bounties

Reports

• Instant Gamingtwo-factor enrolment bypass

  Programme

  Self-hosted, instant-gaming.com

  Class

  Authentication step-up bypass

  Severity

  High (CVSS 7.1)

  Reported

  August 2026

  Fixed

  October 2026

  Status

  Resolved, fix confirmed by the vendor

  Confirmed by the vendor’s security team by email, including a description of the fix.