authentication

• CVE-2026-39831 - Go x/crypto ssh FIDO presence bypass 2026-06-26
• CVE-2026-48039 - Meta Ads MCP HTTP tool auth bypass 2026-06-13
• CVE-2025-3248 - Langflow validate/code unauthenticated RCE 2026-06-11
• CVE-2025-49596 - MCP Inspector proxy unauthenticated RCE 2026-06-11
• CVE-2026-0723 - GitLab 2FA device response bypass 2026-06-11
• CVE-2026-10143 - kafka-python SCRAM iteration count DoS 2026-06-11
• CVE-2026-45063 - Symfony X509Authenticator DN identity spoofing 2026-06-08
• CVE-2026-47391 - PraisonAI A2A eval tool RCE 2026-06-07
• GHSA-63gr-g7jc-v8rg - AgenticMail MCP HTTP auth bypass 2026-06-07
• CVE-2026-27478 - Unity Catalog JWT issuer bypass 2026-05-12
• CVE-2026-41428 - Budibase public endpoint auth bypass 2026-05-08
• CVE-2026-39858 - Traefik forwarded alias auth bypass 2026-05-02
• CVE-2026-41574 - Nhost OAuth email verification bypass 2026-05-02
• CVE-2026-42354 - Sentry SAML SSO identity linking 2026-05-02
• CVE-2026-42560 - go-pkgz/auth Patreon identity collision 2026-05-02
• CVE-2026-7458 - WordPress User Verification OTP auth bypass 2026-05-02
• CVE-2026-7567 - WordPress Temporary Login auth bypass 2026-05-02