# Authentication bypass.

Getting in without valid credentials: missing or broken authentication, sessions. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Teddy Bear Customize Addon <= 1.0.5 - Unauthenticated Account Takeover](https://agentprime.io/advisories/CVE-2026-14559.md)
  `CVE-2026-14559` · CVE record: Unknown teddy-bear-customize-addon · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026 · Tags: Authentication bypass
- [Authentication bypass in Brainzcompany Zenius EMS 8.0](https://agentprime.io/advisories/CVE-2026-88260.md)
  `CVE-2026-88260` · CVE record: Brainzcompany Zenius EMS 8.0 · CVSS 8.7 High · Not analysed yet · Published 11 Sept 2026 · Tags: Authentication bypass, CWE-1286
- [An improper authentication vulnerability in the WS-Security (wsse:UsernameToken) verification routine within the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earl…](https://agentprime.io/advisories/CVE-2026-79395.md)
  `CVE-2026-79395` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026 · Tags: Authentication bypass
- [\[UNREVIEWED\] OAuth Callback Login Bypasses Deactivated-Account Checks](https://agentprime.io/advisories/CVE-2026-81906.md)
  `CVE-2026-81906` · CVE record: Concrete CMS Concrete CMS · CVSS 6.3 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass
- [Traefik HTTP/3 Backend NTLM Connection Reuse](https://agentprime.io/advisories/GHSA-qqjf-53cj-pwvv.md)
  `GHSA-qqjf-53cj-pwvv`, `CVE-2026-88007`, `GO-2026-6466` · Go `github.com/traefik/traefik/v2` and 1 more: affected `>=2.11.0, <2.11.57`, fixed in `2.11.57` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass, Broken access control
- [rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypass](https://agentprime.io/advisories/GHSA-xwwr-4h3p-r22c.md)
  `GHSA-xwwr-4h3p-r22c`, `BIT-rclone-2026-88018`, `CVE-2026-88018`, `GO-2026-6462` · Go `github.com/rclone/rclone`: affected `<1.75.1`, fixed in `1.75.1` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass
- [Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notes](https://agentprime.io/advisories/GHSA-wjwr-xfp9-r66p.md)
  `GHSA-wjwr-xfp9-r66p`, `CVE-2026-87014`, `PYSEC-2026-4127` · PyPI `open-webui`: affected `>=0.9.0, <0.11.1`, fixed in `0.11.1` · CVSS 6.5 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass, Broken access control
- [Langflow is vulnerable to authentication bypass and insufficient session expiration](https://agentprime.io/advisories/CVE-2026-81268.md)
  `CVE-2026-81268` · CVE record: IBM Langflow OSS · CVSS 8.1 High · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass
- [DataStage on Cloud Pak for Data has several vulnerabilities due to open source software](https://agentprime.io/advisories/CVE-2026-82107.md)
  `CVE-2026-82107` · CVE record: IBM DataStage on Cloud Pak for Data · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass
- [Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite](https://agentprime.io/advisories/GHSA-wpmr-8h3q-fwj7.md)
  `GHSA-wpmr-8h3q-fwj7`, `CVE-2026-87016`, `PYSEC-2026-4128` · PyPI `open-webui`: affected `>=0.6.41, <0.11.1`, fixed in `0.11.1` · CVSS 8.1 High · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass, CWE-155
- [OmniRoute ACP Custom-Agent Remote Code Execution (RCE)](https://agentprime.io/advisories/GHSA-hf57-cqmx-p4gr.md)
  `GHSA-hf57-cqmx-p4gr`, `CVE-2026-88062` · npm `omniroute`: affected `<=3.8.50`, no fixed version yet · CVSS 9.5 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Code injection, Authentication bypass
- [n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions](https://agentprime.io/advisories/GHSA-pf83-w3f9-8m37.md)
  `GHSA-pf83-w3f9-8m37`, `CVE-2026-86084` · npm `n8n`: affected `<1.123.76 || >=2.0.0, <2.37.7 || >=2.38.0, <2.38.2`, fixed in `1.123.76`, `2.37.7`, `2.38.2` · CVSS 6.0 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass
- [Authentication bypass by spoofing in Lenovo Software Fix](https://agentprime.io/advisories/CVE-2026-63427.md)
  `CVE-2026-63427` · CVE record: Lenovo Software Fix · CVSS 8.5 High · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass
- [Traefik: ForwardAuth identity spoofing via dot-form header alias](https://agentprime.io/advisories/GHSA-rf44-j88r-hh8c.md)
  `GHSA-rf44-j88r-hh8c`, `CVE-2026-88011`, `CVE-2026-88879`, `GO-2026-6455` · Go `github.com/traefik/traefik/v2` and 1 more: affected `<2.11.56`, fixed in `2.11.56` · CVSS 5.3 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass
- [IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities](https://agentprime.io/advisories/CVE-2026-9336.md)
  `CVE-2026-9336` · CVE record: IBM WebSphere Application Server · CVSS 6.5 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass
- [WordPress WP Travel plugin <= 12.0.3 - Broken Authentication vulnerability](https://agentprime.io/advisories/CVE-2026-81796.md)
  `CVE-2026-81796` · CVE record: WEN Solutions WP Travel · CVSS 7.3 High · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass
- [WordPress IMPress for IDX Broker plugin <= 3.3.0 - Broken Authentication vulnerability](https://agentprime.io/advisories/CVE-2026-81787.md)
  `CVE-2026-81787` · CVE record: IDX Broker IMPress for IDX Broker · CVSS 6.5 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass
- [WordPress MailMunch – Grow your Email List plugin <= 3.2.5 - Broken Authentication vulnerability](https://agentprime.io/advisories/CVE-2026-81783.md)
  `CVE-2026-81783` · CVE record: mailmunch MailMunch – Grow your Email List · CVSS 7.1 High · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass
- [WordPress Simple Cloudflare Turnstile plugin <= 1.42.1 - Captcha Bypass vulnerability](https://agentprime.io/advisories/CVE-2026-66674.md)
  `CVE-2026-66674` · CVE record: Elliot Sowers/ RelyWP Simple Cloudflare Turnstile · CVSS 5.6 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass
- [CyberPanel before 3.0.5 Authentication Bypass via API](https://agentprime.io/advisories/CVE-2026-88895.md)
  `CVE-2026-88895` · CVE record: usmannasir cyberpanel · CVSS 8.6 High · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass
- [Capgo AAL1 Session MFA Bypass via Direct RBAC Authorization](https://agentprime.io/advisories/CVE-2026-88861.md)
  `CVE-2026-88861` · CVE record: Cap-go capgo.app · CVSS 8.7 High · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass
- [GV-LPC2011/LPC2211 - Unauthenticated PTZ Control Service](https://agentprime.io/advisories/CVE-2026-88285.md)
  `CVE-2026-88285` · CVE record: GeoVision Inc. GV-LPC2011/LPC2211 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass
- [GV-LPCLPC2011/2211 - ONVIF WS-Security PasswordDigest Replay](https://agentprime.io/advisories/CVE-2026-88278.md)
  `CVE-2026-88278` · CVE record: GeoVision Inc. GV-LPCLPC2011/2211 · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass
- [Keycloak-services: keycloak-services: device authorization grant issues tokens to brute-force-locked accounts](https://agentprime.io/advisories/CVE-2026-88770.md)
  `CVE-2026-88770` · CVE record: Red Hat Red Hat build of Keycloak 26.6.8 and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass
- [miniOrange 2FA (Free & Pro) - 2FA Bypass via Session-Scoped OTP Lockout](https://agentprime.io/advisories/CVE-2026-77771.md)
  `CVE-2026-77771` · CVE record: Unknown miniOrange 2FA · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass
- [Apache Artemis, Apache ActiveMQ Artemis: Missing Authentication in CORE Protocol Handler Allows Unauthorized Queue Creation](https://agentprime.io/advisories/CVE-2026-49362.md)
  `CVE-2026-49362` · CVE record: Apache Software Foundation Apache Artemis and 1 more · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass
- [Apache Artemis, Apache ActiveMQ Artemis: Pre-Authentication Information Disclosure in CORE Protocol Topology Subscription](https://agentprime.io/advisories/CVE-2026-49363.md)
  `CVE-2026-49363` · CVE record: Apache Software Foundation Apache Artemis and 1 more · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass
- [Apache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apache ActiveMQ Artemis: Pre-Authentication Cluster Credential Exposure to Discovered Peers](https://agentprime.io/advisories/CVE-2026-49364.md)
  `CVE-2026-49364` · CVE record: Apache Software Foundation Apache Artemis and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass
- [Apache Artemis, Apache ActiveMQ Artemis: Missing authentication on CORE protocol session reattachment](https://agentprime.io/advisories/CVE-2026-57967.md)
  `CVE-2026-57967` · CVE record: Apache Software Foundation Apache Artemis and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass
- [Apache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apache ActiveMQ Artemis: Pre-authentication Openwire protocol handling can result in queue deletion](https://agentprime.io/advisories/CVE-2026-67593.md)
