Technology ❯ Cybersecurity ❯ Vulnerabilities

Authentication Bypass

Fortinet cPanel/WHM Cisco SD-WAN CVE-2026-0257 SimpleHelp RMM CVE-2026-65400 CVE-2026-55040 CVE-2026-23760 Passwordstate GNU Inetutils Telnetd

Operation CameraSwarm Compromised Over 14,000 Dahua Cameras

Researchers say attackers abused older authentication bypasses via the vendor's cloud relay to reach many devices without normal logins.

Attackers Exploit macOS Screen Sharing Flaw to Gain Root and Install Miners

Public SharePoint PoC Triggers Active Exploitation of Critical JWT Bypass

N-able N-central Is Being Exploited as Emergency Hotfix Is Issued

JetBrains Patches Critical RCE in TeamCity On‑Premises

Cisco Says Zero‑Day Static‑Credential Flaw in Firewall Manager Is Being Exploited

Check Point Patches Exploited SmartConsole Authentication Bypass

Attackers Exploit SimpleHelp OIDC Flaw to Deploy TaskWeaver and Djinn Stealer

Critical Check Point VPN Flaw Exploited by Ransomware-Linked Attackers

Active Exploitation of Palo Alto GlobalProtect Flaw Forces Urgent Patching

Attackers Use FortiClient EMS Bug to Push Infostealer to Managed Endpoints

CISA Orders Rapid Patching of Cisco SD‑WAN Admin‑Bypass Flaw CVE‑2026‑20182

Progress Fixes Critical MOVEit Automation Authentication Bypass

cPanel Zero-Day Drives Ongoing Exploits as CISA Demands Fast Patching

Critical cPanel/WHM Auth Bypass Patched After Months of Silent Exploits

Nginx UI Auth Bypass Now Actively Exploited for Full Server Takeover

Cisco SD‑WAN Zero‑Day Spurs Emergency Directive as Exploitation Traced Back to 2023

SmarterTools Breach Tied to Warlock After Unpatched SmarterMail Server Exploited

SolarWinds Releases Web Help Desk 2026.1 to Fix Critical RCE and Authentication Bypass Flaws

Fortinet Begins Patching Actively Exploited FortiCloud SSO Bypass as CISA Sets Jan. 30 Deadline