An unauthenticated attacker on an adjacent network segment can bypass MD5 authentication and have unauthorized RIP route updates accepted by the device. Successful exploitation requires that RIPv2 MD5 authentication is configured on the affected interface. An attacker who can inject crafted RIPv2 packets could cause the device to install routes that redirect network traffic through attacker-controlled paths, create routing loops, or blackhole traffic, disrupting network connectivity.
Apache OFBiz versions before 24.09.08 contain an incorrect implementation of the authentication algorithm in the password-reset and login JWT validation. An attacker who obtains a user's password-reset token through interception or exposure can bypass the intended password-change process and authenticate directly as that user, gaining a full session including administrative privileges if the account targeted is an administrator. This vulnerability is fixed in version 24.09.08.
CVE-2026-84296 is a Multi-Factor Authentication (MFA) bypass vulnerability in the SSH component of Progress Software WS_FTP Server on Windows. It affects versions prior to 2024.0.6 and 2025.0.3. The flaw allows authenticated users to bypass MFA requirements due to improper association of authentication factors between accounts. This vulnerability has a CVSS score of 6.8 (medium severity).
CVE-2026-86589 is a vulnerability in Apache Answer up to version 2.0.2 involving incorrect implementation of the authentication algorithm. The flaw allows a newly created external user session to omit its external identity, which can enable bypassing of central account suspension or deletion checks until the session expires or is revoked. This issue is fixed in version 2.0.3.
CVE-2026-89077 is a high-severity vulnerability in Progress MOVEit Transfer's SFTP module caused by an incorrect implementation of the authentication algorithm. It affects versions before 2025.1.6 and versions from 2026.0.0 up to but not including 2026.0.4. The flaw can lead to a complete compromise of confidentiality, integrity, and availability of the affected system. No known exploits are reported in the wild. The vulnerability has a CVSS score of 7.5, indicating a significant risk if exploited.
CVE-2026-104939 is a vulnerability in F5 NGINX Ingress Controller versions 5.6.0 up to but not including 5.7.0. It involves improper handling of HTTP responses from an OAuth Identity Provider (IdP) when implementing an externalAuth policy, potentially allowing unauthenticated access to protected paths. This issue affects only the data plane and does not expose the control plane. The vulnerability has a high severity with a CVSS score of 7.5.
CVE-2026-83906 is a vulnerability in Microsoft Windows 11 version 23H2 involving an incorrect implementation of an authentication algorithm in the Windows Shell. This flaw allows an unauthorized attacker to perform spoofing attacks over a network. The vulnerability has a CVSS score of 6.5 (medium severity) and affects multiple builds of Windows 11 23H2 prior to specific fixed versions. Microsoft has released official fixes for this issue.
Progress MarkLogic Server versions 11.0.0 through before 11.3.7 and 12.0.0 through before 12.1.0 contain an authentication vulnerability. The Kerberos authentication service identity is not sufficiently verified in certain password-based authentication configurations. This flaw could allow a network attacker to impersonate trusted authentication infrastructure, potentially leading to unauthorized access or modification of protected data.
CVE-2026-107279 is a high-severity vulnerability in AsyncHttpClient version 3.0.12 where the authentication algorithm incorrectly handles Digest qop=auth-int. This flaw causes the mutual-authentication verification to be skipped, allowing a peer that does not know the shared secret to be accepted as an authenticated server. The issue is fixed in version 3.0.13.
CVE-2026-97720 is a critical vulnerability in Apache Impala versions 4.1.0 through 4.5.2 involving incorrect implementation of JWT/OAuth authentication. The flaw allows attackers to bypass signature validation of bearer tokens, enabling unauthorized access to resources served by the executor's webserver when JWT/OAuth authentication is enabled. The issue is fixed in version 4.5.3. Users are advised to disable JWT/OAuth authentication on Impala executors or upgrade to the patched version.
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the HTTP transport accepts requests without a verified user identity and downstream fetcher construction falls back to the operator's globally configured Jira or Confluence credentials. A network client that can reach the MCP endpoint can invoke Atlassian tools as the operator, including read and write operations available to that account. The advisory traces the vulnerable input and processing flow through UserTokenMiddleware, AtlassianOpaqueTokenVerifier, _get_fetcher, and streamable-http, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.
CVE-2026-93394 is a vulnerability in MongoDB Inc.'s C Driver (libmongoc) affecting versions from 2.0.0 up to but not including 2.3.2. The flaw lies in the SCRAM authentication implementation, where the client proceeds with the authentication handshake and sends the client proof even if a nonce mismatch is detected in the server's first message. This could allow a man-in-the-middle attacker to inject a crafted server message and capture the client proof, potentially enabling offline password cracking. The vulnerability is mitigated by the use of TLS, which is standard in production environments.
CVE-2026-15688 is a critical vulnerability in Mitsubishi Electric Corporation's GX Works3 and Motion Control Setting software. It involves an incorrect implementation of the authentication algorithm that allows a local attacker to authenticate successfully with an invalid block password by modifying the executable module in memory. This flaw could enable unauthorized viewing, tampering, destruction, or deletion of control programs. The vulnerability has a high CVSS 4.0 score of 9.2, indicating severe impact on confidentiality, integrity, and availability. A patch is available, and the product is a cloud service, so the vendor manages remediation.
CVE-2026-73444 is a vulnerability in Arista Networks EOS affecting VRRPv2 IP Authentication Header (IP-AH) authentication. An unauthenticated attacker with access to the layer 2 network segment running VRRP can bypass authentication and assume the virtual router master role. This allows the attacker to intercept, modify, or discard traffic sent to the virtual gateway address. The vulnerability affects specific versions of EOS prior to fixed releases. The CVSS score is 4.7, indicating medium severity with a focus on availability impact.
On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially crafted packet can cause the BFD session(s) to go down. This may result in undesirable network changes because various routing protocols monitor status on BFD session(s).
CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and availability of the PLC provided an application project with a lower application level is running on the PLC.
A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to administrator level on the underlying Windows host, granting themselves full control over the host machine.
A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read and modify application objects without being authenticated to the SYS600 system itself.
Only the SYS600 system users should be permitted to view and modify application objects.
Pingvin Share X is a secure and easy self-hosted file sharing platform. A vulnerability in versions 1.5.0 through 1.18.0 allow an attacker to bypass password verification when managing Time-based One-Time Password (TOTP) settings. The root cause is a missing `await` keyword on calls to the asynchronous `verifyPassword` method in `authTotp.service.ts` and the `authenticateUser` method in `auth.service.ts`. In JavaScript, an unawaited `Promise` is always truthy. So the logic intended to throw a `ForbiddenException` when a password is incorrect. It never executes because the expression evaluates the existence of the `Promise` object rather than its resolved boolean result. The vulnerability is fixed in version 1.18.1 by ensuring all asynchronous authentication calls are properly awaited. There are no official workarounds. If a user is locked out, an administrator must manually reset the user's TOTP status in the database.