7 matches found
CVE-2026-67351
Serendipity before 2.6.1 contains an authentication context confusion vulnerability where password validation and session loading operate independently without ensuring both use the same user record. An authenticated Editor can create a username collision with an Administrator account and obtain...
EUVD-2026-51127
Serendipity before 2.6.1 contains an authentication context confusion vulnerability where password validation and session loading operate independently without ensuring both use the same user record. An authenticated Editor can create a username collision with an Administrator account and obtain...
CVE-2026-67351
Vulnerability overview (CVE-2026-67351): Serendipity versions before 2.6.1 contain an authentication context confusion where password validation and session loading run independently, risking mismatch of user records. An authenticated Editor can create a username collision with an Administrator a...
CVE-2026-67351 Serendipity < 2.6.1 Authentication Bypass via Username Collision
Serendipity before 2.6.1 contains an authentication context confusion vulnerability where password validation and session loading operate independently without ensuring both use the same user record. An authenticated Editor can create a username collision with an Administrator account and obtain...
PT-2026-66476
Name of the Vulnerable Software and Affected Versions Serendipity versions prior to 2.6.1 Description An authentication context confusion exists where password validation and session loading operate independently without ensuring both use the same user record. This allows an authenticated Editor ...
CVE-2026-41940: cPanel & WHM Authentication Bypass
Overview On April 28, 2026, cPanel issued a security update to fix a critical vulnerability affecting the cPanel & WHM and WP Squared products. In the cPanel release notes, the bug was described as "an issue with session loading and saving." CVE-2026-41940, the identifier subsequently assigned on...