3 casos · pág. 1/1
Cisco has disclosed multiple vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) that could let a remote attacker access or manipulate data, obtain sensitive information, or cause a reload of certificate and key material on an affected device. The advisory (cisco-sa-ise-multiauth-bypa…
Apache disclosed eight vulnerabilities in Apache Tomcat, three rated Important and five rated Low. They cover authentication bypass, cross-user data exposure, insecure socket access and cryptographic configuration failures. Fixes are in Tomcat 11.0.27, 10.1.61 and 9.0.123, depending on the branch. Exposure depends on the component and con…
Hacktron published a vendor blog post arguing that frontier models such as Anthropic's Mythos are unnecessary for most vulnerability discovery work. To support this, it benchmarked its scanning pipeline across several LLMs against two zero-day authentication bypasses it found in oauth2-proxy v7.15.0: CVE-2026-34457 and CVE-2026-40575. Its…
