Tag: authentication bypass
152 articles
Cisco Discloses Second Actively Exploited Zero-Day Vulnerability
Cisco has disclosed a second actively exploited zero-day vulnerability, CVE-2026-76460, a maximum-severity flaw in its Identity Services Engine (ISE) that lets attackers bypass authentication and take full control of affected devices. This vulnerability is particularly alarming because it allows hackers to modify network access policies, extract sensitive credentials, and move undetected across the network.
Check Point Flaw Lets Unauthenticated Users Execute Code as Root
A critical flaw in Check Point's Security Management and Log Servers, rated 9.8 out of 10, allows unauthenticated users to execute code as root via a simple login request with a very long username. Fortunately, there's no evidence that this vulnerability has been exploited in the wild - yet.
Cisco Exposes Zero-Day Flaw in Identity Services Engine
Cisco has uncovered a critical zero-day flaw in its Identity Services Engine, scoring a maximum CVSS rating of 10.0 and allowing attackers to bypass authentication and gain root access with just a single crafted request. This severe vulnerability requires immediate attention, as it can be exploited remotely without any credentials or user interaction.
Cisco Discloses Actively Exploited Zero-Day in Identity Services Engine
Cisco has sounded the alarm on a critical zero-day flaw in its Identity Services Engine that's being actively exploited by attackers, allowing them to bypass authentication and gain unauthorized access. To stay safe, customers are urged to upgrade to a patched version ASAP.
TP-Link Cameras Expose Users to Eavesdropping Risk via Zero-Day Flaw
Millions of TP-Link camera users may be vulnerable to eavesdropping due to a zero-day flaw that lets hackers gain admin access without a password. This critical vulnerability affects popular models like the TP-Link Tapo C200, commonly used for baby and pet monitoring, home security, and small business protection.
WSO2 API Manager Flaw Sees Active Exploitation Attempts
A critical flaw in WSO2 API Manager, tracked as CVE-2026-5430, is under active exploitation, allowing hackers to bypass JWT authentication and gain unauthorized access with a CVSS score of 9.8 out of 10.0, potentially leading to account takeover and compromise of administrative accounts.
Hackers Exploit GitLab Flaw in Active Attacks
Hackers are actively exploiting a critical GitLab flaw, CVE-2026-85706, that allows them to read sensitive information like credentials and secrets with just a single HTTP request. This vulnerability enables attackers to access arbitrary files, potentially exposing long-lived secrets and confidential data.
Cisco FMC Exploits Fuel Ransomware, Credential Theft
Cisco is urging customers to apply hotfixes immediately to protect against ransomware and credential theft attacks exploiting vulnerabilities in its Secure Firewall Management Center (FMC) software. The company has already released patches for the affected versions and plans to roll out additional security updates soon.
PaperCut Fixes Actively Exploited Flaws with New Security Releases
PaperCut has released new security updates to fix two actively exploited flaws that allowed hackers to bypass authentication and execute malicious code, with over 395 organizations in 48 countries affected. The company has issued maintenance releases, including versions 26.0.5, 25.0.13, and 24.1.10, to patch the vulnerabilities and protect users.
Cisco Secure FMC Flaw Exploited in Active Attacks
Hackers are actively exploiting a critical vulnerability in Cisco Secure Firewall Management Center (FMC) software, allowing them to bypass authentication and gain root access to vulnerable devices. This severe flaw, rated 10.0 on the CVSS scale, lets attackers execute scripts and commands remotely without logging in.
FreeIPA Flaw Enables Anonymous Clients to Create Admin Credentials
A critical vulnerability in FreeIPA, tracked as CVE-2026-76578, allows an unauthenticated client to create admin credentials by exploiting a chain of defects that lets them create a Kerberos identity and join the administrators group. This flaw, with a preliminary CVSS score of 9.8, was fixed in FreeIPA version 4.13.4.
Attackers Exploit PaperCut Flaws to Harvest Education Sector Credentials
Stolen logins from the education sector could give attackers a master key to unlock other critical systems, sparking serious concerns about widespread security breaches. Threat actors are exploiting PaperCut flaws to harvest credentials, creating a privileged pathway for further malicious activity.
