gcdRadar
tags/Attack types

auth-bypass

11 live · 79 on record · last incident 4 days ago

Dec ’25records per month, by first reportNov ’26

Live11

  1. live9.3
    FortiOS FortiOS/FortiSASE OSPF daemon authentication bypass via crafted LSA

    Patch now · Disclosed · since 10 Nov 2026

    An authentication bypass (CWE‑305) in the OSPF daemon of FortiOS and FortiSASE permits an unauthenticated attacker to broadcast LSAs using specially crafted requests. The vulnerability is assigned a CVSS v3 score of 9.3, indicating critical severity.

  2. live9.0
    FortiAuthenticator FortiAuthenticator hard‑coded password enables authentication bypass

    Patch now · Disclosed · since 10 Nov 2026

    A hard‑coded password (CWE‑259) in FortiAuthenticator can be used by an unauthenticated attacker to bypass credential validation. The flaw has a CVSS v3 score of 9.0 and may lead to unauthorized access.

  3. live9.1
    FortiManager Fortinet Authorization Bypass Flaw in dmserver

    Patch now · Disclosed · since 10 Nov 2026

    An authorization bypass vulnerability in FortiManager and FortiAnalyzer allows authenticated administrators to access other VDOMs via crafted HTTP requests. Fortinet has published advisories regarding this issue.

    Do:Check Fortinet advisory for patch availability and apply updates.

  4. live
    Xen Orchestra Critical Xen Orchestra authentication bypass is being actively exploited

    Patch now · Exploited · since 10 Nov 2026 · updated 11 Nov 2026

    An authentication bypass flaw in Xen Orchestra and Xen Orchestra Appliance is actively exploited in the wild. Vates has issued an advisory urging immediate action.

    Do:Check the vendor advisory for available updates and apply patches immediately.

  5. live9.8
    IBM Aspera Faspex CVE-2026-123218: IBM Aspera Faspex Incorrect Authorization Vulnerability

    Patch now · Exploited · Partly patched · since 9 Nov 2026 · updated 10 Nov 2026 · CVE-2026-123218

    IBM Aspera Faspex contains an incorrect authorization flaw allowing authenticated users to craft specific messages and escalate privileges. CISA added the vulnerability to its KEV catalog following confirmation of active exploitation.

    Do:Apply mitigations or updates in accordance with vendor instructions and CISA guidance.

  6. live
    Web3Auth Web3Auth Flaw Exploited to Steal Keplr Crypto Wallets

    Breaches & attacks · Exploited · since 9 Nov 2026

    Attackers exploited a security vulnerability in Web3Auth, which handles Google and Apple sign-ins for Keplr crypto wallets, to steal funds from users. In response, the provider preemptively emptied other at-risk wallets to protect them from further theft.

  7. live
    OpenSSH OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine Linux

    Patch now · Exploited · Patched · since 5 Nov 2026 · updated 9 Nov 2026 · CVE-2026-123158

    A critical flaw in OpenSSH allowed authentication bypass using overly long passwords on Alpine Linux servers. The vendor released OpenSSH 10.6p2 to fix the issue and Alpine published patched packages.

    Do:Update OpenSSH to version 10.6p2 and ensure Alpine packages are upgraded

  8. live8.1
    iOS CVE-2024-27834: Apple Multiple Products Improper Authentication Vulnerability

    Patch now · Exploited · Patched · since 4 Nov 2026 · updated 5 Nov 2026 · CVE-2024-27834

    Apple operating systems contain an improper authentication flaw allowing attackers to bypass pointer authentication. CISA added the vulnerability to its Known Exploited Vulnerabilities catalog following confirmed in-the-wild attacks.

    Do:Apply mitigations and security updates in accordance with vendor instructions and CISA guidance.

  9. live9.3
    Barracuda devices CVE-2026-116606: Barracuda authorization bypass and command injection flaws grant root access

    Patch now · Exploited · Patched · since 3 Nov 2026 · updated 10 Nov 2026 · CVE-2026-116606

    Barracuda disclosed two vulnerabilities, including CVE-2026-116606 with a CVSS score of 9.3, that can be chained to bypass authorization controls. Successful exploitation allows attackers to gain root access to susceptible appliances.

    Do:Apply the security updates released by Barracuda to patch the vulnerabilities.

  10. live10.0
    LXD Canonical LXD and MicroCloud Client Impersonation Flaw

    Patch now · Disclosed · Patched · since 1 Nov 2026

    A critical authentication bypass flaw in Canonical LXD and MicroCloud allows attackers to impersonate trusted clients using their public certificates. Successful exploitation grants attackers full cluster and virtual machine access.

    Do:Update LXD and MicroCloud to the latest fixed versions.

