Everything BlueTeam Herald has reported about authentication bypass: 3 stories, newest first. Part of our Vulnerabilities coverage.
A critical missing authentication flaw in IceCMS allows attackers to reset admin passwords without credentials, risking full system control for users on versions 4.1.5 and earlier.
Authentication bypass flaws often stem from predictable logic errors in code rather than complex cryptographic weaknesses, allowing attackers to skip identity checks entirely.
Unpatched TinaCMS versions allow attackers to hijack editor sessions via preview links, risking full content control without authentication.