...

Liebert UNITY Device Management Bypass Authentication

The vulnerability of the Liebert UNITY communication and device management platform, as well as the Liebert RDU101 communication card, lies in the ability to bypass authentication by using an alternative path or channel. Exploiting this vulnerability allows a remote attacker to circumvent existin...

EUVD-2026-13310

OpenClaw versions prior to 2026.2.26 server-http contains an authentication bypass vulnerability in gateway authentication for plugin channel endpoints due to path canonicalization mismatch between the gateway guard and plugin handler routing. Attackers can bypass authentication by sending reques...

Azure Connected Machine Agent Auth Bypass

The vulnerability of the Azure Connected Machine Agent, a software tool for managing servers and virtual machines, relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability can allow attackers to enhance their privileges...

Ivanti Endpoint Manager Authentication Bypass Info Disclosure

The vulnerability of the Ivanti Endpoint Manager software management tool relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor to disclose authentication credentials...

Multi-Stack Controller Authentication Bypass

The vulnerability of the centralized management system, the Multi-Stack Controller MSC, relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent existing security mechanisms remotely...

DVP-12SE11T Controllers Authentication Bypass

The vulnerability of the DVP-12SE11T controller’s microprogramming software relates to the ability to bypass authentication using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions from a remote location...

OwnID Passwordless Login Plugin Data Compromise

The vulnerability of the OwnID Passwordless Login plugin in the WordPress content management system involves bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of...

GitLab Authentication Bypass

The vulnerability of the Git-based software platform for collaborative code development on GitLab relates to bypassing authentication using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions from a remote location...

TrueConf Server Authentication Bypass

The vulnerability of the TrueConf Server software relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to execute certain requests to the application programming interface API remotely...

PT-2025-62968

Уязвимость виртуального контроллера Enlogic SCADA-системы «ЭНТЕК» связана с обходом аутентификации посредством использования альтернативного пути или канала. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, обойти существующие механизмы безопасности...

Apache Tomcat Auth Bypass

The vulnerability of the Apache Tomcat application server arises from bypassing authentication procedures by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of the protected information...