BIT-TOMCAT-2026-68569 Apache Tomcat: Principal lookup can fail open in some cases

Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances e.g. CLIENT-CERT, SPNEGO that a user would be authenticated even if the user did not exist in the DataSourceRealm. This issue affects Apache Tomcat: from 11.0.0 through 11.0.24, from 10.1.0 through 10.1.57, fr...

CVE-2026-53913

CVE-2026-53913 — camel-keycloak 故障开放（Fail-Open）身份验证绕过 针对同一 Apache Camel 漏洞的可运行概念验证（PoC）复现程序，每种运行时一个：...

Dolibarr <=22.0.4 - Local File Inclusion

Dolibarr = 22.0.4 contains a local file inclusion caused by manipulation of the objectdesc parameter and a fail-open logic flaw in restrictedArea in /core/ajax/selectobject.php, letting authenticated users with no specific privileges read arbitrary non-PHP files. id: CVE-2026-34036 info: name:...

ams-failopen

Fail-Open Signing in AppleMediaServices Zero-Day Disclosure Summary This issue constitutes a live Zero-Day vulnerability and reflects a systemic design flaw in AppleMediaServices.framework, rather than a regression or version-specific bug. A critical fail-open flaw in Apple’s AppleMediaServices...

github.com/getkin/kin-openapi: kin-openapi: kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default

A flaw was found in kin-openapi. This vulnerability allows a remote attacker to bypass authentication checks. Specifically, the system incorrectly handles missing authentication configurations, substituting them with a function that does not verify user credentials. This enables unauthorized acce...

EUVD-2026-67962

IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 11.11.150 contain a secure boot bypass vulnerability in the GRUB boot stage that allows physically present attackers to gain unauthorized root access by placing an unsigned empty file named igel.conf on a partition. Attackers can exploit...

CVE-2026-34486---unauthenticated-RCE-via-Java-deserialization

CVE-2026-34486 Fail-Open-Bypass des EncryptInterceptor im Apache-Tomcat-Tribes-Clustering führt zu nicht authentifiziertem RCE über Java-Deserialisierung. Betroffen: 11.0.19+, 10.1.53+, 9.0.116+. Behoben in: 11.0.21, 10.1.54, 9.0.117. Gefunden und gemeldet von Bartlomiej Dmitruk striga.ai. Writeu...

CVE-2026-70376

CVE-2026-70376 — CSRF a livello di sito in Pluck CMS → RCE Controllo Referer fail-open + assenza di token CSRF + upload a doppia estensione Una singola visita di una pagina da parte di un admin elimina contenuti, inietta pagine e rilascia una webshell...

CVE-2026-34486

CVE-2026-34486 Bypass fail-open di EncryptInterceptor nel clustering di Apache Tomcat Tribes che porta a RCE non autenticata tramite deserializzazione Java. Versioni interessate: 11.0.19+, 10.1.53+, 9.0.116+. Corretto in: 11.0.21, 10.1.54, 9.0.117. Trovata e segnalata da Bartlomiej Dmitruk...

PT-2026-83366

Name of the Vulnerable Software and Affected Versions IGEL OS 12 versions prior to 12.9.0 IGEL OS 12 version 12.8.3 LTS IGEL OS 11 versions prior to 11.11.150 Description A secure boot bypass exists in the GRUB boot stage. A physically present attacker can gain unauthorized root access by placing...

CVE-2026-1357-POC

CVE-2026-1357 — WPvivid Backup & Migration RCE Credito CVE: Lucas Montes NiRoX Strumento di: CyberTechAjju CVSS: 9.8 Critico | Interessati: ≤ 0.9.123 | Corretto: 0.9.124 ⚠️ Disclaimer Solo per test di sicurezza autorizzati. L'accesso non autorizzato ai sistemi è illegale. Panoramica RCE non...

CVE-2026-16895

A logic vulnerability fail-open condition has been identified within the Metasploit Framework's JSON-RPC web service interface. When an exception occurs during the database health check db.check and the environment variable MSFWSJSONRPCAPITOKEN is not explicitly set, the application resets the...

POC-CVE-2026-1357

CVE-2026-1357 WPvivid Backup & Migration RCE PoC Entdeckt von: Lucas Montes NiRoX Schwachstelle: Nicht authentifizierter beliebiger Datei-Upload, der zu Remote Code Execution RCE führt CVE-ID: CVE-2026-1357 CVSS: Kritisch 9.8 Status: In Version 0.9.124 gepatcht Überblick Dieses Repository enthält...

CVE-2026-16895

CVE-2026-16895 is a fail-open logic vulnerability in the Metasploit Framework 's JSON-RPC web service interface. When an exception occurs during the database health check (db.check) and the environment variable MSF_WS_JSON_RPC_API_TOKEN is not explicitly set, the internal flag msf.auth_initialize...

EUVD-2026-66836

A logic vulnerability fail-open condition has been identified within the Metasploit Framework's JSON-RPC web service interface. When an exception occurs during the database health check db.check and the environment variable MSFWSJSONRPCAPITOKEN is not explicitly set, the application resets the...

CVE-2026-16895 Authentication Bypass in Metasploit JSON-RPC Service When DB Health Check Fails

A logic vulnerability fail-open condition has been identified within the Metasploit Framework's JSON-RPC web service interface. When an exception occurs during the database health check db.check and the environment variable MSFWSJSONRPCAPITOKEN is not explicitly set, the application resets the...

CVE-2026-68569 Apache Tomcat: Principal lookup can fail open in some cases

Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances e.g. CLIENT-CERT, SPNEGO that a user would be authenticated even if the user did not exist in the DataSourceRealm. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through...

CVE-2026-68569

Apache Tomcat contains an improper authentication flaw in the DataSourceRealm principal lookup. Under specific authentication methods—CLIENT-CERT and SPNEGO —a user could be authenticated even if they did not exist in the DataSourceRealm, effectively a fail-open condition. The issue affects 11.0....

CVE-2026-68569 Apache Tomcat: Principal lookup can fail open in some cases

Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances e.g. CLIENT-CERT, SPNEGO that a user would be authenticated even if the user did not exist in the DataSourceRealm. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through...

CVE-2026-55535

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the Jobs API validatewebhookurl path fails open on socket.gaierror and does not bind the validated address to the later request. An attacker webhookurl can later resolve to 127.0.0.1, 169.254.169.254, or another internal address...