https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T00:53:05.543698+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-authentik-2024-37905 BIT-authentik-2024-37905 — Improper Access Control and Incorrect Authorization in github.com/goauthentik/authentik 2026-10-20T00:53:05.545839+00:00

Affected: Bitnami: authentik

authentik is an open-source Identity Provider that emphasizes flexibility and versatility. Authentik API-Access-Token mechanism can be exploited to gain admin user privileges. A successful exploit of the issue will result in a user gaining full admin access to the Authentik application, including resetting user passwords and more. This issue has been patched in version(s) 2024.2.4, 2024.4.2 and 2024.6.0.

 https://cve.radiocsirt.org/vuln/euvd-2026-5955 EUVD-2026-5955 2026-10-20T00:53:05.545887+00:00 EUVD-2026-5955 https://cve.radiocsirt.org/vuln/fkie_cve-2024-37905 fkie_cve-2024-37905 2026-10-20T00:53:05.545904+00:00

authentik is an open-source Identity Provider that emphasizes flexibility and versatility. Authentik API-Access-Token mechanism can be exploited to gain admin user privileges. A successful exploit of the issue will result in a user gaining full admin access to the Authentik application, including resetting user passwords and more. This issue has been patched in version(s) 2024.2.4, 2024.4.2 and 2024.6.0.