CVE-2026-9245: URL Redirection to Untrusted Site

Improper input validation in the external authentication provider flow in Devolutions Server allows an unauthenticated remote attacker to redirect victims to an attacker-controlled domain via a crafted login link. This issue affects : Devolutions Server 2026.1.6.0 through 2026.1.16.0 Devolutions...

EUVD-2026-28461

An authentication bypass vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to create a local user account, bypassing the configured external identity provider. When external authentication was enabled, the signup endpoint did not properly enforce th...

PT-2023-33007

Name of the Vulnerable Software and Affected Versions Rancher versions 2.5.0 through 2.5.16 Rancher versions 2.6.0 through 2.6.9 Rancher version 2.7.0 Description This issue affects Rancher setups with an external authentication provider configured or previously configured. When an external...

CVE-2022-2572: Improper Authentication

In affected versions of Octopus Server where access is managed by an external authentication provider, it was possible that the API key/keys of a disabled/deleted user were still valid after the access was revoked...

PT-2020-9314

Name of the Vulnerable Software and Affected Versions: GitLab Community and Enterprise Edition versions 6.8 through 11.11 Description: An issue allows users to bypass the mandatory external authentication provider sign-in restrictions by sending a specially crafted request. This issue is related ...