# Authentication bypass.

Getting in without valid credentials: missing or broken authentication, sessions. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Missing authentication in Oracle Corporation Oracle Product Lifecycle Analytics](https://agentprime.io/advisories/CVE-2026-83261.md)
  `CVE-2026-83261` · CVE record: Oracle Corporation Oracle Product Lifecycle Analytics · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Commerce Guided Search / Oracle Commerce Experience…](https://agentprime.io/advisories/CVE-2026-83252.md)
  `CVE-2026-83252` · CVE record: Oracle Corporation Oracle Commerce Guided Search / Oracle Commerce Experience Manager · CVSS 7.0 High · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Data Integrator](https://agentprime.io/advisories/CVE-2026-83232.md)
  `CVE-2026-83232` · CVE record: Oracle Corporation Oracle Data Integrator · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Siebel CRM Deployment](https://agentprime.io/advisories/CVE-2026-83202.md)
  `CVE-2026-83202` · CVE record: Oracle Corporation Siebel CRM Deployment · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Siebel CRM Deployment](https://agentprime.io/advisories/CVE-2026-83201.md)
  `CVE-2026-83201` · CVE record: Oracle Corporation Siebel CRM Deployment · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Siebel Apps - Financial Services](https://agentprime.io/advisories/CVE-2026-83197.md)
  `CVE-2026-83197` · CVE record: Oracle Corporation Siebel Apps - Financial Services · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Siebel CRM End User](https://agentprime.io/advisories/CVE-2026-83154.md)
  `CVE-2026-83154` · CVE record: Oracle Corporation Siebel CRM End User · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Service Delivery Platform](https://agentprime.io/advisories/CVE-2026-83151.md)
  `CVE-2026-83151` · CVE record: Oracle Corporation Service Delivery Platform · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Applications Manager](https://agentprime.io/advisories/CVE-2026-83115.md)
  `CVE-2026-83115` · CVE record: Oracle Corporation Oracle Applications Manager · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass, CWE-1284
- [Missing authentication in Oracle Corporation Oracle Forms](https://agentprime.io/advisories/CVE-2026-83108.md)
  `CVE-2026-83108` · CVE record: Oracle Corporation Oracle Forms · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Forms](https://agentprime.io/advisories/CVE-2026-83104.md)
  `CVE-2026-83104` · CVE record: Oracle Corporation Oracle Forms · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Forms](https://agentprime.io/advisories/CVE-2026-83100.md)
  `CVE-2026-83100` · CVE record: Oracle Corporation Oracle Forms · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Forms](https://agentprime.io/advisories/CVE-2026-83099.md)
  `CVE-2026-83099` · CVE record: Oracle Corporation Oracle Forms · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Forms](https://agentprime.io/advisories/CVE-2026-83098.md)
  `CVE-2026-83098` · CVE record: Oracle Corporation Oracle Forms · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Forms](https://agentprime.io/advisories/CVE-2026-83095.md)
  `CVE-2026-83095` · CVE record: Oracle Corporation Oracle Forms · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Forms](https://agentprime.io/advisories/CVE-2026-83094.md)
  `CVE-2026-83094` · CVE record: Oracle Corporation Oracle Forms · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Internet Directory](https://agentprime.io/advisories/CVE-2026-83066.md)
  `CVE-2026-83066` · CVE record: Oracle Corporation Oracle Internet Directory · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Internet Directory](https://agentprime.io/advisories/CVE-2026-83062.md)
  `CVE-2026-83062` · CVE record: Oracle Corporation Oracle Internet Directory · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Internet Directory](https://agentprime.io/advisories/CVE-2026-83061.md)
  `CVE-2026-83061` · CVE record: Oracle Corporation Oracle Internet Directory · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Internet Directory](https://agentprime.io/advisories/CVE-2026-83060.md)
  `CVE-2026-83060` · CVE record: Oracle Corporation Oracle Internet Directory · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Internet Directory](https://agentprime.io/advisories/CVE-2026-83059.md)
  `CVE-2026-83059` · CVE record: Oracle Corporation Oracle Internet Directory · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Internet Directory](https://agentprime.io/advisories/CVE-2026-83054.md)
  `CVE-2026-83054` · CVE record: Oracle Corporation Oracle Internet Directory · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Identity Manager](https://agentprime.io/advisories/CVE-2026-83042.md)
