Skip to main content
Apexward Pulse
5 reportsPriority Medium

Multiple authentication and code execution vulnerabilities disclosed

Several critical vulnerabilities have been reported that could allow attackers to bypass authentication or execute code remotely, posing a risk to UK organisations using affected systems.

First report Latest

What is going on

  • An authentication bypass vulnerability was reported in Ivanti Endpoint Manager that could allow unauthenticated attackers to access stored credentials.
  • A remote code execution vulnerability was disclosed in n8n's workflow system, with reports of exploitation in the wild.
  • Quest KACE Systems Management Appliance was found to have multiple improper authentication vulnerabilities that could let attackers impersonate users.
  • PaperCut NG/MF was reported to have an authentication bypass vulnerability affecting its SecurityRequestFilter class.
  • A race condition in Apache HTTP Server's mod_http2 module could allow remote code execution on servers with HTTP/2 enabled.
  • What to watch: Confirmation of whether these vulnerabilities are being actively exploited in UK networks.

Reports in this story

Newest first. Each one is a separate event with its own sources and evidence.

Back to the feed