Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603 contain an authentication bypass vulnerability in the NetX Secure DTLS server. The server does not properly verify the cookie returned by clients, accepting any non-empty cookie as valid. This flaw allows a remote attacker to cause the server to send its full handshake response to a forged source address, enabling reflection and amplification of traffic towards a third party.
CVE-2026-94197 is an authentication and authorization bypass vulnerability in F5 NGINX Kubernetes Ingress Controller when using the ExternalAuth policy or Ingress external authentication. Unsanitized client-supplied routing and method headers are forwarded into internal authentication subrequests, allowing unauthenticated remote attackers to spoof request attributes. This can lead to unauthorized access to protected paths. The issue affects data plane operations only and does not expose the control plane. The vulnerability affects versions from 5.5.0 up to but not including 5.7.0. No patch information is provided. The CVSS score is 7.5 (high severity).
CVE-2026-96615 is an authentication bypass vulnerability in F5 NGINX Gateway Fabric versions 2.0.0 up to but not including 2.8.0. It occurs when the product is configured with Gateway Custom Resource Definition (CRD) and uses an authenticated gRPC connection with the NGINX Agent. An authenticated attacker with access to a service account in one namespace can impersonate the NGINX Agent's gRPC connection to read TLS private keys of Gateway deployments in other namespaces. This vulnerability affects the control plane only and does not expose the data plane.
CVE-2026-108131 is a high-severity vulnerability in Microsoft Windows 10 Version 1607 and related builds involving improper certificate validation in Active Directory Federation Services (AD FS). This flaw allows an unauthorized attacker to perform network spoofing. The issue is addressed by official patches released by Microsoft.
CVE-2026-105008 is a critical vulnerability in Microsoft Windows 10 Version 1607 and related builds affecting the Schannel security package. It allows an unauthorized attacker to perform network spoofing due to an unprotected alternate channel. The flaw is identified as CWE-420 (Unprotected Alternate Channel) and CWE-290 (Authentication Bypass). Microsoft has issued official fixes for multiple affected versions.
CVE-2026-83845 is a high-severity vulnerability in Microsoft Windows 10 Version 21H2 involving improper privilege management in the Windows Internet (wininet.dll) component. This flaw allows a local authorized attacker to perform authentication bypass through spoofing, potentially leading to complete compromise of confidentiality and integrity without user interaction. Multiple affected Windows 10 builds prior to specific patched versions are impacted. An official fix is available from Microsoft.
CVE-2026-70179 is an authentication bypass vulnerability in Microsoft Visual Studio 2022 version 17.14 and related versions. It involves spoofing in ASP.NET Core that allows an authorized attacker to elevate privileges over a network. The vulnerability has a high severity with a CVSS score of 7.5. Official patches have been released to address this issue.
CVE-2026-83864 is an authentication bypass vulnerability in Microsoft Windows 10 Version 1607 and related builds. It involves improper access control in the NTFS file system, allowing an authorized local attacker to disclose information. The vulnerability has a medium severity with a CVSS score of 5.5. Official patches have been released to address this issue in multiple Windows 10 builds.
CVE-2026-75120 is a critical authentication bypass vulnerability in the OpenText™ Endpoint Investigator product family. It affects the EnCase SAFE Agents component used by several OpenText security products. The flaw allows unauthorized or unauthenticated actors to establish unauthorized connections to vulnerable Agents by bypassing security controls during session establishment.
Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.
CVE-2026-93582 is an authentication bypass vulnerability in OTRS Community Edition versions 6.0.0 up to but not including 7.0.0. The issue arises because HTTP Basic Authentication modules accept the authenticated username from the HTTP_REMOTE_USER environment variable, which can be controlled by an attacker via crafted HTTP headers. This allows an unauthenticated attacker to impersonate any existing user without knowing their password, potentially accessing or modifying sensitive data with that user's privileges. OTRS 7 and later are not affected due to architectural changes and additional validation mechanisms.
Vikunja versions 1.0.0 through 2.3.0 contain an improper authentication vulnerability in the OpenID Connect provider's email fallback feature. When enabled, the system links an SSO login to a local account using only the email claim without verifying the email or requiring the account password. This allows an attacker who obtains a token with a victim's email to log in as that victim without their consent. The issue is fixed in version 2.4.0.
CVE-2026-107336 is an authentication bypass vulnerability in CISA Malcolm's nginx reverse proxy configuration. The issue arises because a case-insensitive regex matcher allows requests with non-lowercase path segments to bypass a case-sensitive rewrite, leading to unauthenticated access to the Arkime backend. Additionally, the proxy forwards a client-supplied X-Forwarded-User header without overwriting it, and Arkime trusts this header for authentication. This combination allows an unauthenticated attacker to access Arkime with a forged identity.
CVE-2026-87663 is an authentication bypass and command injection vulnerability in Brocade Fabric OS. It affects versions before 9.2.2d and versions 10.0.0 through 10.0.0a1. The flaw exists in the inter-switch remote execution service, where commands received from fabric-connected switches are processed with elevated privileges without proper parameter verification. This allows an attacker on a connected switch to escalate privileges and execute arbitrary root commands locally or on other managed fabric members with remote execution enabled.
An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway. The internal gate guarding restricted management endpoints relies exclusively on client-controlled HTTP headers. An authenticated user with any valid REST session can spoof these headers to gain unauthorized access to internal management endpoints. This allows low-privilege users to view sensitive chassis metadata, hardware memory patrolling state, and firmware integrity audit logs.
An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1. The web dispatcher routine evaluates internal management VLAN trust decisions using the client-supplied HTTP host header instead of the actual socket transport layer source IP address. Successful exploitation allows the attacker to bypass IP-filtering access control lists (ACLs) and obtain sensitive device metadata (such as model, serial number, hardware revision, and firmware version) without authentication.
CVE-2026-102161 is a high-severity vulnerability in Arista Networks CloudVision CUE that involves the use of hard-coded credentials. An unauthenticated attacker on an adjacent private network or routed through a reverse proxy can forge their source IP address to gain administrative session privileges on the CV-CUE backend. This vulnerability affects versions from 2021.2.0 through 2026.2.0 inclusive. The vulnerability has a CVSS score of 8.8, indicating a high impact on confidentiality, integrity, and availability.
PayloadCMS versions from 3.0.0 up to but not including 3.90.0, and certain 4.0.0-canary versions, contain an authentication bypass vulnerability. This occurs when a custom field is mapped to a reserved authentication claim name, allowing unintended values to be placed in authentication tokens at login. The issue is fixed in version 3.90.0.