  `CVE-2026-83042` · CVE record: Oracle Corporation Oracle Identity Manager · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle WebCenter Sites](https://agentprime.io/advisories/CVE-2026-83037.md)
  `CVE-2026-83037` · CVE record: Oracle Corporation Oracle WebCenter Sites · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle WebCenter Sites](https://agentprime.io/advisories/CVE-2026-83036.md)
  `CVE-2026-83036` · CVE record: Oracle Corporation Oracle WebCenter Sites · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle WebCenter Sites](https://agentprime.io/advisories/CVE-2026-83035.md)
  `CVE-2026-83035` · CVE record: Oracle Corporation Oracle WebCenter Sites · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle WebLogic Server](https://agentprime.io/advisories/CVE-2026-83021.md)
  `CVE-2026-83021` · CVE record: Oracle Corporation Oracle WebLogic Server · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Platform Security for Java](https://agentprime.io/advisories/CVE-2026-83020.md)
  `CVE-2026-83020` · CVE record: Oracle Corporation Oracle Platform Security for Java · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Service Delivery Platform](https://agentprime.io/advisories/CVE-2026-83000.md)
  `CVE-2026-83000` · CVE record: Oracle Corporation Service Delivery Platform · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Platform Security for Java](https://agentprime.io/advisories/CVE-2026-82995.md)
  `CVE-2026-82995` · CVE record: Oracle Corporation Oracle Platform Security for Java · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Platform Security for Java](https://agentprime.io/advisories/CVE-2026-82994.md)
  `CVE-2026-82994` · CVE record: Oracle Corporation Oracle Platform Security for Java · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle WebCenter Portal](https://agentprime.io/advisories/CVE-2026-73963.md)
  `CVE-2026-73963` · CVE record: Oracle Corporation Oracle WebCenter Portal · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle JDeveloper](https://agentprime.io/advisories/CVE-2026-73961.md)
  `CVE-2026-73961` · CVE record: Oracle Corporation Oracle JDeveloper · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle WebCenter Portal](https://agentprime.io/advisories/CVE-2026-73956.md)
  `CVE-2026-73956` · CVE record: Oracle Corporation Oracle WebCenter Portal · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle WebCenter Portal](https://agentprime.io/advisories/CVE-2026-73953.md)
  `CVE-2026-73953` · CVE record: Oracle Corporation Oracle WebCenter Portal · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle WebCenter Portal](https://agentprime.io/advisories/CVE-2026-73952.md)
  `CVE-2026-73952` · CVE record: Oracle Corporation Oracle WebCenter Portal · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Access Manager](https://agentprime.io/advisories/CVE-2026-73950.md)
  `CVE-2026-73950` · CVE record: Oracle Corporation Oracle Access Manager · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Access Manager](https://agentprime.io/advisories/CVE-2026-73947.md)
  `CVE-2026-73947` · CVE record: Oracle Corporation Oracle Access Manager · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Access Manager](https://agentprime.io/advisories/CVE-2026-73944.md)
  `CVE-2026-73944` · CVE record: Oracle Corporation Oracle Access Manager · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Access Manager](https://agentprime.io/advisories/CVE-2026-73940.md)
  `CVE-2026-73940` · CVE record: Oracle Corporation Oracle Access Manager · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Access Manager](https://agentprime.io/advisories/CVE-2026-71133.md)
  `CVE-2026-71133` · CVE record: Oracle Corporation Oracle Access Manager · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle Identity Manager](https://agentprime.io/advisories/CVE-2026-70913.md)
  `CVE-2026-70913` · CVE record: Oracle Corporation Oracle Identity Manager · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle WebLogic Server](https://agentprime.io/advisories/CVE-2026-70757.md)
  `CVE-2026-70757` · CVE record: Oracle Corporation Oracle WebLogic Server · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle WebLogic Server](https://agentprime.io/advisories/CVE-2026-70756.md)
  `CVE-2026-70756` · CVE record: Oracle Corporation Oracle WebLogic Server · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Oracle Corporation Oracle WebLogic Server](https://agentprime.io/advisories/CVE-2026-70748.md)
  `CVE-2026-70748` · CVE record: Oracle Corporation Oracle WebLogic Server · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Http4s: CookieJar middleware accepts arbitrary Set-Cookie domain](https://agentprime.io/advisories/GHSA-wv64-j4fq-5f9x.md)
