Everything RedTeam Monitor has reported about authentication bypass: 8 stories, newest first. Part of our Vulnerabilities coverage.
A missing authentication check in HKUDS Vibe-Trading versions before 0.1.7 allows attackers to execute root commands and upload files without credentials.
Attackers exploit a hard-coded secret in Simple Admin Core to forge administrative tokens and seize full system control without valid credentials.
Unauthenticated users can hijack accounts in Better Auth versions prior to 1.7.7 by misusing OAuth state values as verification tokens, a critical flaw rated 9.3 by NVD.
A critical flaw in OTRS Community Edition 6 allows remote attackers to bypass authentication by injecting crafted HTTP headers, risking data theft.
Attackers are using two unpatched vulnerabilities in the AhsayCBS backup utility to bypass login checks and install malicious software on compromised servers.
A flaw in TVU video devices allows remote attackers to bypass login and gain full administrative access without valid credentials.
A critical flaw in IBM’s access management software lets attackers skip login checks, exposing organizations to unauthorized remote access.
A remote authentication bypass in IBM Security Verify Access and related products lets attackers ignore security rules. No patch is confirmed yet.