Tag

#authentication-bypass

2 stories tagged authentication-bypass.

Bar chart showing days between SharePoint CVE-2026-55040 milestones: 55 days from Microsoft confirmation to patch, 28 days from patch to PoC, 1 day from PoC to active exploitation

SharePoint CVE-2026-55040 auth bypass exploited after PoC

CVE-2026-55040 is a CVSS 9.1 SharePoint authentication bypass patched in July. Attackers are exploiting it now after Rapid7 released a PoC on August 11.

Lars Cornelissen · Aug 13, 2026

Abstract data art representing a single HTTP header piercing through a layered authentication barrier, symbolizing the Gitea Docker auth bypass CVE-2026-20896 where one X-WEBAUTH-USER header lets attackers impersonate any user including admins across approximately 6,200 exposed instances.

Cyber security

Gitea Docker auth bypass lets attackers impersonate admins

A critical Gitea Docker auth bypass, CVE-2026-20896, lets attackers impersonate any user with one HTTP header. Over 6,200 instances are exposed online.

Lars Cornelissen · Jul 11, 2026