CVE-2026-92914: Php Auth Challenge Loose Equality Bypasscve-2026-92914-php-auth-challenge-loose-equality-bypass
Second-factor/challenge verification uses PHP loose equality (==) between the submitted response and a $_SESSION value. The session index is only created when a challenge is actually issued, so when no challenge exists it evaluates to NULL, and a request that omits (or empties) the response parameter is also NULL/'' PHP then evaluates NULL == NULL (or '' ==
