1438 matches found
-CVE-2022-22954-scanner
CVE-2022-22954-scanner Vulnerability Introduction VMware Workspace ONE Access formerly VMware Identity Manager enables employees to accelerate access to SaaS, web, and native mobile applications through multi-factor authentication, conditional access, and single sign-on. Affected versions: VMware...
CVE-2026-19868
An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication MFA...
CVE-2026-19868
An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication MFA...
CVE-2026-19868
The SonicOS SSLVPN service is affected by an authentication enforcement vulnerability (CVE-2026-19868 ) that allows users with valid credentials for an alternate authentication method to bypass SAML authentication controls . This can also lead to the bypass of SAML-enforced multi-factor authentic...
EUVD-2026-118429
An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication MFA...
CVE-2026-55167
A flaw was found in LDAP Account Manager. This vulnerability allows an authenticated user to bypass multi-factor authentication replay protections by reusing an existing challenge response. Because the application fails to invalidate Web Authentication WebAuthn challenges stored in the active...
PT-2026-138414
Name of the Vulnerable Software and Affected Versions SonicOS Gen7 versions prior to 7.3.4-7013 SonicOS Gen8 versions prior to 8.2.3-8015 Description An authentication enforcement issue in the SonicOS SSLVPN service allows a user with valid credentials for an alternate authentication method to...
CVE-2026-55186
Silverstripe MFA provides multi-factor authentication for Silverstripe CMS. Prior to 6.0.0, the CMS 5 password reset flow can issue a logged-in session after a user changes a password but before the user's configured multi-factor authentication challenge is completed. An attacker with access to t...
Silverstripe CMS Silverstripe Framework authorization issue vulnerability
Silverstripe CMS Silverstripe Framework versions prior to 6.0.0 contain an authorization issue vulnerability. This vulnerability arises because the CMS 5 password reset process issues logged-in sessions after a user changes their password but before completing the multi-factor authentication...
CVE-2026-119682
An improper access control vulnerability exists in the multi-factor authentication MFA functionality of ManageEngine SharePoint Manager Plus SPMP. A low-privileged authenticated user can bypass authorization checks to read and modify MFA configuration settings, enable or disable MFA for the...
EUVD-2026-114085
An improper access control vulnerability exists in the multi-factor authentication MFA functionality of ManageEngine SharePoint Manager Plus SPMP. A low-privileged authenticated user can bypass authorization checks to read and modify MFA configuration settings, enable or disable MFA for the...
CVE-2026-119682: ManageEngine SharePoint Manager Plus: An improper access control vulnerability exists in the multi-factor authentication (MFA) functionality of ManageEngine…
An improper access control vulnerability exists in the multi-factor authentication MFA functionality of ManageEngine SharePoint Manager Plus SPMP. A low-privileged authenticated user can bypass authorization checks to read and modify MFA configuration settings, enable or disable MFA for the...
Efficient Cross-Domain Multi-Factor Authentication
Secure cross-domain authentication is crucial for protecting information exchange across terminals in different security domains. However, existing cross-domain authentication models suffer from inflexibility, high storage and computational consumption. In response to these problems, a cross-doma...
CVE-2026-90862
Progress Software WS_FTP Server on Windows (versions prior to 2024.0.7 and 2025.0.4 ) is vulnerable to improper authentication within the Web Transfer Module . An attacker possessing a user's password could access specific files associated with that account by bypassing multi-factor authenticatio...
CVE-2026-90862 Web Transfer Module Multi-Factor Authentication Bypass in Progress WS_FTP Server
Improper authentication in the Web Transfer Module of Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an attacker with a user’s password to access certain files associated with that account without satisfying multi-factor authentication requirements...
CVE-2026-90862 Web Transfer Module Multi-Factor Authentication Bypass in Progress WS_FTP Server
Improper authentication in the Web Transfer Module of Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an attacker with a user’s password to access certain files associated with that account without satisfying multi-factor authentication requirements...
PT-2026-133259
Name of the Vulnerable Software and Affected Versions Silverstripe MFA versions prior to 6.0.0 Description In the CMS 5 password reset flow, a logged-in session can be issued after a user changes their password but before the configured multi-factor authentication challenge is completed. This...
PT-2026-133237
Impact In CMS 5, the password reset flow let a user with multi-factor authentication enabled change their password and get a logged-in session before completing multi-factor authentication. Exploiting this requires access to the user's email account. CMS 6 is not affected...
Progress Software WS_FTP Server authorization issue vulnerability
Versions prior to Progress Software WSFTP Server 2024.0.6 and 2025.0.3 contain an authorization issue vulnerability. This vulnerability stems from improper association of authentication factors between accounts within the SSH component, potentially allowing authenticated users to bypass...