authentication-bypass

• CVE-2026-46817 - Oracle E-Business Suite Payments File Transmission takeover 2026-06-30
• CVE-2026-44895 - GitLab MCP Server SSE auth bypass 2026-06-09
• CVE-2026-49448 - authentik SourceStage empty POST bypass 2026-06-08
• CVE-2026-33032 - nginx-ui MCP auth bypass 2026-06-07