authentication bypass

Everything Sandbox Desk has reported about authentication bypass: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Fastify middleware flaw skips auth checks for unauthenticated requests

A critical vulnerability in @fastify/middie allows attackers to bypass authentication and rate limiting by exploiting path resolution mismatches in versions up to 9.3.5.

Oct 22, 2026

Vulnerabilities

Organisations at Risk: Nginx UI Flaw Lets Hackers Steal Secrets from Logs to Bypass All Admin Security

A flaw in Nginx UI versions 2.0.0 through 2.5.0 exposes the master credential in URLs and logs, allowing attackers to bypass authentication and gain persistent administrative control.

Oct 9, 2026