2 matches found
CVE-2026-12225 syracom Secure Login (2FA) for Confluence allows 2FA bypass via spoofed User-Agent
syracom AG Secure Login 2FA for Atlassian Jira, Confluence, and Bitbucket 3.4.0.x contains an authentication bypass vulnerability. An attacker with valid credentials for a user account can bypass the two-factor authentication flow by sending HTTP requests with a crafted User-Agent header containi...
8.7CVSS5.6AI score0.00481EPSS
SaveExploits0References4
PT-2021-3840
Name of the Vulnerable Software and Affected Versions Nacos versions prior to 1.4.1 Description Nacos is a platform for dynamic service discovery, configuration, and service management. When configured to use authentication via -Dnacos.core.auth.enabled=true, the system employs the AuthFilter...
10CVSS9.2AI score0.83483EPSS
SaveExploits2References39
20