CWE-347 - Improper Verification of Cryptographic Signature - Cwe

Related Threat Clusters

• CISA Warns of Critical SimpleHelp Authentication Bypass Vulnerability

  The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has identified a critical authentication bypass vulnerability in SimpleHelp, tracked as CVE-2026-48558, which is actively being exploited. This flaw…

  2 articles · Updated July 2, 2026
• Multiple Vulnerabilities in FortiCloud SSO Authentication Exposed

  Fortinet reported two vulnerabilities affecting FortiOS, FortiManager, FortiAnalyzer, and FortiProxy related to FortiCloud SSO authentication. The first vulnerability, an Authentication Bypass (CWE-288), allows…

  3 articles · Updated June 22, 2026
• Critical Vulnerability CVE-2026-58426 Discovered in Gitea Actions Artifacts V4

  CVE-2026-58426, published on July 3, 2026, reveals a critical vulnerability in Gitea Actions Artifacts V4. This flaw allows attackers to exploit HMAC ambiguities in signed URLs, enabling unauthorized cross-repository…

  2 articles · Updated July 5, 2026
• Vulnerabilities in Vibe-Coded Applications Highlighted

  Recent analyses of vibe-coded applications reveal common security vulnerabilities due to the nature of AI coding agents. Tenzai's research identified 69 vulnerabilities across five popular coding agents, focusing on…

  2 articles · Updated June 1, 2026

Recent Intelligence Reports

• CVE-2026-58426 - Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write Latest Vulnerabilities / 1d CVE ID : CVE-2026-58426 Published : July 3, 2026, 8:54 p.m. 3 hours, 25 minutes ago Description : Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write Severity: 0.0 NA Visit the link for more details, such as CVSS details, affected products, timeline, and mo — cvefeed.io · July 5, 2026
• CISA Adds Actively Exploited SimpleHelp Vulnerability to KEV Catalog — Gbhackers · July 1, 2026
• FG-IR-25-647 — fortiguard.fortinet.com · June 22, 2026
• FG-IR-25-647 — www.fortiguard.com · June 22, 2026
• 5 Vulnerabilities in Every Vibe-Coded App — Strobes.Co · May 29, 2026

Related Entities