  11. live7.0
    Ivanti Connect Secure CVE-2026-111357: Ivanti Connect Secure Authentication Bypass

    Patch now · Exploited · Patched · since 30 Oct 2026 · updated 31 Oct 2026 · CVE-2026-111357

    Ivanti Connect Secure contains a missing authentication vulnerability that allows local attackers to escalate privileges. CISA confirmed active exploitation in the wild.

    Do:Update Ivanti Connect Secure to 25.1.1.3 or 22.8R2.6.

Earlier68

  1. closed7.5
    MCP servers & tools CVE-2026-62264: PDF Reader MCP Authentication Bypass Flaw

    Patch now · Disclosed · Patched · since 30 Oct 2026 · CVE-2026-62264

    AI
  2. closed
    Drupal Commerce Core CVE-2026-118539: Drupal Commerce Core authorization bypass exploited

    Patch now · Exploited · since 30 Oct 2026 · CVE-2026-118539

  3. closed9.8
    Langflow CVE-2026-93680: IBM Langflow OSS Authentication Bypass Vulnerability

    Patch now · Disclosed · Patched · since 29 Oct 2026 · updated 2 Nov 2026 · CVE-2026-93680

    AI
  4. closed9.0
    HPE Networking Products HPE Patches Dozens of Critical Flaws in Networking Products

    Patch now · Disclosed · Patched · since 27 Oct 2026

  5. closed5.9
    MCP servers & tools CVE-2026-57207: NetBox MCP Server lacks HTTP endpoint authentication

    Patch now · Disclosed · since 23 Oct 2026 · CVE-2026-57207

    AI
  6. closed7.5
    MCP servers & tools CVE-2026-114123: D365 F&O MCP Server authentication bypass vulnerability

    Patch now · Disclosed · since 21 Oct 2026 · CVE-2026-114123

    AI
  7. closed6.3
    sglang-router CVE-2026-112268: sglang-router authorization bypass vulnerability

    Patch now · Disclosed · since 19 Oct 2026 · CVE-2026-112268

    AI
  8. closed6.3
    Open WebUI CVE-2026-109289: Open WebUI allows deactivated users to maintain terminal access

    Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109289

    AI
  9. closed5.4
    Open WebUI CVE-2026-109283: Authorization bypass in Open WebUI OAuth token exchange

    Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109283

    AI
  10. closed4.3
    LiteLLM CVE-2026-108574: Authorization bypass flaw in BerriAI LiteLLM

    Patch now · Disclosed · since 11 Oct 2026 · CVE-2026-108574

    AI
  11. closed8.1
    LiteLLM CVE-2026-93355: LiteLLM Weak JWT Authentication Vulnerability

    Patch now · Disclosed · since 28 Sep 2026 · CVE-2026-93355

    AI
  12. closed9.2
    Flowise CVE-2026-100606: Flowise enterprise mode SSO login authentication bypass

    Patch now · Disclosed · since 26 Sep 2026 · CVE-2026-100606

    AI
  13. closed7.7
    Flowise CVE-2026-100610: Flowise missing permission checks on upsert-history endpoints

    Patch now · Disclosed · since 26 Sep 2026 · CVE-2026-100610

    AI
  14. closed10.0
    MCP servers & tools CVE-2026-77244: Unauthenticated HTTP access in MCP Atlassian server

    Patch now · Disclosed · since 22 Sep 2026 · CVE-2026-77244

    AI
  15. closed7.4
    MCP servers & tools CVE-2026-54547: Meta Ads MCP has HTTP authentication bypass flaw

    Patch now · Disclosed · since 15 Sep 2026 · CVE-2026-54547

    AI
  16. closed8.1
    Open WebUI CVE-2026-87016: Open WebUI OAuth Account Takeover via SQLite Wildcards

    Patch now · Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87016

    AI
  17. closed4.9
    Langflow CVE-2026-17627: IBM Langflow OSS improper authorization workflow history injection

    Patch now · Disclosed · since 4 Sep 2026 · CVE-2026-17627

    AI
  18. closed9.1
    MCP servers & tools CVE-2026-55640: Nextcloud MCP Server unauthenticated webhook vulnerability

    Patch now · Disclosed · since 25 Aug 2026 · CVE-2026-55640

    AI
  19. closed9.1
    Langflow CVE-2026-19297: IBM Langflow OSS authentication restriction vulnerability

    Patch now · Disclosed · since 13 Aug 2026 · CVE-2026-19297

    AI
  20. closed5.9
    AnythingLLM Authentication Vulnerability in AnythingLLM Recovery Flow

    Patch now · Disclosed · since 10 Aug 2026 · CVE-2026-72917

    AI
  21. closed9.1
    MCP servers & tools CVE-2026-48039: Meta Ads MCP authentication bypass in middleware

