authelia

Products

Exploited and recent CVEs

• CVE-2026-48794 Low 1.3 Authelia has an Edge Case Access Control Rule Mismatch 0.4%
• CVE-2026-47203 Low 2.9 Authelia Missing Username Canonicalization in Basic Auth (LDAP) 0.5%
• CVE-2026-33525 Low 0.5 Authelia: Improper Neutralization of Input During Web Page Generation Leads to Potential Cross-site Scripting 0.2%
• CVE-2025-24806 Low 2.3 Regulation applies separately to Username-based logins to Email-based logins in authelia 0.4%
• CVE-2021-32637 Critical 10.0 Authentication bypassed with malformed request URI 1.9%
• CVE-2021-29456 Medium 5.7 Authelia allows open redirects on the logout endpoint 0.5%