Citrix NetScaler Flaw Exploited in Targeted Attacks
Citrix is urging customers to act fast to protect their NetScaler deployments from a critical flaw, known as CVE-2026-19490, that lets hackers bypass authentication and gain unauthorized access. To stay safe, review the security bulletin, check if your setup is vulnerable, and upgrade to the recommended build ASAP.
Dropbox Breach Exposes 5,000 Accounts
A sneaky exploit in Lenovo's email verification process led to a Dropbox breach, putting around 5,000 accounts at risk - and some users may have been affected without even having a Lenovo account. The hack allowed attackers to access Dropbox accounts by creating fake Lenovo IDs linked to victims' email addresses.
Hackers exploit JFrog flaw to forge admin tokens
Hackers are actively exploiting a critical flaw in JFrog Artifactory, CVE-2026-82329, to gain admin access and forge tokens, putting your entire system at risk. This authentication bypass vulnerability can allow attackers to elevate their permissions and automatically gain access to trusted and sensitive data.
Dropbox Breach Exposes Lenovo Email Verification Flaw
Beware: a sneaky flaw in Lenovo's email verification process was exploited by hackers to hijack Dropbox accounts - no password required! Dropbox has warned users that an attacker used a legacy link between Lenovo ID and Dropbox to register fake IDs and gain unauthorized access.
METR Exposes $600K API Credit Theft After Weeks of Undetected Breach
A shocking $600,000 theft of API credits went undetected for weeks, leaving a nonprofit reeling - here's how a brief security lapse led to the massive breach. Attackers exploited a vulnerable API key, draining credits from METR's public models account in just a few short weeks.
Attackers Exploit JFrog Artifactory Flaw to Mint Admin Tokens
A critical flaw in JFrog Artifactory, known as CVE-2026-82329, allows attackers to easily gain admin access without needing authentication or user interaction, posing a huge risk to affected instances. This near-maximum-score vulnerability has already been patched in Artifactory version 7.161.20.
Unpatched Microsoft Exchange Servers Exposed to Hijack Attacks
Thousands of Microsoft Exchange servers remain vulnerable to a high-severity flaw, leaving 21,899 internet-facing systems open to hijack attacks that could give attackers control of every mailbox. This unpatched authentication-bypass vulnerability, CVE-2026-62911, was fixed by Microsoft in August, but many servers still haven't been updated.
PaperCut Issues Second Patch as Hackers Exploit Flaws
PaperCut has released an updated emergency patch to tackle vulnerabilities that hackers are actively exploiting, working closely with security researchers to stay one step ahead. This new patch includes extra security measures to protect PaperCut NG and MF installations from attacks.
Attackers Exploit miniOrange SAML Flaws to Hijack WordPress Admin Access
A critical vulnerability in the Xecurify miniOrange SAML 2.0 Single Sign On plugin for WordPress allows hackers to hijack admin access with just a few clicks, giving them the keys to your site's kingdom. This flaw lets unauthenticated attackers log in as any existing user, including administrators, by exploiting a weakness in signature verification.
Keycloak Flaw Exposes Accounts to Unauthenticated Takeover
A critical flaw in Keycloak, rated 9.1 by Red Hat, allows hackers to hijack any account, including admin ones, by manipulating the password reset process. This vulnerability, CVE-2026-18963, lets attackers take control without even logging in.
Microsoft patches exploited Entra ID flaw amid rising attacks
Microsoft has patched a critical vulnerability in its Entra ID platform, known as CVE-2026-69836, which allowed attackers to execute code remotely with ease, and has already been exploited in recent attacks. This flaw enabled unauthorized threat actors to gain control and wreak havoc, making swift action crucial to prevent further damage.
Citrix Flaw Exposes Authentication on NetScaler Servers
Citrix has warned of a critical authentication bypass vulnerability, CVE-2026-19490, affecting NetScaler servers, urging customers to review their configurations and prioritize patching based on exposure and deployment role.