Skip to main content
Apexward Pulse
7 reportsPriority High

Multiple authentication bypass vulnerabilities disclosed

Several authentication bypass vulnerabilities have been disclosed, some of which are being actively exploited by threat actors, posing a risk to UK organisations using affected systems.

First report Latest

What is going on

  • A newly identified APT group was observed exploiting an authentication-bypass flaw in Cisco Catalyst SD-WAN Controller and Manager.
  • Multiple authentication bypass vulnerabilities were disclosed in various systems including SonicWall, BeyondTrust, and Fortinet.
  • Some of these vulnerabilities are reported to be actively exploited in the wild, with CISA adding one to its known-exploited catalogue.
  • Security updates have been released to address the vulnerabilities, but organisations are advised to apply them promptly.
  • The extent of exploitation and impact on UK organisations remains unclear at this time.
  • What to watch: The confirmation of further exploitation attempts or the release of additional details about the APT group involved.

Reports in this story

Newest first. Each one is a separate event with its own sources and evidence.

Back to the feed