CWE-287 - Improper Authentication - Cwe

Related Threat Clusters

• Critical SonicWall SMA1000 Vulnerabilities Under Active Exploitation

  SonicWall has reported two critical vulnerabilities, CVE-2026-15409 and CVE-2026-15410, affecting its SMA1000 Series appliances, which are currently being actively exploited. The first vulnerability, CVE-2026-15409, is…

  28 articles · Updated July 15, 2026
• Critical Zero-Day Vulnerability CVE-2026-20182 Exploited in Cisco SD-WAN Systems

  Cisco has disclosed a critical authentication bypass vulnerability, CVE-2026-20182, affecting its Catalyst SD-WAN Controller and Manager. This flaw allows unauthenticated remote attackers to bypass authentication and…

  131 articles · Updated May 14, 2026
• Critical Joomla JCE Vulnerability Under Active Exploitation

  A critical vulnerability in the Joomla Content Editor (JCE), tracked as CVE-2026-48907, allows unauthenticated attackers to execute remote code on affected Joomla sites. This flaw affects JCE versions below 2.9.99.6 and…

  33 articles · Updated June 17, 2026
• Critical Unauthenticated RCE Vulnerability in LiteLLM Exploited in the Wild

  A critical command injection vulnerability, CVE-2026-42271, in LiteLLM, an open-source AI gateway, allows unauthenticated remote code execution (RCE) when chained with CVE-2026-48710, a Host header validation bypass in…

  17 articles · Updated June 9, 2026
• GRU Compromises Home Routers in 23 States to Steal Outlook Credentials

  The FBI and partners disrupted a covert network of compromised TP-Link and MikroTik routers exploited by the Russian GRU (APT28) to steal Outlook credentials. This operation, known as Operation Masquerade, revealed that…

  6 articles · Updated May 22, 2026
• Operation Highland: Velvet Ant's Decade-Long Espionage Campaign

  Operation Highland, attributed to the Velvet Ant cyberespionage group, involved a sophisticated attack that began in 2016 and persisted undetected for a decade. The attackers hijacked the authentication stack of a major…

  9 articles · Updated June 13, 2026
• Persistent Firestarter Malware Targets Cisco Firepower Devices in US Agencies

  A sophisticated backdoor malware named Firestarter has been discovered on Cisco Firepower devices, attributed to the state-sponsored threat actor UAT-4356. The malware exploits two vulnerabilities, CVE-2025-20333 and…

  37 articles · Updated April 23, 2026
• Critical Vulnerability CVE-2026-4767 in TR7 Cyber Defense WAF-ASP

  CVE-2026-4767 is a critical vulnerability affecting TR7 Cyber Defense Inc.'s WAF-ASP versions from v1.0.324.900 to before v1.4.0.117. The flaw allows unauthenticated attackers to bypass authentication controls, enabling…

  2 articles · Updated July 3, 2026
• Critical CVE-2026-48611 Vulnerability Allows OAuth Account Hijacking

  CVE-2026-48611 has been identified as a critical vulnerability due to improper authentication checks in OAuth implementations, allowing account hijacking even when OAuth is disabled. This flaw affects default…

  2 articles · Updated June 12, 2026
• Critical Check Point VPN Vulnerability Exploited by Ransomware Gang

  Check Point Software Technologies disclosed a critical authentication bypass vulnerability (CVE-2026-50751) affecting its Remote Access VPN and Mobile Access products, with exploitation confirmed since May 7, 2026. The…

  46 articles · Updated June 8, 2026

Recent Intelligence Reports

• Garante per la protezione dei dati personali's Newsletter No. 549 — www.garanteprivacy.it · July 18, 2026
• Reference 1 — support.broadcom.com · July 18, 2026
• Google’s Gemini lets strangers send messages from your locked Android phone — Grahamcluley · July 17, 2026
• Google fixing Android lock screen bug that lets Gemini send SMS without a PIN — Theregister · July 17, 2026
• Unauthenticated RCE in WordPress core (wp2shell). Patch now! — Aikido.Dev · July 17, 2026
• VMware Avi Load Balancer: Critical vulnerability allows bypassing login — Heise.De · July 17, 2026
• Shark robot vacuums vulnerable to remote command execution — Feeds.Feedburner · July 16, 2026
• Ubuntu 26.04 Authlib Important JWT Bypass and CSRF Vulnerities USN-8557 — Linuxsecurity · July 16, 2026

Related Entities