CVE-2018-15542

An issue was discovered in the org.telegram.messenger application 4.8.11 for Android. The Passcode feature allows authentication bypass via runtime manipulation that forces a certain method's return value to true. In other words, an attacker could authenticate with an arbitrary passcode. NOTE: the vendor indicates that this is not an attack of interest within the context of their threat model, which excludes Android devices on which rooting has occurred

• CWE-287

• https://gist.github.com/tanprathan/18d0f692a2485acfb5693e2f6dabeb5dThird Party Advisory
• https://gist.github.com/tanprathan/18d0f692a2485acfb5693e2f6dabeb5dThird Party Advisory

Published

Oct 9, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-15536/filemanager/ajax_calls.php in tecrail Responsive FileManage…
• CVE-2018-15537Unrestricted file upload (with remote code execution) in OCS…
• CVE-2018-15538Agentejo Cockpit has multiple Cross-Site Scripting vulnerabi…
• CVE-2018-15539Agentejo Cockpit lacks an anti-CSRF protection mechanism. Th…
• CVE-2018-1554IBM Maximo Asset Management 7.6 is vulnerable to cross-site …5.4
• CVE-2018-15540Agentejo Cockpit performs actions on files without appropria…
• CVE-2018-15543An issue was discovered in the org.telegram.messenger applic…
• CVE-2018-15546Accusoft PrizmDoc version 13.3 and earlier contains a Stored…
• CVE-2018-1555IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to…5.4
• CVE-2018-15552The "PayWinner" function of a simplelottery smart contract i…7.5
• CVE-2018-15553fileshare.cmd on Telus Actiontec T2200H T2200H-31.128L.03 de…
• CVE-2018-15555On Telus Actiontec WEB6000Q v1.1.02.22 devices, an attacker …