Vulnerabilities
Databasus API Flaw Allows Unrestricted Brute-Force of Password Reset Codes
A critical flaw in Databasus versions up to 3.61.0 allows attackers to guess six-digit reset codes without rate limits, risking full account takeover.
authentication bypass
Everything Packet Tribune has reported about authentication bypass: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Nginx UI Middleware Gap in CVE-2026-107813 Skips 2FA for Node Management With Valid JWT
A missed middleware wrapper in Nginx UI allows attackers with valid JWTs to restart clusters and manage nodes without second-factor authentication.
Vulnerabilities
IBM Security Verify Access Critical Auth Bypass Flaw CVE-2026-16823 Lacks Patch
IBM warns that improper authentication in Security Verify Access allows remote attackers to bypass security restrictions without a confirmed patch.