🎯 Authentication bypass

The items that name it 15

• Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware
  articleas techniques2026-10-29

  CVE-2026-20127 lets remote attackers gain privileged access to Catalyst SD-WAN Controller and Manager and add rogue peers.

• Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz
  advisoryas techniques2026-10-26

  Attack enabled by CVE-2026-16436 and CVE-2026-16437 in the affected ICONICS and MC Works64 products

• Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products
  articleas techniques2026-10-14
• Major ICQ security hole (1998)
  advisoryas classification.key entities2026-10-13
• Dark Web Intelligence (@DailyDarkWeb) on X
  threadas techniques2026-10-12It is written here as Authentication bypass (WT-2026-0143, no CVE): re-running the Setup Wizard through the Home page to reset the admin password; fixed in build 76530 (Sep 1).

  WT-2026-0143, no CVE

• sakidekin/CVE-2026-41940-PoC
  repoas classification.key entities2026-10-11
• Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578)
  writeupas classification.key entities2026-10-09
• Qilin Ransomware Suspect Arrested in Japan, Extradited to Germany
  articleas techniques2026-10-07

  Exploitation of critical authentication bypass vulnerability (CVE-2026-50751) in Check Point VPN and firewall products by Qilin, in June

• When Business Email Compromise Starts Rewriting Reality
  writeupas techniques2026-09-24

  CVE-2022-37042, chained with path traversal (CVE-2022-27925) to drop a JSP shell on a Zimbra server without credentials.

• Building an AI Detection Engine That Understands Agent Intent
  articleas techniques2026-09-17

  Attackers chaining JFrog Artifactory CVEs to bypass authentication and gain administrative control

• Metasploit Wrap Up: This One Goes to Sixteen!
  articleas techniques2026-09-11

  Used in Cisco FMC exploit, SonicWall SMA1000 SSRF chain, and SimpleHelp OIDC bypass to gain unauthenticated access

• Active exploitation of Cisco Secure Firewall Management Center vulnerabilities
  writeupas techniques2026-09-09

  exploitation of CVE-2026-20079 to bypass authentication and execute scripts for root access

• What Is AI Pentesting and How Does It Work?
  articleas techniques2026-07-27

  Context-dependent vulnerability class targeted by AI pentesting

• Revenge of the SD-WAN: Exploring and Exploiting Yet Another Critical Cisco SD-WAN Vulnerability (CVE-2026-76504)
  writeupas classification.key entities
• AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution
  articleas techniquesIt is written here as Authentication bypass: authentication middleware skipped MCP paths assuming the handler would verify tokens itself, but it never did, so the socket accepted unauthenticated connections.