AEAD authentication bypass in OpenSSL 3.0-4.0 lets attackers forge valid empty-ciphertext/tag pairs when applications encrypt or decrypt via the low-level EVP_Cipher() path with AES-OCB or ChaCha20-Poly1305. A zero-length cipher update was short-circuited to return success without producing or verifying the authentication tag, breaking the integrity guarantee that AEAD is supposed to provide. No public exploit is identified at time of analysis and EPSS is low (0.12%), but the flaw is confirmed and patched by the OpenSSL project and Ubuntu.
Persistent authentication bypass in Ech0 (lin-snow's self-hosted lightweight publishing/memo app) before 4.7.3 lets an attacker who has stolen a 'never-expire' access token retain valid authenticated access indefinitely. Because such tokens carry no JWT 'exp' claim, all three revocation paths fail - logout panics on the nil ExpiresAt field, RevokeToken short-circuits when remaining TTL is zero, and admin 'Delete token' never blacklists the JTI - so a leaked token stays cryptographically valid until the operator rotates the signing key. No public exploit identified at time of analysis; there is no CISA KEV listing and no POC referenced in the provided intelligence.
Authorization bypass in Apache Tomcat's FORM-based authentication lets attackers reach protected resources that a security constraint was meant to restrict, defeating rules that grant a role POST access but withhold GET (or vice versa) on the same URL. It affects Tomcat 11.0.0-M1 through 11.0.24, 10.1.0-M1 through 10.1.57, 9.0.0.M1 through 9.0.120, plus EOL 8.5.0-8.5.100 and 7.0.0-7.0.109. There is no public exploit identified at time of analysis, and EPSS is low (0.28%), but CISA SSVC rates the technical impact as total and the attack as automatable.