Authentication Bypass

Everything Patch Gazette has reported about Authentication Bypass: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Better Auth 1.7.7 patches critical CVE-2026-110864 flaw enabling OAuth proxy account hijacking

A critical authentication bypass in Better Auth versions prior to 1.7.7 allows attackers to hijack accounts via forged OAuth profiles, prompting an immediate patch recommendation.

Oct 15, 2026

Vulnerabilities

Fortinet patches critical FortiSandbox GUI auth bypass in CVE-2026-107656

Fortinet released updates for a critical authentication bypass in FortiSandbox that allows remote attackers to execute commands without valid credentials.

Oct 14, 2026