Vulnerabilities
Update Znuny now to block header-based login bypass in older versions
A critical flaw in Znuny lets attackers impersonate users by forging HTTP headers, granting full access without passwords in versions prior to 7.3.7.
authentication bypass
Everything Vector Update has reported about authentication bypass: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Update Better Auth to 1.7.7 to Fix Critical Login Bypass Flaw
Attackers can hijack accounts in Better Auth versions before 1.7.7 by swapping OAuth tokens for magic links, allowing them to log in as any user.