CVE-2026-107813 Nginx UI: Incomplete fix of CVE-2026-84315 - the api/cluster router was not - wrapped in RequireSecureSession, so those sensitive mutations run without OTP step-up

Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, the api/cluster router exposes node and namespace mutation operations and cluster-wide Nginx reload or restart operations with AuthRequired but without RequireSecureSession. An authenticated OTP-enabled user...

CVE-2019-13496

CVE-2019-13496 漏洞利用标题：OTP绕过（文件完整性检查缺失） 日期：2019年10月7日 漏洞利用作者：Furqan Khan 厂商主页：https://www.oneidentity.com/ 软件链接：https://www.oneidentity.com/products/cloud-access-manager/ 版本：8.1.3 测试环境：Kali Linux, Windows 7, Ubuntu 16.04 要利用OTP绕过漏洞，攻击者需借助先前发现的MITM/SSL-Strip漏洞 CVE-2019-13498 ， CVE-2019-13498...

CVE-2026-4894

A vulnerability has been identified regarding insufficient validation in the Frappe Cloud/ERPNext authentication process, which allows multiple email addresses to be accepted by manipulating the email field in the /api/method/press.api.account.signup endpoint. The vulnerability occurs when an...

EUVD-2026-94811

A vulnerability has been identified regarding insufficient validation in the Frappe Cloud/ERPNext authentication process, which allows multiple email addresses to be accepted by manipulating the email field in the /api/method/press.api.account.signup endpoint. The vulnerability occurs when an...

CVE-2026-11387

CVE-2026-11387 — SMS Alert ≤ 3.9.5 ☆ 未认证权限提升 — 通过任意密码重置 ☆ === Beelze === 📋 漏洞信息 字段| 详情 ---|--- CVE ID| CVE-2026-11387 CVSS 评分| 9.8 严重 CVSS 向量| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 类型| 缺少身份验证 / OTP 绕过 插件| SMS Alert – WooCommerce OTP 验证 sms-alert 受影响版本| ≤ 3.9.5 修复版本| 3.9.6 发布年份| 2026 PoC 作者...

CVE-2026-7458

🧨 CVE-2026-7458 – Bypass de OTP en PickPlugins User Verification Omisión de autenticación sin autenticación previa mediante comparación débil en la API REST de verificación OTP PickPlugins User Verification ≤ 2.0.46 📖 Descripción El plugin User Verification de PickPlugins para WordPress versiones...

Exploit for CVE-2026-14281

LANGZ Scanner + Exploit Mass scanner + single-target Exploi...

CVE-2026-96445 Keycloak-services: keycloak-services: conditional otp skip-header policy evaluated against untrusted proxy headers

A flaw was found in the Conditional OTP authenticator of Keycloak, an identity and access management solution. The issue occurs when the system evaluates specific HTTP headers to determine if a one-time password OTP should be skipped, but fails to verify if those headers came from a trusted sourc...

EUVD-2026-85223

A flaw was found in the Conditional OTP authenticator of Keycloak, an identity and access management solution. The issue occurs when the system evaluates specific HTTP headers to determine if a one-time password OTP should be skipped, but fails to verify if those headers came from a trusted sourc...

CVE-2026-96445 Keycloak-services: keycloak-services: conditional otp skip-header policy evaluated against untrusted proxy headers

A flaw was found in the Conditional OTP authenticator of Keycloak, an identity and access management solution. The issue occurs when the system evaluates specific HTTP headers to determine if a one-time password OTP should be skipped, but fails to verify if those headers came from a trusted sourc...

CVE-2026-94379 MISP: HTTP Method Bypass of Login Security Controls (Bruteforce Protection and Email OTP)

The login function in MISP's UsersController.php contained insufficient HTTP method validation for several security-critical code paths. The original code used an allowlist approach, checking only for specific HTTP methods POST and PUT before enforcing bruteforce protection, email one-time-passwo...

CVE-2026-6223 OTP Bypass in Bahçelievler Muncipality's BiHayat App

Improper restriction of excessive authentication attempts vulnerability in Bahçelievler Muncipality BiHayat App allows Authentication Bypass. This issue affects BiHayat App: from 2.1.7 through 07092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2026-6223 OTP Bypass in Bahçelievler Muncipality's BiHayat App

Improper restriction of excessive authentication attempts vulnerability in Bahçelievler Muncipality BiHayat App allows Authentication Bypass. This issue affects BiHayat App: from 2.1.7 before 2.3...

CVE-2026-6223

CVE-2026-6223 is a CRITICAL (CVSS 9.4) improper restriction of excessive authentication attempts vulnerability in the Bahçelievler Municipality BiHayat App (versions 2.1.7 through 07092026), allowing an OTP bypass that leads to full authentication bypass. The vector is network-based with no privi...

CVE-2026-85237: Improper Restriction of Excessive Authentication Attempts

A vulnerability in MISP's email-based one-time password OTP authentication flow allowed an attacker to perform an unrestricted number of OTP verification attempts. The emailotp endpoint did not apply brute-force protection when validating submitted OTP values. An attacker who had reached the OTP...

PT-2026-69468

Name of the Vulnerable Software and Affected Versions fastschema versions prior to 0.15.2 Description A time-of-check/time-of-use TOCTOU race condition occurs in the account recovery flow. This issue allows an unauthenticated remote attacker to bypass the One-Time Password OTP attempt limit,...

PT-2026-68559

Name of the Vulnerable Software and Affected Versions OTP Login With Phone Number versions prior to 1.8.71 Description The OTP Verification plugin for WordPress allows unauthenticated attackers to perform a brute force attack to bypass the One-Time Password OTP verification process during login...

CVE-2026-14309 Chat On Desk < 1.0.9 - Unauthenticated Account Takeover via Password Reset OTP Bypass

The Chat On Desk Order Notifications WordPress plugin before 1.0.9 does not verify that the one-time password has been validated before processing a password-reset request, allowing unauthenticated attackers to reset the password of arbitrary users, including administrators, and take over their...

CVE-2026-12695

The miniOrange 2FA WordPress plugin before 6.2.6 does not validate the submitted one-time password against the targeted user's stored secret, instead verifying it against an attacker-supplied value, allowing an unauthenticated attacker who knows a victim's password to bypass two-factor...

CVE-2026-8285 OTP Bypass in Universal Sotware's FlexCity

Improper restriction of excessive authentication attempts vulnerability in Universal Software Inc. FlexCity allows Excessive Allocation. This issue affects FlexCity: from 5.536.0 before 5.542.0...