Technology ❯ Cybersecurity ❯ Vulnerabilities

Authentication Bypass

Fortinet cPanel/WHM Cisco SD-WAN CVE-2026-0257 GNU Inetutils Telnetd CVE-2026-23760 CVE-2025-64446 Firmware Exploits CVE-2026-41940 nginx-ui

Active Exploitation of Palo Alto GlobalProtect Flaw Forces Urgent Patching

Attackers can forge authentication-override cookies by reusing a portal TLS certificate to gain unauthorized VPN access.

Attackers Use FortiClient EMS Bug to Push Infostealer to Managed Endpoints

CISA Orders Rapid Patching of Cisco SD‑WAN Admin‑Bypass Flaw CVE‑2026‑20182

Progress Fixes Critical MOVEit Automation Authentication Bypass

cPanel Zero-Day Drives Ongoing Exploits as CISA Demands Fast Patching

Critical cPanel/WHM Auth Bypass Patched After Months of Silent Exploits

Nginx UI Auth Bypass Now Actively Exploited for Full Server Takeover

Cisco SD‑WAN Zero‑Day Spurs Emergency Directive as Exploitation Traced Back to 2023

SmarterTools Breach Tied to Warlock After Unpatched SmarterMail Server Exploited

SolarWinds Releases Web Help Desk 2026.1 to Fix Critical RCE and Authentication Bypass Flaws

Fortinet Begins Patching Actively Exploited FortiCloud SSO Bypass as CISA Sets Jan. 30 Deadline

Critical Telnetd Bug in GNU Inetutils Sees Real-World Attacks as Patch Ships

Fortinet Confirms FortiCloud SSO Bypass Hitting Fully Patched FortiGate Firewalls

SmarterMail Admin-Reset Flaw Under Active Exploitation Days After Patch

Fortinet Confirms Second FortiWeb Flaw Under Active Attack as CISA Demands Rapid Fixes

Fortinet Confirms Critical FortiWeb Zero-Day Is Being Exploited as CISA Sets Nov. 21 Patch Deadline

ASUS Patches Critical Router Flaw, Urges Immediate Update on Three DSL Models

Passwordstate Releases Urgent Fix for Admin-Bypass Flaw on Emergency Access Page

Dutch National Cyber Security Centre Confirms NetScaler Zero-Day Breaches

AyySSHush Botnet Exploits ASUS Flaw to Backdoor Over 9,000 Routers