CVE-2026-19868

An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication MFA...

CVE-2026-19868

An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication MFA...

EUVD-2026-118429

An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication MFA...

CVE-2026-19868

The SonicOS SSLVPN service is affected by an authentication enforcement vulnerability (CVE-2026-19868 ) that allows users with valid credentials for an alternate authentication method to bypass SAML authentication controls . This can also lead to the bypass of SAML-enforced multi-factor authentic...

CVE-2026-55186

Silverstripe MFA provides multi-factor authentication for Silverstripe CMS. Prior to 6.0.0, the CMS 5 password reset flow can issue a logged-in session after a user changes a password but before the user's configured multi-factor authentication challenge is completed. An attacker with access to t...

-CVE-2022-22954-scanner

CVE-2022-22954-scanner Vulnerability Introduction VMware Workspace ONE Access formerly VMware Identity Manager enables employees to accelerate access to SaaS, web, and native mobile applications through multi-factor authentication, conditional access, and single sign-on. Affected versions: VMware...

CVE-2026-119682

An improper access control vulnerability exists in the multi-factor authentication MFA functionality of ManageEngine SharePoint Manager Plus SPMP. A low-privileged authenticated user can bypass authorization checks to read and modify MFA configuration settings, enable or disable MFA for the...

EUVD-2026-114085

An improper access control vulnerability exists in the multi-factor authentication MFA functionality of ManageEngine SharePoint Manager Plus SPMP. A low-privileged authenticated user can bypass authorization checks to read and modify MFA configuration settings, enable or disable MFA for the...

Efficient Cross-Domain Multi-Factor Authentication

Secure cross-domain authentication is crucial for protecting information exchange across terminals in different security domains. However, existing cross-domain authentication models suffer from inflexibility, high storage and computational consumption. In response to these problems, a cross-doma...

CVE-2026-119682: ManageEngine SharePoint Manager Plus: An improper access control vulnerability exists in the multi-factor authentication (MFA) functionality of ManageEngine…

An improper access control vulnerability exists in the multi-factor authentication MFA functionality of ManageEngine SharePoint Manager Plus SPMP. A low-privileged authenticated user can bypass authorization checks to read and modify MFA configuration settings, enable or disable MFA for the...

CVE-2026-90862 Web Transfer Module Multi-Factor Authentication Bypass in Progress WS_FTP Server

Improper authentication in the Web Transfer Module of Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an attacker with a user’s password to access certain files associated with that account without satisfying multi-factor authentication requirements...

CVE-2026-90862 Web Transfer Module Multi-Factor Authentication Bypass in Progress WS_FTP Server

Improper authentication in the Web Transfer Module of Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an attacker with a user’s password to access certain files associated with that account without satisfying multi-factor authentication requirements...

CVE-2026-90862

Progress Software WS_FTP Server on Windows (versions prior to 2024.0.7 and 2025.0.4 ) is vulnerable to improper authentication within the Web Transfer Module . An attacker possessing a user's password could access specific files associated with that account by bypassing multi-factor authenticatio...

PT-2026-133259

Name of the Vulnerable Software and Affected Versions Silverstripe MFA versions prior to 6.0.0 Description In the CMS 5 password reset flow, a logged-in session can be issued after a user changes their password but before the configured multi-factor authentication challenge is completed. This...

PT-2026-133237

Impact In CMS 5, the password reset flow let a user with multi-factor authentication enabled change their password and get a logged-in session before completing multi-factor authentication. Exploiting this requires access to the user's email account. CMS 6 is not affected...

Progress Software WS_FTP Server authorization issue vulnerability

Versions prior to Progress Software WSFTP Server 2024.0.6 and 2025.0.3 contain an authorization issue vulnerability. This vulnerability stems from improper association of authentication factors between accounts within the SSH component, potentially allowing authenticated users to bypass...

CVE-2026-107671

A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally before completing MFA verification...

CVE-2026-107671

A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally before completing MFA verification...

Veeam ONE < 13.1.0.7940 (kb4951)

The version of Veeam ONE installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the kb4951 advisory. - A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it...

PT-2026-126656

A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally before completing MFA verification...