Improper-Authentication — PoC Archivehttps://poc.intelseclab.com/tags/improper-authentication/Latest proof-of-concept entries.Hugoen-usSun, 09 Aug 2026 00:00:00 +0000Check Point Security Management / Multi-Domain Server SmartConsole Authentication Bypass via Forged Application Certificate Bind (CVE-2026-16232)https://poc.intelseclab.com/pocs/network/2026-08-09_cve-2026-16232-checkpoint-smartconsole-auth-bypass/Sun, 09 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-08-09_cve-2026-16232-checkpoint-smartconsole-auth-bypass/Critical severity (CVSS 9.1) — network · CVE-2026-16232. Status: Patched. Affects: Check Point Security Management Server and Multi-Domain Security Management Server (MDS) — the legacy FWM/CPMI SIC service on TCP 18190 and the CPM SOAP web services on TCP 19009. Tags: check-point, smartconsole, security-management-server, multi-domain-server, cpmi, sic, fwm, authentication-bypass, CWE-287, improper-authentication, privilege-escalation, sso-token-forgery, soap, dle, cisa-kev, bod-26-04, python, firewall-management.networkCriticalcheck-pointsmartconsolesecurity-management-servermulti-domain-servercpmisicfwmauthentication-bypassCWE-287improper-authenticationprivilege-escalationsso-token-forgerysoapdlecisa-kevbod-26-04pythonfirewall-managementPocketBase OAuth2 Account Pre-Hijacking (CVE-2026-44166)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-44166-pocketbase-oauth2-account-prehijack/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-44166-pocketbase-oauth2-account-prehijack/Medium severity (CVSS 6.1) — web · CVE-2026-44166 / [GHSA-pq7p-mc74-g65w](https://github.com/pocketbase/pocketbase/security/advisories/GHSA-pq7p-mc74-g65w). Status: PoC. Affects: [PocketBase](https://github.com/pocketbase/pocketbase) (Go backend / BaaS). Tags: pocketbase, oauth2, account-takeover, account-pre-hijacking, cwe-287, improper-authentication, go.webMediumpocketbaseoauth2account-takeoveraccount-pre-hijackingcwe-287improper-authenticationgo