    Patch now · Disclosed · since 7 Aug 2026 · CVE-2026-48039

    AI
  22. closed8.7
    Flowise CVE-2026-70636: Flowise auth bypass vulnerability in OAuth2 endpoint

    Patch now · Disclosed · since 6 Aug 2026 · CVE-2026-70636

    AI
  23. closed7.5
    Langflow CVE-2026-8446: Authentication Bypass in Langflow OSS MCP Composer Endpoint

    Patch now · Disclosed · since 5 Aug 2026 · CVE-2026-8446

    AI
  24. closed7.1
    Langflow IBM Langflow OSS authorization bypass in MemoryComponent leads to chat history exposure

    Patch now · Disclosed · since 5 Aug 2026 · CVE-2026-9130

    AI
  25. closed7.1
    Flowise CVE-2026-69262: Flowise resource validation flaw in deletion API

    Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-69262

    AI
  26. closed3.1
    Open WebUI Open WebUI Vulnerability CVE-2026-70483 Enables Chat Task Abortions

    Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-70483

    AI
  27. closed6.3
    Open WebUI CVE-2026-70490: Open WebUI role gate bypass in terminal WebSocket route

    Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-70490

    AI
  28. closed8.1
    Open WebUI CVE-2026-70494: Open WebUI folder deletion authorization bypass vulnerability

    Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-70494

    AI
  29. closed7.5
    Langflow CVE-2026-7872: IBM Langflow Arbitrary File Read and Token Forgery

    Patch now · Disclosed · since 17 Jul 2026 · CVE-2026-7872

    AI
  30. closed9.8
    Langflow CVE-2026-9103: IBM Langflow OSS Improper Authentication Vulnerability

    Patch now · Disclosed · since 17 Jul 2026 · CVE-2026-9103

    AI
  31. closed9.8
    Langflow CVE-2026-8505: Langflow Unauthenticated Flow Execution via Webhook Bypass

    Patch now · Disclosed · since 5 Oct 2026 · updated 5 Oct 2026 · CVE-2026-8505

    AI
  32. closed
    Langflow IBM Langflow OSS Authentication Bypass in Webhooks

    Patch now · Disclosed · since 17 Jul 2026

    AI
  33. closed10.0
    Ruflo Unauthenticated MCP Bridge Endpoint Exposure in Ruflo

    Patch now · Disclosed · since 9 Jul 2026 · CVE-2026-59726

    AI
  34. closed3.1
    Open WebUI Open WebUI thread ID binding flaw discloses private channel messages

    Patch now · Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59215

    AI
  35. closed3.1
    Open WebUI CVE-2026-59715: Open WebUI unauthenticated WebSocket document access

    Patch now · Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59715

    AI
  36. closed4.3
    Open WebUI CVE-2026-59227: Open WebUI image-edit authorization bypass

    Patch now · Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59227

    AI
  37. closed8.8
    LiteLLM CVE-2026-59822: LiteLLM MCP authentication bypass via OAuth2 fallback

    Patch now · Disclosed · since 22 Jul 2026 · updated 22 Jul 2026 · CVE-2026-59822

    AI
  38. closed9.3
    Flowise CVE-2026-56278: Flowise uses a hardcoded default session secret enabling authentication bypass

    Patch now · Disclosed · since 30 Jun 2026 · CVE-2026-56278

    AI
  39. closed9.3
    Flowise Flowise Authentication Bypass Vulnerability CVE-2025-71327

    Patch now · Disclosed · since 25 Jun 2026 · CVE-2025-71327

    AI
  40. closed0.0
    AnythingLLM CVE-2026-55611: AnythingLLM missing ownership check on file deletion endpoint

    Patch now · Disclosed · since 24 Jun 2026 · CVE-2026-55611

    AI
  41. closed10.0
    MCP servers & tools CVE-2026-49257: mcp-pinot exposes unauthenticated HTTP MCP server by default

    Patch now · Disclosed · since 18 Jun 2026 · CVE-2026-49257

    AI
  42. closed9.1
    vLLM CVE-2026-48746: vLLM OpenAI API Authentication Bypass

    Patch now · Disclosed · since 16 Jun 2026 · updated 22 Jun 2026 · CVE-2026-48746

    AI
  43. closed9.8
    LiteLLM CVE-2026-49468: LiteLLM Authentication Bypass via Host Header Injection

    Patch now · Disclosed · since 16 Jun 2026 · updated 22 Jun 2026 · CVE-2026-49468

    AI
  44. closed8.8
    ChromaDB CVE-2026-45832: Authorization control bypass in ChromaDB Python project endpoints

    Patch now · Disclosed · since 12 Jun 2026 · CVE-2026-45832

    AI
  45. closed8.8
    ChromaDB CVE-2026-8828: Authorization validation flaw in ChromaDB Rust project

