CVE-2025-27935 — The OTP Integration Kit for PingFederate fails to enforce HTTP method validation and state validation properly. The server advances the authentication state without verifying the OTP, thereby bypassin — CVE Database · The Intelligence Room