Curated security research, vulnerabilities, advisories and tools for practitioners.

#authorization-bypass

Security coverage tagged authorization-bypass.

1.

Google Bug Hunters

blog | 2026-09-11 00:00 | bughunters.google.com | original ↗ | #bug-bounty | #vulnerability-research | #access-control

2.

Finding eight high-severity vulnerabilities in NodeBB in six hours

research | 2026-07-22 00:00 | aikido.dev | original ↗ | #ai-security | #featured | #vulnerability-research

3.

The Red Agent POV: The One Boolean That Broke a B2B Platform’s Credit System

blog | 2026-07-15 13:33 | wiz.io | original ↗ | #api-security | #authorization-bypass | #red-agent

4.

The Red Agent POV: Exploiting Broken Object-Level Authorization in an Airline GraphQL API

blog | 2026-06-29 09:31 | wiz.io | original ↗ | #data-exposure | #api-security | #graphql

5.

The Masked Namespace Vulnerability In Temporal CVE-2025-14986

vulnerability | Medium | 2026-02-05 00:00 | CVE-2025-14986 | depthfirst.com | original ↗ | #cloud | #vulnerability-research | #multi-tenancy

6.

How a $20 Smart Device Gave Me Access to Your Home

blog | 2025-10-02 00:00 | bishopfox.com | original ↗ | #zero-day | #session-management | #iot-security

7.

YoSmart YoLink Hub version 0382

blog | 2025-10-02 00:00 | bishopfox.com | original ↗ | #vulnerability-disclosure | #iot-security | #smart-home

8.

Leaked Secrets and Unlimited Miles: Hacking the Largest Airline and Hotel Rewards Platform

blog | 2023-08-03 00:00 | samcurry.net | original ↗ | #bug-bounty | #path-traversal | #pii