-CVE-2022-22954-scanner

CVE-2022-22954-scanner Vulnerability Introduction VMware Workspace ONE Access formerly VMware Identity Manager enables employees to accelerate access to SaaS, web, and native mobile applications through multi-factor authentication, conditional access, and single sign-on. Affected versions: VMware...

CVE-2024-10924-PoC

PoC Authentication Bypass MFA Really Simple Security WordPress Plugin | CVE-2024-10924 We access the WordPress web page where we will see that it has MFA enabled through the vulnerable plugin: We must run the PoC and provide the login credentials: Automatically, the browser will open via a...

CVE-2026-119682

An improper access control vulnerability exists in the multi-factor authentication MFA functionality of ManageEngine SharePoint Manager Plus SPMP. A low-privileged authenticated user can bypass authorization checks to read and modify MFA configuration settings, enable or disable MFA for the...

EUVD-2026-114085

An improper access control vulnerability exists in the multi-factor authentication MFA functionality of ManageEngine SharePoint Manager Plus SPMP. A low-privileged authenticated user can bypass authorization checks to read and modify MFA configuration settings, enable or disable MFA for the...

CVE-2026-119682: ManageEngine SharePoint Manager Plus: An improper access control vulnerability exists in the multi-factor authentication (MFA) functionality of ManageEngine…

An improper access control vulnerability exists in the multi-factor authentication MFA functionality of ManageEngine SharePoint Manager Plus SPMP. A low-privileged authenticated user can bypass authorization checks to read and modify MFA configuration settings, enable or disable MFA for the...

Efficient Cross-Domain Multi-Factor Authentication

Secure cross-domain authentication is crucial for protecting information exchange across terminals in different security domains. However, existing cross-domain authentication models suffer from inflexibility, high storage and computational consumption. In response to these problems, a cross-doma...

CVE-2026-55186

In CMS 5, the password reset flow let a user with multi-factor authentication enabled change their password and get a logged-in session before completing multi-factor authentication. Exploiting this requires access to the user's email account. CMS 6 is not affected...

CVE-2026-90862 Web Transfer Module Multi-Factor Authentication Bypass in Progress WS_FTP Server

Improper authentication in the Web Transfer Module of Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an attacker with a user’s password to access certain files associated with that account without satisfying multi-factor authentication requirements...

CVE-2026-90862 Web Transfer Module Multi-Factor Authentication Bypass in Progress WS_FTP Server

Improper authentication in the Web Transfer Module of Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an attacker with a user’s password to access certain files associated with that account without satisfying multi-factor authentication requirements...

CVE-2026-90862

Progress Software WS_FTP Server on Windows (versions prior to 2024.0.7 and 2025.0.4 ) is vulnerable to improper authentication within the Web Transfer Module . An attacker possessing a user's password could access specific files associated with that account by bypassing multi-factor authenticatio...

PT-2026-133259

Name of the Vulnerable Software and Affected Versions Silverstripe MFA versions prior to 6.0.0 Description In the CMS 5 password reset flow, a logged-in session can be issued after a user changes their password but before the configured multi-factor authentication challenge is completed. This...

PT-2026-133237

Impact In CMS 5, the password reset flow let a user with multi-factor authentication enabled change their password and get a logged-in session before completing multi-factor authentication. Exploiting this requires access to the user's email account. CMS 6 is not affected...

Progress Software WS_FTP Server authorization issue vulnerability

Versions prior to Progress Software WSFTP Server 2024.0.6 and 2025.0.3 contain an authorization issue vulnerability. This vulnerability stems from improper association of authentication factors between accounts within the SSH component, potentially allowing authenticated users to bypass...

CVE-2026-107671

A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally before completing MFA verification...

CVE-2026-107671

A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally before completing MFA verification...

Vulnerabilities Resolved in Veeam ONE 13.1 Patch 1

Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we operate a Vulnerability Disclosure Program VDP for all Veeam products and perform extensive internal code audits. When a vulnerability is...

PT-2026-126656

A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally before completing MFA verification...

Veeam ONE < 13.1.0.7940 (kb4951)

The version of Veeam ONE installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the kb4951 advisory. - A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it...

Developing a Dynamic Multi-Factor Authentication System for Securing Smart Organizations

As smart organizations increasingly rely on technologies like AI, big data, and IoT, securing these systems is crucial. This research introduces a dynamic multi-factor authentication MFA system within the Zero Trust Architecture ZTA framework, which enforces continuous verification. The system...

CVE-2026-107671: Authentication Bypass Using an Alternate Path or Channel

A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally before completing MFA verification...