3 results for “authentication bypass”
Keycloak CVE-2026-18963 lets unauthenticated attackers reset any user's password without the email verification link. The flaw carries a 9.1 CVSS score and affects every deployment using the default password reset flow.
On 10 August 2026 OpenAI put GPT-5.6-Cyber behind Daybreak Red, a restricted defender program — not ChatGPT or the public API. Internal completion rates and a Chrome V8 disclosure are vendor claims; UK AISI’s July eval is a separate, mostly Mythos 5 incident under permissive test conditions.
On 29 July 2026, Broadcom published security advisory VMSA-2026-0006 addressing five vulnerabilities across VMware ESXi, vCenter Server, Workstation, and Fusion. vCenter Server is the central management plane for vSphere environments.