Published threat advisories for November 11, 2026

WWBN AVideo has an authentication bypass vulnerability allowing unauthenticated attackers to log in as any user, including administrators, by manipulating social login display names. This could lead to unauthorized access to user accounts and platform features if the affected technology is reachable.

NVD modified: NVD date unavailable

A vulnerability in Directus allows unauthenticated attackers to bypass permission checks on public WebSocket connections, potentially enabling unauthorized access to read, create, update, or delete records. This issue, affecting systems using public-mode WebSocket connections, means that sensitive data could be comprom

NVD modified: NVD date unavailable