Authentication Bypass

Everything Crypt Weekly has reported about Authentication Bypass: 3 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Fortinet Confirms Critical 9.6 Score for FortiSandbox GUI Authentication Bypass

Oct 14, 2026

A remote attacker can bypass login on FortiSandbox using crafted requests, creating a high-risk exposure for organizations using the appliance.

Vulnerabilities

Patch BotSharp 5.2.0 to Stop Critical Authentication Bypass via Hardcoded Keys

Oct 11, 2026

A critical flaw in BotSharp allows attackers to forge admin tokens using a hardcoded secret, enabling full system compromise.

Vulnerabilities

Update TinaCMS to Block GraphQL Exploits in Preview Iframes That Hijack Editor Sessions

Oct 10, 2026

Attackers exploit CVE-2026-108261 to hijack editor sessions via unvalidated preview iframes, granting full content access.