CVE-2026-65570 is an authentication bypass vulnerability in the 'Login with phone number' product by Hamid Alinia affecting versions <=1.8.70. The flaw allows unauthenticated attackers to bypass authentication controls by spoofing, which can lead to unauthorized access. The vulnerability is categorized as CWE-290 and has a CVSS 3.1 base score of 8.1, indicating high impact on confidentiality, integrity, and availability. No known exploits are reported in the wild, and no official remediation or patch is currently available.

Successful exploitation of this vulnerability allows an attacker to bypass authentication without valid credentials, potentially gaining unauthorized access to user accounts or sensitive functionality. This can lead to full compromise of confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates and consider implementing additional access controls or compensating controls to mitigate risk.