ZoomEye finds 1,736 Authelia instances exposed on port 9091

A ZoomEye scan on 23 October 2026 returned 11,813 matches for title="Authelia" and 1,736 hosts answering on port 9091, the companion port meant for forward-auth behind a reverse proxy. Direct exposure changes cookie scoping and CORS behaviour and opens the login form to password spraying from the internet.

• 11,813 title matches for Authelia, 1,736 of them on port 9091
• The app="Authelia" fingerprint query returned zero results
• Direct portal access bypasses proxy TLS, CORS and hardening rules
• Fix: bind the listener to the proxy address and disable reset and registration