Tag archive
CVE-2026-104935 routes a pre-auth request into a CGI handler that assumed a different caller. Affected builds, the credential theft that follows, and why a clean integrity check is not proof.
An authentication bypass in a self-hosted artifact repository puts build pipelines and signed packages within reach of an unauthenticated attacker.
Two exploited NetScaler entries in one month, what an alternate-path bypass buys at a gateway, and how to verify sessions that carry no matching authentication event.
CVE-2026-76460 is a CVSS 10.0 authentication bypass in Cisco ISE and ISE-PIC that yields root and is confirmed exploited in the wild. What defenders should sequence first.
Two September 2026 findings in managed file transfer products, and why authentication layer flaws in this product class matter so much.
CVE-2026-19490 in Citrix NetScaler went from patch to active exploitation in fifteen days, and the bypass produces successful sessions rather than failed logins.
How an empty join key in default JFrog Artifactory installations allowed administrator token forgery, and what the observed exploitation chain means for build pipelines.
Cisco ISE CVE-2026-76460 is a CVSS 10.0 authentication bypass in an API endpoint that yields root. This article covers affected versions, branch-specific fixes, and detection when the attacker holds root.
A breakdown of the JFrog Artifactory authentication chain, why artifact repositories behave like credential stores, and what remediation must include beyond upgrading.
Measuring Citrix NetScaler exposure with ZoomEye, and why authentication gateways require a different exposure analysis than ordinary services.
How a default empty join key in JFrog Artifactory allowed unauthenticated attackers to mint administrator tokens, and what defenders should verify.
CVE-2026-76460: Maximum-Severity Cisco ISE Authentication Bypass Under Active Exploitation