Vulnerabilities
WhaTicket Community Auth Bypass Enables Unauthenticated Admin Registration
A critical flaw in WhaTicket Community allows attackers to register as administrators without credentials, exposing tickets and settings.
authentication bypass
Everything Firewall Chronicle has reported about authentication bypass: 6 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Misaka Danmu Server Auth Bypass Allows Admin Takeover in Versions Through 2.8.9
Unauthenticated attackers can rewrite configuration keys via an unprotected endpoint to seize administrative control in Misaka Danmu Server.
Vulnerabilities
Apache Answer CVE-2026-86589: Session Persistence Bypasses Account Suspension
A flaw in Apache Answer allows suspended external user sessions to remain active, bypassing central account controls until timeout.
Vulnerabilities
Juniper Junos J-Web Authentication Bypass Grants Root Access to Networks
Unauthenticated attackers can seize control of Juniper devices via a critical flaw in the J-Web management interface and NETCONF session handling.
Vulnerabilities
OTRS CE 6 Critical Header Injection Flaw Enables User Impersonation in CGI Environments
Unauthenticated attackers can impersonate users in OTRS Community Edition 6 by injecting crafted HTTP headers in CGI or mod_perl environments.
Vulnerabilities
Advanced IP Blocker Zero-Day Lets Attackers Steal Session Cookies to Bypass 2FA
A critical flaw in the Advanced IP Blocker WordPress plugin lets attackers bypass two-factor authentication and seize full site control without passwords.