  `GHSA-wv64-j4fq-5f9x`, `CVE-2026-69214` · Maven `org.http4s:http4s-client_2.12` and 2 more: affected `<0.23.35`, fixed in `0.23.35` · CVSS 6.8 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass, CWE-565
- [Http4s: DigestAuth allows replay of captured requests](https://agentprime.io/advisories/GHSA-9xww-74xv-gjfp.md)
  `GHSA-9xww-74xv-gjfp`, `CVE-2026-69206` · Maven `org.http4s:http4s-ember-core_2.12` and 2 more: affected `<0.23.35`, fixed in `0.23.35` · CVSS 5.9 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially crafted packet can cause the BFD session(s) to go down. This may…](https://agentprime.io/advisories/CVE-2026-73458.md)
  `CVE-2026-73458` · CVE record: Arista Networks EOS · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Unauthenticated Sensitive Information Disclosure in HPE Networking EdgeConnect SD-WAN Gateways](https://agentprime.io/advisories/CVE-2026-76701.md)
  `CVE-2026-76701` · CVE record: Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways · CVSS 5.9 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Authentication Bypass Vulnerabilities in the Web-Based Management Interface of EdgeConnect SD-WAN Orchestrator](https://agentprime.io/advisories/CVE-2026-76688.md)
  `CVE-2026-76688` · CVE record: Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Authentication Bypass Vulnerabilities in HPE Networking EdgeConnect SD-WAN Orchestrator API](https://agentprime.io/advisories/CVE-2026-76684.md)
  `CVE-2026-76684` · CVE record: Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways · CVSS 8.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Authentication Bypass Vulnerabilities in API of EdgeConnect SD-WAN Orchestrator](https://agentprime.io/advisories/CVE-2026-76673.md)
  `CVE-2026-76673` · CVE record: Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Duplicate Advisory: Vikunja: CalDAV and feeds BasicAuth endpoints have no rate limit, bypassing the anti-brute-force floor on account passwords](https://agentprime.io/advisories/GHSA-p2vv-wrh8-x466.md)
  `GHSA-p2vv-wrh8-x466` · Go `code.vikunja.io/api`: affected `<=2.5.0`, no fixed version yet · CVSS 7.5 High · Withdrawn · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Duplicate Advisory: Vikunja: Every /api/v2 pre-auth endpoint is unthrottled on a stock install while its /api/v1 twin is rate limited](https://agentprime.io/advisories/GHSA-m4vj-wr5q-cmvr.md)
  `GHSA-m4vj-wr5q-cmvr` · Go `github.com/go-vikunja/vikunja`: affected `<=2.5.0`, no fixed version yet · CVSS 7.5 High · Withdrawn · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Improper authentication in Dell Wyse Management Suite](https://agentprime.io/advisories/CVE-2026-81237.md)
  `CVE-2026-81237` · CVE record: Dell Wyse Management Suite · CVSS 6.5 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Dell Wyse Management Suite](https://agentprime.io/advisories/CVE-2026-81238.md)
  `CVE-2026-81238` · CVE record: Dell Wyse Management Suite · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Missing Authentication for Critical Function in GitLab](https://agentprime.io/advisories/CVE-2026-12910.md)
  `CVE-2026-12910` · CVE record: GitLab GitLab · CVSS 5.4 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Concrete CMS below 9.5.4 allows privilege escalation because adding users and assigning groups do not require additional identity verification](https://agentprime.io/advisories/CVE-2026-18111.md)
  `CVE-2026-18111` · CVE record: Concrete CMS Concrete CMS · CVSS 8.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [BookStack < 26.05.5 Authentication Bypass via Social Login Provider Confusion](https://agentprime.io/advisories/CVE-2026-89022.md)
  `CVE-2026-89022` · CVE record: bookstackapp bookstack · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Payara Server is vulnerable to brute-force login attacks due to the absence of a limit on failed login attempts](https://agentprime.io/advisories/CVE-2026-92082.md)
  `CVE-2026-92082` · CVE record: Payara Payara Server · CVSS 6.3 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass

Newest: <https://agentprime.io/advisories/tag/auth-bypass.md>
Older: <https://agentprime.io/advisories/tag/auth-bypass.md?cursor=WyIyMDI2LTA5LTE1VDE0OjA0OjI1LjI0MTAwMFoiLCJDVkUtMjAyNi05MjA4MiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=auth-bypass&cursor=WyIyMDI2LTA5LTE1VDIwOjA0OjQwLjMwMjAwMFoiLCJDVkUtMjAyNi04MzI2NiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/auth-bypass/?cursor=WyIyMDI2LTA5LTE1VDIwOjA0OjQwLjMwMjAwMFoiLCJDVkUtMjAyNi04MzI2NiJd>. Everything for agents: <https://agentprime.io/llms.txt>.