#oauth2

Daily CyberSecurity @DailyCyberSecurity@infosec.exchange

· 2mo ago

Two critical RabbitMQ flaws allow authentication bypass. One forges TLS client certs; the other tricks OAuth2 JWKS to accept any JWT. #RabbitMQ #AuthBypass #TLS #OAuth2 #InfoSec https://securityonline.info/rabbitmq-authentication-bypass-flaws/?utm_source=mastodon&utm_medium=jetpack_social

RabbitMQ Patches Two Critical Authentication Bypass Flaws

Daily CyberSecurity

RabbitMQ Patches Two Critical Authentication Bypass Flaws

Two critical RabbitMQ flaws allow authentication bypass. One forges TLS client certs; the other tricks OAuth2 JWKS to accept any JWT.

OffSequence @offseq@infosec.exchange

· 2mo ago

SAP Commerce Cloud impacted by CRITICAL CVE-2026-44761 (CVSS 9.1): Default OAuth2 credentials can let unauthenticated attackers access APIs & modify data. Change/remove sample creds now. No patch yet. https://radar.offseq.com/threat/cve-2026-44761-cwe-1392-use-of-default-credentials-009b0a23096bbf37 #OffSeq #SAP #OAuth2 #Vuln

OffSeq Threat Radar

CVE-2026-44761: CWE-1392: Use of Default Credentials in… | Threat Radar

Vulnerability: SAP Commerce Cloud could retain a sample OAuth2 client with publicly documented sample credentials originating from sample configuration…

Shadow, First of His Name @darkpixel@infosec.exchange

· 2mo ago

Fun setting up OAuth2 for my local @forgejo@floss.social with no hassle. cc: @jerry@infosec.exchange #OAuth2 #Forgejo

You've seen all posts