authentication bypass

Everything Patch Herald has reported about authentication bypass: 2 stories, newest first. Part of our Vulnerabilities coverage.

9.3 CVSS: WhaTicket Community Flaw Grants Unauthenticated Admin Control Over Tickets and Settings

A critical flaw in WhaTicket Community allows unauthenticated users to register as administrators, granting full control over tickets and settings.

Oct 17, 2026

A high-severity flaw in older FileRise versions allows attackers to hijack accounts by spoofing headers if the backend is exposed.

Oct 16, 2026