Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
Between September 26 and October 17, 2026, eight critical authentication bypass vulnerabilities were reported across various vendors, including Frontegg and Citrix. The most severe, CVE-2026-75800, allows unauthenticated admin takeover in the Frontegg SAML SSO plugin for WordPress, with a CVSS score...
A vulnerability, CVE-2026-76835, has been identified in OAuth2 Proxy versions 7.15.2 to 7.15.4, allowing unauthenticated remote attackers to bypass authentication by manipulating the X-Forwarded-Uri header. The flaw, with a CVSS score of 9.1, arises when the --reverse-proxy is enabled and specific s...
Between September 24 and 27, 2026, WorkOS identified and fixed four SAML SSO authentication bypass vulnerabilities reported by security researcher Alex Tan. The vulnerabilities stemmed from a dual-view XML parsing issue, allowing attackers to exploit discrepancies between signature verification and...
