Everything Firewall Scoop has reported about authentication bypass: 5 stories, newest first. Part of our Vulnerabilities coverage.
A high-severity flaw in Lotus versions up to 0.10.2 allows attackers to forge API keys using only known prefixes, potentially altering usage metrics and billing records for affected organizations.
Progress released patches for 12 MOVEit Transfer vulnerabilities, including high-severity authentication bypass and privilege escalation flaws.
A high-severity flaw in kin-openapi allows unauthenticated users to bypass security checks by manipulating URL encoding, affecting versions prior to the recent patch.
Fortinet disclosed a critical flaw in October 2026 that allows remote attackers to bypass GUI authentication and execute unauthorized code on vulnerable appliances and PaaS instances.
A critical flaw in PraisonAI allows remote attackers to bypass authentication, access private context, and trigger agent workflows without any credentials.