  `CVE-2026-67593` · CVE record: Apache Software Foundation Apache Artemis and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass
- [@yeger/turbo-graph: Unauthenticated Network-Exposed Task Execution via /api/run](https://agentprime.io/advisories/GHSA-2r5q-h53f-9rp3.md)
  `GHSA-2r5q-h53f-9rp3`, `CVE-2026-59160` · npm `@yeger/turbo-graph`: affected `<2.8.12`, fixed in `2.8.12` · CVSS 8.8 High · Not analysed yet · Published 9 Sept 2026 · Tags: Authentication bypass
- [webhookd: Unrestricted HTTP Header to Shell Variable Injection](https://agentprime.io/advisories/GHSA-v25g-mvwr-f5fp.md)
  `GHSA-v25g-mvwr-f5fp`, `CVE-2026-59157`, `GO-2026-6451` · Go `github.com/ncarlier/webhookd`: affected `<1.22.0`, fixed in `1.22.0` · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Authentication bypass, CWE-807
- [Rizwan17 inventory-management-system Invoice Generation invoice_bill.php missing authentication](https://agentprime.io/advisories/CVE-2026-87924.md)
  `CVE-2026-87924` · CVE record: Rizwan17 inventory-management-system · CVSS 6.9 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Authentication bypass
- [Rizwan17 inventory-management-system AJAX Backend process.php DBOperation.addCategory missing authentication](https://agentprime.io/advisories/CVE-2026-87922.md)
  `CVE-2026-87922` · CVE record: Rizwan17 inventory-management-system · CVSS 6.9 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Authentication bypass
- [Softish C6 Ear Camera and EarVision Android Application Missing authentication for critical function](https://agentprime.io/advisories/CVE-2026-77974.md)
  `CVE-2026-77974` · CVE record: Softish EarVision Android application and 1 more · CVSS 8.5 High · Not analysed yet · Published 9 Sept 2026 · Tags: Authentication bypass
- [Softish C6 Ear Camera and EarVision Android Application Authentication bypass by spoofing](https://agentprime.io/advisories/CVE-2026-82563.md)
  `CVE-2026-82563` · CVE record: Softish EarVision Android application and 1 more · CVSS 8.4 High · Not analysed yet · Published 9 Sept 2026 · Tags: Authentication bypass
- [IP2Location Country Blocker < 2.45.0 Access Control Bypass via X-Real-IP Header](https://agentprime.io/advisories/CVE-2026-82530.md)
  `CVE-2026-82530` · CVE record: IP2Location IP2Location Country Blocker · CVSS 6.9 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Authentication bypass
- [tirreno has Session Fixation in Login Authentication](https://agentprime.io/advisories/CVE-2026-64857.md)
  `CVE-2026-64857` · CVE record: tirrenotechnologies tirreno · CVSS 5.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-79961.md)
  `CVE-2026-79961` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Authentication bypass
- [Unlimited authentication attempts in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-78490.md)
  `CVE-2026-78490` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 7.5 High · Not analysed yet · Published 9 Sept 2026 · Tags: Authentication bypass
- [Parse Server 9.0.0 Authentication Bypass via LDAP Empty Password](https://agentprime.io/advisories/CVE-2026-87806.md)
  `CVE-2026-87806` · CVE record: parse-community parse-server · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Authentication bypass
- [Insufficient session expiration in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-80174.md)
  `CVE-2026-80174` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Authentication bypass
- [Improper Authorization in Yordam Informatics' Library Reservation System](https://agentprime.io/advisories/CVE-2026-11838.md)
  `CVE-2026-11838` · CVE record: Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Authentication bypass
- [Improper authentication in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-79974.md)
  `CVE-2026-79974` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 6.4 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Authentication bypass
- [Various Newfold Plugins Various Versions - Unauthenticated Authentication Bypass via Bearer Token Validation with Empty Secret](https://agentprime.io/advisories/CVE-2026-80099.md)
  `CVE-2026-80099` · CVE record: Newfold WP Plugin Web and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Sept 2026 · Tags: Authentication bypass
- [Next-Cart Store to WooCommerce Migration <= 3.9.8 - Unauthenticated Authentication Bypass via Default '\_\_token\_\_' Fallback in REST Migration Endpoint](https://agentprime.io/advisories/CVE-2026-76009.md)
