1.MicroTrick: MikroTik RouterOS Unauthenticated Takeover Exploit PoC (CVE-2026-86060)vulnerability | Critical | Actively exploited | 2026-09-22 13:41 | CVE-2026-86060 | github.com | Original ↗ | .md | #active-exploitation | #rce | #zero-day
2.[CVE-2026-67279] MikroTrick: Inside the RouterOS Takeover Chainvulnerability | 2026-09-17 00:00 | CVE-2026-67279 | bishopfox.com | Original ↗ | .md | #authentication-bypass | #network-security | #mikrotik
3.CVE-2026-82329: Unauthenticated Administrative Access in JFrog Artifactory via an Empty Cluster Join Keyvulnerability | 2026-09-11 00:00 | CVE-2026-82329 | bishopfox.com | Original ↗ | .md | #authentication-bypass | #jfrog | #bishop-fox
4.Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490vulnerability | 2026-09-09 00:00 | CVE-2026-19490 | bishopfox.com | Original ↗ | .md | #authentication-bypass | #citrix | #netscaler
5.Flexense SyncBreeze – Unauthenticated Remote Code Execution (0DAY-2025-0002)vulnerability | Critical | 2026-08-25 06:58 | crowdfense.com | Original ↗ | .md | #rce | #zero-day | #authentication-bypass
6.CVE-2026-61967 — miniOrange OTP Verification Ultimate Member Password Reset Authentication Bypassresearch | 2026-08-15 00:00 | CVE-2026-61967 | aretiq.ai | Original ↗ | .md | #ai-security | #authentication-bypass | #wordpress
7.CVE-2026-55040: SharePoint Server Subscription Edition improper JWT validation lead to Arbitrary Account Loginvulnerability | 2026-08-11 05:13 | CVE-2026-55040 | blog.viettelcybersecurity.com | Original ↗ | .md | #authentication-bypass | #microsoft | #sharepoint
8.CVE-2026-24031 PoC: Dovecot SQL authentication bypass and user enumerationtool | 2026-08-12 23:19 | CVE-2026-24031 | github.com | Original ↗ | .md | #public-poc | #authentication-bypass | #sql-injection
9.A Millisecond of Predictability: Why CVE-2026-11374 Is Hard to Exploitvulnerability | Critical | 2026-07-21 00:00 | CVE-2026-11374 | bishopfox.com | Original ↗ | .md | #featured | #vulnerability-research | #account-takeover
10.Authentication Bypass in the default configuration phpBBvulnerability | Critical | 2026-07-04 00:00 | CVE-2026-48611 | aikido.dev | Original ↗ | .md | #ai-security | #featured | #account-takeover
11.Detecting CVE-2026-0265 at Scale: PAN-OS CAS Authentication Bypassvulnerability | High | 2026-05-22 00:00 | CVE-2026-0265 | bishopfox.com | Original ↗ | .md | #authentication-bypass | #jwt | #palo-alto-networks
12.CVE-2026-45434 — Apache OFBiz LoginWorker checkLogin Password-Change Flow Authentication Bypass RCEresearch | 2026-05-20 00:00 | CVE-2026-45434 | aretiq.ai | Original ↗ | .md | #rce | #authentication-bypass | #cve-2026-45434
13.CVE-2025-32975: The Open Directory Behind the KACE SMA Breach and 60+ Downstream Victimsincident | 2026-05-12 00:00 | CVE-2025-32975 | hunt.io | Original ↗ | .md | #incident-response | #threat-intelligence | #authentication-bypass
14.API Authentication Bypass in FortiClient EMS 7.4.5-7.4.6–CVE-2026-35616vulnerability | Critical | Actively exploited | 2026-04-07 00:00 | CVE-2026-35616 | bishopfox.com | Original ↗ | .md | #vulnerability-research | #authentication-bypass | #certificate-validation
15.Critical auth bypass in WordPress Azure AD SSO plugin due to missing OIDC id_token validationvulnerability | Critical | 2026-04-10 07:36 | CVE-2026-2628 | yeswehack.com | Original ↗ | .md | #cloud | #authentication-bypass | #wordpress
16.CVE-2026-20127 – Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Overview & Takeawaysvulnerability | 2026-02-27 00:00 | CVE-2026-20127 | netspi.com | Original ↗ | .md | #authentication-bypass | #network-security | #cisco
17.The Fragile Lock: Novel Bypasses For SAML Authenticationresearch | 2026-01-21 10:34 | portswigger.net | Original ↗ | .md | #appsec | #ruby | #authentication-bypass
18.Fortinet FortiWeb Authentication Bypass – CVE-2025-64446vulnerability | Critical | Actively exploited | 2025-11-19 00:00 | CVE-2025-64446 | bishopfox.com | Original ↗ | .md | #active-exploitation | #vulnerability-research | #authentication-bypass
19.Hacking the World Poker Tour: Inside ClubWPT Gold’s Back Officeblog | 2025-10-12 00:00 | samcurry.net | Original ↗ | .md | #ai-security | #bug-bounty | #access-control
20.Wiz Research Uncovers Critical Vulnerability in AI Vibe Coding platform Base44 Allowing Unauthorized Access to Private Applicationsblog | 2025-07-29 14:00 | wiz.io | Original ↗ | .md | #ai-security | #cloud-security | #authentication-bypass
21.[CVE-2025-49704] ToolShell - A Critical SharePoint Vulnerability Chain under Active Exploitationvulnerability | 2025-07-24 10:37 | CVE-2025-49704 | blog.viettelcybersecurity.com | Original ↗ | .md | #rce | #authentication-bypass | #threat-hunting
22.Golden dMSA: What Is dMSA Authentication Bypass?vulnerability | 2025-07-16 09:30 | semperis.com | Original ↗ | .md | #active-directory | #authentication-bypass | #privilege-escalation
23.Unexpected security footguns in Go's parsersblog | 2025-06-18 11:00 | CVE-2020-16250 | blog.trailofbits.com | Original ↗ | .md | #authentication-bypass | #deserialization | #go
24.Vibe Hacking: Finding Auth Bypass and RCE in Open Game Panelresearch | 2025-04-30 05:52 | CVE-2025-15586 | projectblack.io | Original ↗ | .md | #rce | #authentication-bypass | #open-game-panel
25.SAML roulette: the hacker always winsresearch | 2025-03-31 07:10 | portswigger.net | Original ↗ | .md | #gitlab | #authentication-bypass | #xml
26.SonicWall-CVE-2024-53704: Exploit Detailsvulnerability | 2025-03-21 00:00 | CVE-2024-53704 | bishopfox.com | Original ↗ | .md | #authentication-bypass | #exploit | #session-hijacking
27.Prisma and PostgreSQL vulnerable to NoSQL injection? A surprising security risk explainedblog | 2025-02-14 00:00 | aikido.dev | Original ↗ | .md | #authentication-bypass | #postgresql | #nosql-injection
28.Broken access control in GoAnywhere Admin portalblog | 2024-12-10 10:54 | blog.viettelcybersecurity.com | Original ↗ | .md | #access-control | #authentication-bypass | #path-traversal
29.PimpMyBurp #11 – Master Signed Token Exploits with SignSaboteurblog | 2024-11-27 14:00 | yeswehack.com | Original ↗ | .md | #burp-suite | #authentication-bypass | #web-security
30.How XBOW Found a Scoold Authentication Bypassvulnerability | 2024-11-14 01:00 | xbow.com | Original ↗ | .md | #arbitrary-file-read | #vulnerability-research | #open-source