The vulnerability of the Karapace interface for Kafka REST, related to bypassing the authentication process by using an alternative path or channel, allows attackers to circumvent existing security restrictions and gain read-write access to data.

The vulnerability of the Karapace interface for Kafka REST relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions and gain read-write access to data...

The vulnerability of the compatibility package for Microsoft Azure Entra ID allows a perpetrator to circumvent the authentication process by using an alternative path or channel, thereby allowing them to increase their privileges.

The vulnerability of the compatibility package for Microsoft Azure Entra ID involves bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor to gain increased privileges...

ROS-20260908-73-0020

The vulnerability in pki-core relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

The vulnerability of the built-in mobile security firewall, Ivanti Sentry, relates to bypassing authentication using an alternative path or channel. This allows a intruder to elevate their privileges and gain full access to the device.

The vulnerability of the built-in mobile security firewall, Ivanti Sentry, relates to bypassing authentication using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to enhance their privileges and gain full access to the device...

The vulnerability of the Prisma Access Agent, a user remote access agent for corporate resources and applications, stems from improper protection of the alternative path. This allows attackers to circumvent existing security restrictions.

The vulnerability of the Prisma Access Agent, a user-level remote access agent for corporate resources and applications, is related to improper protection of the alternative path. Exploiting this vulnerability allows an attacker to circumvent existing security restrictions...

ROS-20260610-73-0022

The vulnerability in Thunderbird relates to exploiting an authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions without being detected...

ROS-20260529-73-0012

The vulnerability of HashiCorp’s Vault Community Edition and Vault Enterprise, platforms for archiving corporate information, lies in the ability to bypass authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to cause service interruptions...

The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from the ability to bypass authentication by using an alternative path or channel. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to...

The vulnerability of HashiCorp’s Vault Community Edition and Vault Enterprise, a platform for archiving corporate information, lies in their susceptibility to being bypassed through the use of an alternative authentication method or channel. This allows attackers to trigger a service failure.

The vulnerability of HashiCorp’s Vault Community Edition and Vault Enterprise, platforms for archiving corporate information, lies in the ability to bypass authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to cause service interruptions...

The vulnerability of the Liebert UNITY communication and device management platform and the Liebert RDU101 communication card, related to bypassing the authentication process through an alternative path or channel, allows a perpetrator to circumvent existing security restrictions.

The vulnerability of the Liebert UNITY communication and device management platform, as well as the Liebert RDU101 communication card, lies in the ability to bypass authentication by using an alternative path or channel. Exploiting this vulnerability allows a remote attacker to circumvent existin...

EUVD-2026-13310

OpenClaw versions prior to 2026.2.26 server-http contains an authentication bypass vulnerability in gateway authentication for plugin channel endpoints due to path canonicalization mismatch between the gateway guard and plugin handler routing. Attackers can bypass authentication by sending reques...

The vulnerability of the Azure Connected Machine Agent, a software tool for managing servers and virtual machines, relates to bypassing authentication by using an alternative path or channel. This allows attackers to escalate their privileges.

The vulnerability of the Azure Connected Machine Agent, a software tool for managing servers and virtual machines, relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Ivanti Endpoint Manager software management tool relates to bypassing authentication by using an alternative path or channel. This allows a perpetrator to disclose authentication credentials.

The vulnerability of the Ivanti Endpoint Manager software management tool relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor to disclose authentication credentials...

The vulnerability of the centralized management system, Multi-Stack Controller (MSC), related to bypassing authentication by using an alternative path or channel, allows attackers to circumvent existing security mechanisms.

The vulnerability of the centralized management system, the Multi-Stack Controller MSC, relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent existing security mechanisms remotely...

The vulnerability of the microprogrammed software of the DVP-12SE11T controllers, related to bypassing authentication using an alternative path or channel, allows a perpetrator to circumvent security restrictions.

The vulnerability of the DVP-12SE11T controller’s microprogramming software relates to the ability to bypass authentication using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions from a remote location...

The vulnerability of the OwnID Passwordless Login plugin of the WordPress content management system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the OwnID Passwordless Login plugin in the WordPress content management system involves bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to bypassing authentication using an alternative path or channel, allows attackers to circumvent security restrictions.

The vulnerability of the Git-based software platform for collaborative code development on GitLab relates to bypassing authentication using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions from a remote location...

The vulnerability of the TrueConf Server software lies in its ability to bypass the authentication process by using an alternative path or channel. This allows a perpetrator to execute certain requests to the application programming interface (API).

The vulnerability of the TrueConf Server software relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to execute certain requests to the application programming interface API remotely...

The vulnerability of the Apache Tomcat application server arises from bypassing the authentication process by using an alternative path or channel, allowing attackers to compromise the confidentiality of the protected information.

The vulnerability of the Apache Tomcat application server arises from bypassing authentication procedures by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of the protected information...

The vulnerability of the Broker VM component in the Cortex XDR security platform, related to improper protection of the alternative path, allows a perpetrator to disclose protected information.

The vulnerability of the Broker VM component in the Cortex XDR security platform is related to improper protection of the alternative path. Exploiting this vulnerability can allow an attacker to disclose protected information...