Attackers can skip your VPN's MFA prompt
- Critical
- CVE-2026-00003
- Exploited in the wild
- Updated
Your VPN has a locked door and a doorman who checks IDs. This bug lets a stranger walk past the doorman by asking the side entrance nicely.
Read the card and fix guide for Attackers can skip your VPN's MFA prompt →