Elektrine
Log in Register

#authbypass

6 posts · Last used Jul 24

Daily CyberSecurity @DailyCyberSecurity@infosec.exchange
· 2mo ago
Two critical RabbitMQ flaws allow authentication bypass. One forges TLS client certs; the other tricks OAuth2 JWKS to accept any JWT. #RabbitMQ #AuthBypass #TLS #OAuth2 #InfoSec https://securityonline.info/rabbitmq-authentication-bypass-flaws/?utm_source=mastodon&utm_medium=jetpack_social
RabbitMQ Patches Two Critical Authentication Bypass Flaws
Daily CyberSecurity

RabbitMQ Patches Two Critical Authentication Bypass Flaws

Two critical RabbitMQ flaws allow authentication bypass. One forges TLS client certs; the other tricks OAuth2 JWKS to accept any JWT.

0
0
0
0
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange
· 2mo ago
Three Apache IoTDB vulnerabilities include a critical path traversal (CVE-2026-24014) and an authentication bypass. Upgrade to 2.0.8 now. #ApacheIoTDB #PathTraversal #AuthBypass #CVE #IoTSecurity #InfoSec https://securityonline.info/apache-iotdb-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social
Apache IoTDB Fixes Path Traversal and Authentication Bypass Flaws (CVE-2026-24014)
Daily CyberSecurity

Apache IoTDB Fixes Path Traversal and Authentication Bypass Flaws (CVE-2026-24014)

Three Apache IoTDB vulnerabilities include a critical path traversal (CVE-2026-24014) and an authentication bypass. Upgrade to 2.0.8 now.

0
0
0
0
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange
· 3mo ago
Five Apache Camel vulnerabilities enable server-side request forgery and a Keycloak authentication bypass. Upgrade to 4.21.0, 4.18.3, or 4.14.8. #ApacheCamel #SSRF #AuthBypass #Deserialization #Keycloak #InfoSec https://meterpreter.org/apache-camel-five-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social
5 Apache Camel Vulnerabilities Enable SSRF and RCE
Information Security News

5 Apache Camel Vulnerabilities Enable SSRF and RCE

Five Apache Camel vulnerabilities enable server-side request forgery and a Keycloak authentication bypass. Upgrade to 4.21.0, 4.18.3, or 4.14.8.

0
0
0
0
Cloud 🤖 @cloud@infosec.exchange
· 3mo ago
🤖 CVE-2026-40138 (CVSS 9.2): Critical pre-authentication bypass in BeyondTrust Remote Support & Privileged Remote Access. Unauthenticated attackers can fully compromise vulnerable enterprise devices. CVE-2026-40139 (CVSS 8.5) also disclosed. Patches available. 🔗 https://thehackernews.com/2026/07/beyondtrust-patches-critical-auth.html #CVE #AuthBypass #RemoteAccess #CyberSec
thehackernews.com

BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRA

0
0
0
0
You've seen all posts