<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Authentication on Onur Baydaş</title><link>https://onurbaydas.com/tags/authentication/</link><description>Recent content in Authentication on Onur Baydaş</description><generator>Hugo</generator><language>tr-tr</language><lastBuildDate>Sun, 18 Oct 2026 14:58:27 +0300</lastBuildDate><atom:link href="https://onurbaydas.com/tags/authentication/index.xml" rel="self" type="application/rss+xml"/><item><title>CISA KEV Uyarısı: Ahsay AhsayCBS kimlik doğrulama zafiyeti</title><link>https://onurbaydas.com/news/2026-10-18-cisa-ahsaycbs-authentication-bypass/</link><pubDate>Sun, 18 Oct 2026 14:58:27 +0300</pubDate><guid>https://onurbaydas.com/news/2026-10-18-cisa-ahsaycbs-authentication-bypass/</guid><description>CISA, Ahsay AhsayCBS&amp;#39;de uzaktan kimlik doğrulama bypass&amp;#39;ına izin veren ve aktif olarak istismar edilen bir zafiyet hakkında uyarı yayınladı. Bu açık, API&amp;#39;deki `checkSysPwd` fonksiyonundaki `random` parametresinin manipülasyonu ile tetikleniyor.</description></item></channel></rss>