authorization bypass

Everything BlueTeam Herald has reported about authorization bypass: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Patch CouchDB 3.5.2 to Block Unauthorized Access to Prefixed System Databases

A high-severity authorization bypass in Apache CouchDB allows unrestricted reading of prefixed user and replicator databases, requiring an immediate upgrade to 3.5.3.

Oct 21, 2026

Vulnerabilities

Upgrade QNAP Video Station to 5.8.8 to Stop Remote Data Theft

A high-severity authorization bypass in older QNAP Video Station versions allows remote attackers to steal sensitive data before patching.

Oct 15, 2026