Everything AppSec Scoop has reported about authentication bypass: 3 stories, newest first. Part of our Vulnerabilities coverage.
A critical flaw in BotSharp allows remote attackers to bypass authentication by forging JWTs, granting full control over API routes without credentials.
A high-severity authentication bypass in Nginx UI allows standard users to access node secrets and impersonate trusted cluster members.
Organisations using Nginx UI 2.0.0 to 2.5.0 face high-severity risk where stolen JWTs allow cluster restarts without second-factor authentication.