Tag: Authentication Bypass

CWPdoor Backdoor Found Hidden In Control Web Panel Linux Servers

Risk & ResilienceNovember 6, 2026

QiAnXin XLab researchers identify CWPdoor, a stealthy Linux backdoor that replaces Control Web Panel server software and executes remote commands without access log entries.

Arcana Info Delivers IBM BAW Upgrade And Successful Production Cutover At Meezan Bank

WiredNovember 6, 2026

Arcana Info completes the IBM Business Automation Workflow upgrade and production cutover at Meezan Bank, strengthening platform stability, performance and scalability.

CISA Updates KEV Catalog With N-able N-central Authentication Bypass Vulnerability

Risk & ResilienceAugust 4, 2026

CISA has added the actively exploited N-able N-central authentication bypass vulnerability CVE 2026 18577 to its KEV catalog following customer compromises and reports of ongoing attacks.

Check Point Patches SmartConsole Authentication Bypass Flaw Allowing Full Admin Access

Risk & ResilienceJuly 23, 2026

Check Point has released security updates for three high severity vulnerabilities, including an actively exploited SmartConsole authentication bypass flaw that grants full administrative access.

Palo Alto Networks Warns Of Active Exploitation Targeting PAN OS GlobalProtect VPN Vulnerability

Risk & ResilienceJune 15, 2026

Palo Alto Networks confirms active exploitation of PAN OS vulnerability CVE 2026 0257 affecting GlobalProtect VPN portals, urging customers to review logs and mitigate risks.

Critical cPanel Vulnerability Exploited To Target Government And MSP Networks Across Multiple Regions

Risk & ResilienceMay 6, 2026

A critical cPanel vulnerability CVE 2026 41940 is being actively exploited to target government, military, and MSP networks globally, enabling authentication bypass and remote control, with thousands of systems impacted.

IBM Warns Of Critical Authentication Flaw In API Connect Affecting Multiple Versions

Risk & ResilienceJanuary 2, 2026

IBM discloses critical CVE-2025-13915 vulnerability in API Connect allowing potential remote authentication bypass. Users are advised to apply interim fixes immediately.

Critical Cisco Cloud Vulnerability Prompts Govt Warning Over Unauthenticated Access Risks

WiredJune 23, 2025

Pakistan’s National Computer Emergency Team issues urgent advisory on CVE-2025-20286, a critical vulnerability in Cisco ISE cloud deployments that allows full access without a password.