Cookie-Forgery

WordPress Service Finder Bookings ≤ 6.0 Authentication Bypass via `original_user_id` Cookie (CVE-2025-5947) newCVE-2025-5947webCRITICAL 9.8Unverified2026-07-06Apache Druid Kerberos Cookie-Signing Secret Recovery via ThreadLocalRandom Seed Inversion (CVE-2025-59390) newCVE-2025-59390cryptoCRITICAL 9.8Patched2026-07-06PAN-OS GlobalProtect Authentication Bypass via Forged Cookie (CVE-2026-0257) new KEV RW EPSS 94%CVE-2026-0257webHIGH 7.8Unverified2026-07-01