{"uuid": "5d3d75d4-2f8f-46fd-8e7a-8134fde584c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85984", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwhsng7xlp2j", "content": "miniOrange OTP Login plugin (\u22645.5.5) hit by CRITICAL auth bypass (CVE-2026-85984). Admin login possible with username only if risky options are enabled. Disable those settings ASAP. https://radar.offseq.com/threat/cve-2026-85984-cwe-287-improper-authentication-in-cyberlord92-miniorange-otp-login-...", "creation_timestamp": "2026-09-27T03:00:28.069730Z"}