Vulnerabilities
9.1 Critical: Concurrent Requests Break LatePoint Login Locks for Account Theft
A timing flaw in the LatePoint booking plugin allows attackers to bypass login locks and steal customer accounts using concurrent requests.
Authentication Bypass
Everything Circuit Observer has reported about Authentication Bypass: 4 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
6.5.5 Patch Fixes Metasploit Web Service CVE-2026-87689 Auth Bypass
An unauthenticated flaw in the Metasploit Framework Web Service allowed unrestricted access to credential stores across all versions prior to 6.5.5.
Vulnerabilities
Pre-7.9 TVU Users Face Critical Risk: Empty Username Bypass Grants Admin Control
Attackers can hijack TVU Networks Receiver and Transceiver devices by exploiting a login flaw that ignores missing usernames.
Vulnerabilities
6-Digit 2FA Brute-Forced in Advanced IP Blocker: Full WordPress Admin Access for Unauthenticated Attackers
A critical flaw in Advanced IP Blocker lets attackers bypass two-factor authentication and take over WordPress sites without knowing any passwords.