    Patch now · Disclosed · since 12 Jun 2026 · CVE-2026-8828

    AI
  46. closed5.0
    Weaviate CVE-2026-11500: Weaviate Authorization Bypass in Static API Key Handler

    Patch now · Disclosed · since 8 Jun 2026 · CVE-2026-11500

    AI
  47. closed4.3
    AnythingLLM AnythingLLM Authentication Flaw Permits Unauthorized Workspace Access

    Patch now · Disclosed · since 28 May 2026 · CVE-2026-47713

    AI
  48. closed
    Flowise Flowise mass assignment password override vulnerability

    Patch now · Disclosed · since 20 May 2026

    AI
  49. closed9.1
    Dify Dify Authorization Bypass Leads to Tenant Trace Configuration Exposure

    Patch now · Disclosed · since 18 May 2026 · CVE-2026-41947

    AI
  50. closed8.2
    Dify CVE-2026-41949: Dify authorization bypass in file preview endpoint

    Patch now · Disclosed · since 18 May 2026 · CVE-2026-41949

    AI
  51. closed7.2
    Open WebUI CVE-2026-45395: Permission Bypass in Open WebUI Tool Update Endpoint

    Patch now · Disclosed · since 15 May 2026 · CVE-2026-45395

    AI
  52. closed6.5
    Open WebUI CVE-2026-45339: API Key Restriction Bypass in Open WebUI

    Patch now · Disclosed · Patched · since 15 May 2026 · updated 15 May 2026 · CVE-2026-45339

    AI
  53. closed6.5
    Open WebUI CVE-2026-45345: Open WebUI Authorization Bypass Vulnerability in Model Updates

    Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45345

    AI
  54. closed6.5
    Open WebUI CVE-2026-44571: Open WebUI Improper Authorization in Standard Channels

    Patch now · Disclosed · since 11 May 2026 · updated 15 May 2026 · CVE-2026-44571

    AI
  55. closed9.1
    Open WebUI CVE-2026-44551: Open WebUI LDAP Empty Password Authentication Bypass

    Patch now · Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44551

    AI
  56. closed5.3
    Flowise CVE-2026-8027: Authorization bypass in FlowiseAI Flowise user controller handler

    Patch now · Disclosed · since 6 May 2026 · CVE-2026-8027

    AI
  57. closed6.5
    Dify CVE-2026-41950: Authorization bypass in Dify allows unauthorized file access

    Patch now · Disclosed · since 5 May 2026 · CVE-2026-41950

    AI
  58. closed9.8
    Flowise CVE-2026-41276: Flowise resetPassword Authentication Bypass

    Patch now · Disclosed · since 16 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41276

    AI
  59. closed
    LiteLLM LiteLLM authentication bypass and password hash exposure

    Patch now · Disclosed · since 8 Apr 2026

    AI
  60. closed9.4
    LiteLLM CVE-2026-35030: LiteLLM authentication bypass via OIDC cache collision

    Patch now · Disclosed · since 3 Apr 2026 · updated 6 Apr 2026 · CVE-2026-35030

    AI
  61. closed7.5
    AnythingLLM CVE-2026-32617: Authentication bypass and loose CORS in AnythingLLM

    Patch now · Disclosed · since 16 Mar 2026 · CVE-2026-32617

    AI
  62. closed8.7
    Flowise CVE-2026-30820: Flowise Authorization Bypass via Spoofed Header

    Patch now · Disclosed · since 6 Mar 2026 · updated 7 Mar 2026 · CVE-2026-30820

    AI
  63. closed8.8
    Langflow CVE-2026-21445: Langflow Missing Authentication on Critical API Endpoints

    Patch now · Disclosed · since 2 Jan 2026 · CVE-2026-21445

    AI
  64. closed9.3
    Ollama CVE-2025-63389: Authentication bypass in Ollama API endpoints

    Patch now · Disclosed · since 18 Dec 2025 · CVE-2025-63389

    AI
  65. closed
    Flowise Flowise authentication bypass using unprotected registration endpoint

    Patch now · Disclosed · since 17 Nov 2025

    AI
  66. closed6.5
    Dify CVE-2025-32795: Authorization bypass vulnerability in Dify app management

    Patch now · Disclosed · since 18 Apr 2025 · CVE-2025-32795

    AI
  67. closed8.6
    Flowise CVE-2024-8181: Flowise authentication bypass vulnerability

    Patch now · Disclosed · since 27 Aug 2024 · CVE-2024-8181

    AI
  68. closed
    Lloyds Bank Voice ID Lloyds Bank Voice ID Bypassed Using AI-Generated Audio

    Breaches & attacks · Exploited · since 22 Feb 2023

    AI