CVE-2022-43704

CVE-2022-43704 - Channel Accessible by Non-Endpoint/Authentication Bypass by Capture-replay Sinilink XY-WFTX Wifi Remote Thermostat Module Temperature Controller Title Product Documentation Application User Manual Hardware Datasheets ESP8285 Buck Converter Firmware Product Description Overview WI...

CVE-2022-29593

CVE-2022-29593 - Authentication Bypass by Capture Replay Dingtian-DT-R002 Title Authentication Bypass by Capture-replay Published: Version: 1.0 Vendor: Shenzhen Dingtian Technologies Co.,Ltd Product: 2 Channel Relay Board/Relay Card Version affected: Firmware V3.1.276A Product - Dingtian DTR004 A...

CVE-2026-87952

Authentication Bypass by Capture-replay vulnerability in Drupal SAML SSO - Service Provider allows Remote Services with Stolen Credentials. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0...

CVE-2026-87952 SAML SSO - Service Provider - Moderately critical - Insufficient replay protection - SA-CONTRIB-2026-150

Authentication Bypass by Capture-replay vulnerability in Drupal SAML SSO - Service Provider allows Remote Services with Stolen Credentials. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0...

CVE-2026-87952

The SAML SSO - Service Provider module for Drupal (versions 0.0.0 to 3.2.0 ) contains an authentication bypass vulnerability due to insufficient replay protection . The module fails to adequately prevent the reuse of previously accepted SAML assertions . This allows an attacker to replay a valid ...

CVE-2026-87952 SAML SSO - Service Provider - Moderately critical - Insufficient replay protection - SA-CONTRIB-2026-150

Authentication Bypass by Capture-replay vulnerability in Drupal SAML SSO - Service Provider allows Remote Services with Stolen Credentials. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0...

EUVD-2026-107849

Authentication Bypass by Capture-replay vulnerability in Drupal SAML SSO - Service Provider allows Remote Services with Stolen Credentials. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0...

CVE-2026-103314: Authentication Bypass by Capture-replay

A flaw was found in Red Hat Advanced Cluster Security for Kubernetes RHACS. The Central SAML authentication ACS endpoint does not retain used SAML assertion or response identifiers to prevent replay. An attacker who obtains a valid, unexpired signed SAML response can submit it multiple times and...

Unity Linux 20.1070e Security Update: tomcat (UTSA-2026-130361)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130361 advisory. Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a client makes a DIGEST...

CVE-2026-104105

The self-hosted web-based file manager FileRise is vulnerable to a capture-replay attack due to TOTP codes not being single-use. Prior to version 3.23.0 , the application failed to record successful logins for specific account time steps, allowing an attacker with a valid primary credential to re...

CVE-2026-104105 FileRise: TOTP codes are not single-use — valid 6-digit code can be replayed within its window (capture-replay)

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise verifies that a TOTP code is valid for the accepted time window but does not record that the same account and time step already succeeded. An attacker who has the targ...

CVE-2026-104105 FileRise: TOTP codes are not single-use — valid 6-digit code can be replayed within its window (capture-replay)

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise verifies that a TOTP code is valid for the accepted time window but does not record that the same account and time step already succeeded. An attacker who has the targ...

CVE-2026-89070

Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer OIDC module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

CVE-2026-89070

Progress MOVEit Transfer is affected by an authentication bypass vulnerability within the OIDC module caused by a capture-replay flaw (CWE-294). This vulnerability impacts versions before 2025.1.6 and versions from 2026.0.0 before 2026.0.4 . The security bulletin indicates a High severity level, ...

CVE-2026-89070 MOVEit Transfer OIDC Authentication Replay Vulnerability

Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer OIDC module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

EUVD-2026-101150

Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer OIDC module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

CVE-2026-55167: Authentication Bypass by Capture-replay

LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. Prior to 9.6, installations with WebAuthn two-factor authentication leave the challenge in the same PHP session after the authentication response is processed. A user who...

CVE-2026-89070: Authentication Bypass by Capture-replay

Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer OIDC module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

PT-2026-114322

Name of the Vulnerable Software and Affected Versions MOVEit Transfer versions prior to 2025.1.6 MOVEit Transfer versions 2026.0.0 through 2026.0.3 Description An authentication bypass exists in the OIDC module due to a capture-replay flaw. Approximately 1,700 instances have been identified...

CVE-2026-12655: Authentication Bypass by Capture-replay

A security issue exists within 1732E ArmorBlock® I/O, where an unauthenticated attacker can change the device's webserver password without valid credentials. This could result in admin account takeover or unauthorized modification of device configuration...