Everything NetSec Tribune has reported about Authentication Bypass: 3 stories, newest first. Part of our Vulnerabilities coverage.
Public exploit scripts for the critical FortiClient EMS flaw are available, prompting urgent verification for organizations running versions 7.4.5 and 7.4.6.
Unauthenticated attackers can hijack sessions in Better Auth versions before 1.7.7 by reusing OAuth state values as magic link tokens.
A critical vulnerability allows attackers to bypass authentication in Esri Portal for ArcGIS, granting access to administrative endpoints without credentials.