Technology ❯ Cybersecurity ❯ Vulnerabilities

Authentication Bypass

Fortinet CVE-2025-64446 Firmware Exploits GNU Inetutils Telnetd CVE-2026-23760 SonicWall Firewalls Passwordstate OpenClaw CVE-2025-59718 Password Management

Critical Nginx-UI Bug Under Active Exploit Lets Full Server Takeover

A missing login check on an MCP tools endpoint leaves management actions open to anyone.

Cisco SD‑WAN Zero‑Day Spurs Emergency Directive as Exploitation Traced Back to 2023

SmarterTools Breach Tied to Warlock After Unpatched SmarterMail Server Exploited

SolarWinds Releases Web Help Desk 2026.1 to Fix Critical RCE and Authentication Bypass Flaws

Fortinet Begins Patching Actively Exploited FortiCloud SSO Bypass as CISA Sets Jan. 30 Deadline

Critical Telnetd Bug in GNU Inetutils Sees Real-World Attacks as Patch Ships

Fortinet Confirms FortiCloud SSO Bypass Hitting Fully Patched FortiGate Firewalls

SmarterMail Admin-Reset Flaw Under Active Exploitation Days After Patch

Fortinet Confirms Second FortiWeb Flaw Under Active Attack as CISA Demands Rapid Fixes

Fortinet Confirms Critical FortiWeb Zero-Day Is Being Exploited as CISA Sets Nov. 21 Patch Deadline

ASUS Patches Critical Router Flaw, Urges Immediate Update on Three DSL Models

Passwordstate Releases Urgent Fix for Admin-Bypass Flaw on Emergency Access Page

Dutch National Cyber Security Centre Confirms NetScaler Zero-Day Breaches

AyySSHush Botnet Exploits ASUS Flaw to Backdoor Over 9,000 Routers

New Critical Vulnerability in MOVEit Software Exposes Sensitive Data