authentik Forward Auth Bypass via Malformed Cookie (CVE-2026-25748)

github.com 2026-02-21查看中文 →

Security AdvisoryCVE-2026-25748Highgoauthentik/authentik

Affected:

authentik <= 2025.10.3
authentik <= 2025.12.3

Fixed in:

2025.10.4
2025.12.4

Referenced CVEs: CVE-2026-25748 · 8.6

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Canias ERP Pre-Auth Authentication Bypass Vulnerability Summary and POC 2026-05-10 Canas ERP GETSERVERINFO Pre-Auth Information Disclosure POC 2026-05-10 libexpat Attribute Collision DoS CVE-REQUESTed with POC 2026-05-10 MiniClaw Command Injection Vulnerability Fix and POC Verification 2026-05-10 ipTIME A8004T Buffer Overflow RCE Vulnerability in WifiBasicSet 2026-05-10