CVE-2026-23708

A improper authentication vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR on-premise 7.6.0 through 7.6.3, FortiSOAR on-premise 7.5.0 through 7.5.2 may allow an unauthenticated attacker to bypass authentication via replaying captured 2FA...

CVE-2025-54391

CVE-2025-54391 affects Zimbra Collaboration (ZCS) via the EnableTwoFactorAuthRequest SOAP endpoint. The vulnerability allows an attacker with valid credentials to configure an additional 2FA method (third‑party authenticator app or email-based 2FA) without presenting a valid authentication token ...