Skip to main content
Apexward Pulse
5 reportsPriority High

Authentication bypass vulnerabilities in enterprise software

Multiple authentication bypass vulnerabilities have been disclosed in enterprise software, posing risks to UK organisations that use affected systems.

First report Latest

What is going on

  • A vulnerability in Kentico Xperience CMS allows attackers to bypass authentication and control administrative objects, with reports of active exploitation.
  • CISA has added two new vulnerabilities to its known-exploited catalogue, based on evidence of active exploitation.
  • OpenSSH has issued patches for a vulnerability that allows authentication bypass on certain Linux systems.
  • A vulnerability in SonicWall SonicOS SSLVPN allows attackers to bypass SAML checks, including SAML-enforced MFA, with reports of exploitation in the wild.
  • SonicWall has released security updates to fix an SSL-VPN authentication bypass flaw that has been exploited in attacks.
  • The vulnerabilities highlight ongoing risks in enterprise software authentication mechanisms.
  • What to watch: Further details on the extent of exploitation and the availability of patches for affected systems.

Reports in this story

Newest first. Each one is a separate event with its own sources and evidence.

Back to the feed