  `CVE-2026-76009` · CVE record: martinnguyen1990 Next-Cart Store to WooCommerce Migration · CVSS 8.1 High · Not analysed yet · Published 9 Sept 2026 · Tags: Authentication bypass
- [Maravel-Framework Token Replay Vulnerability via Premature JWT Blacklist Eviction in Tagged Caches](https://agentprime.io/advisories/CVE-2026-55250.md)
  `CVE-2026-55250` · CVE record: macropay-solutions maravel-framework · CVSS 8.7 High · Not analysed yet · Published 8 Sept 2026 · Tags: Authentication bypass, CWE-672
- [Windows ML CLI: CORS misconfig enables localhost RCE](https://agentprime.io/advisories/GHSA-96p9-rh4f-92cf.md)
  `GHSA-96p9-rh4f-92cf`, `CVE-2026-84452`, `PYSEC-2026-3944` · PyPI `winml-cli`: affected `<0.4.0`, fixed in `0.4.0` · CVSS 8.6 High · Not analysed yet · Published 8 Sept 2026 · Tags: Authentication bypass, CWE-942
- [Unauthenticated Localhost Admin Panel in Auth0 AD/LDAP Connector](https://agentprime.io/advisories/CVE-2026-85981.md)
  `CVE-2026-85981` · CVE record: Auth0 Auth0 AD/LDAP Connector · CVSS 6.7 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Authentication bypass
- [Improper Authentication Verification in the Okta Hyperdrive Agent MFA Response Handling](https://agentprime.io/advisories/CVE-2026-78629.md)
  `CVE-2026-78629` · CVE record: Okta Okta Hyperdrive Agent · CVSS 5.6 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Authentication bypass
- [Improper Authentication Validation in Okta Access Gateway Pass-Through Authentication Source](https://agentprime.io/advisories/CVE-2026-78560.md)
  `CVE-2026-78560` · CVE record: Okta Okta Access Gateway · CVSS 4.8 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Authentication bypass
- [Open-Web-Analytics Controller Controller.php checkCapabilityAndAuthenticateUser improper authentication](https://agentprime.io/advisories/CVE-2026-86810.md)
  `CVE-2026-86810` · CVE record: Open-Web-Analytics · CVSS 6.9 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Authentication bypass
- [Information disclosure in Eclipse Foundation Eclipse aeriOS](https://agentprime.io/advisories/CVE-2026-86464.md)
  `CVE-2026-86464` · CVE record: Eclipse Foundation Eclipse aeriOS · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Information disclosure, Authentication bypass, Hard-coded credentials, CWE-1188
- [moltis-org moltis vault.rs vault_recovery_handler missing authentication](https://agentprime.io/advisories/CVE-2026-86808.md)
  `CVE-2026-86808` · CVE record: moltis-org moltis · CVSS 6.9 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Authentication bypass
- [ningzichun Student Management System login.php session_start session fixiation](https://agentprime.io/advisories/CVE-2026-86674.md)
  `CVE-2026-86674` · CVE record: ningzichun Student Management System · CVSS 5.3 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Authentication bypass
- [Authentication bypass in Google Android](https://agentprime.io/advisories/CVE-2026-49887.md)
  `CVE-2026-49887` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Authentication bypass
- [Improper authentication in Google Android](https://agentprime.io/advisories/CVE-2026-28606.md)
  `CVE-2026-28606` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Authentication bypass
- [Photoshop Mobile | Session Fixation (CWE-384)](https://agentprime.io/advisories/CVE-2026-76196.md)
  `CVE-2026-76196` · CVE record: Adobe Photoshop Android · CVSS 7.4 High · Not analysed yet · Published 8 Sept 2026 · Tags: Authentication bypass
- [Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-84003.md)
  `CVE-2026-84003` · CVE record: Microsoft Microsoft Authentication Library · CVSS 7.4 High · Not analysed yet · Published 8 Sept 2026 · Tags: Authentication bypass
- [Spring Cloud Azure Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69854.md)
  `CVE-2026-69854` · CVE record: Microsoft Spring Cloud Azure · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Authentication bypass

Newest: <https://agentprime.io/advisories/tag/auth-bypass.md>
Older: <https://agentprime.io/advisories/tag/auth-bypass.md?cursor=WyIyMDI2LTA5LTA4VDE3OjE4OjE4LjMzMjAwMFoiLCJDVkUtMjAyNi02OTg1NCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=auth-bypass&cursor=WyIyMDI2LTA5LTExVDA2OjAwOjA2Ljg5ODAwMFoiLCJDVkUtMjAyNi0xNDU2MyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/auth-bypass/?cursor=WyIyMDI2LTA5LTExVDA2OjAwOjA2Ljg5ODAwMFoiLCJDVkUtMjAyNi0xNDU2MyJd>. Everything for agents: <https://agentprime.io/llms.txt>.