CVE-2026-57697: Authentication Bypass Using an Alternate Path or Channel vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Password Recovery Exploitat
Authentication Bypass Using an Alternate Path or Channel vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Password Recovery Exploitation.This issue affects ProfileGrid : from n/a through <= 5.9.9.6.
Details
Original advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-57697
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-576970.32% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 24% of all scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-57697 | coverage & exploitation status | NVD · CVE.org |
Recent advisories for Authentication Bypass Using
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- unknownCVE-2026-18556: Authentication bypass using an alternate path or channel vulnerability in N-able N-central all…nvd · 2026-08-01
- criticalexploitedCVE-2026-16232: An authentication bypass vulnerability in the Check Point SmartConsole login process allows an…nvd · 2026-07-22
- mediumCVE-2026-57980: Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based) al…nvd · 2026-07-17
- mediumCVE-2026-57698: Authentication Bypass Using an Alternate Path or Channel vulnerability in VillaTheme Abandoned…nvd · 2026-07-13
- highCVE-2026-14262: The Simple JWT Login – Allows you to use JWT on REST endpoints. plugin for WordPress is vulner…nvd · 2026-07-11
- criticalCVE-2026-57807: Authentication Bypass Using an Alternate Path or Channel vulnerability in miniOrange Security …nvd · 2026-07-10
More from NVD Recent CVEs
- unknownCVE-2026-18556: Authentication bypass using an alternate path or channel vulnerability in N-able N-central all…2026-08-01
- unknownCVE-2026-55735: Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticat…2026-08-01
- unknownCVE-2026-55734: Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guar…2026-08-01
- unknownCVE-2026-55733: Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of se…2026-08-01
- unknownCVE-2026-54894: Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of se…2026-08-01