# Authentication bypass. Getting in without valid credentials: missing or broken authentication, sessions. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [GibbonEdu Gibbon Unit Planner units_add_blockAjax.php makeBlock missing authentication](https://agentprime.io/advisories/CVE-2026-97864.md) `CVE-2026-97864` · CVE record: GibbonEdu Gibbon · CVSS 6.9 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Authentication bypass - [Apache Qpid Broker-J: Missing HTTP-session renewal after successful authentication](https://agentprime.io/advisories/CVE-2026-92609.md) `CVE-2026-92609` · CVE record: Apache Software Foundation Apache Qpid Broker-J · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Sept 2026 · Tags: Authentication bypass - [Keycloak-services: keycloak-services: standard token exchange v2 bypasses mtls holder-of-key binding](https://agentprime.io/advisories/CVE-2026-97846.md) `CVE-2026-97846` · CVE record: Red Hat Red Hat build of Keycloak 26.6.8 and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Authentication bypass - [Lemonldap::NG::Portal versions from 2.23.0 before 2.23.4 for Perl allow a PKCE bypass for public Relying Parties in "PKCE or secret" mode because checkEndPointAuthenticationCredentials does not verif…](https://agentprime.io/advisories/CVE-2026-92289.md) `CVE-2026-92289` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Sept 2026 · Tags: Authentication bypass - [Lemonldap::NG::Portal versions from 2.20.0 before 2.21.6, from 2.22.0 before 2.23.4 for Perl allow unauthenticated OAuth2 token introspection because checkEndPointAuthenticationCredentials does not v…](https://agentprime.io/advisories/CVE-2026-92288.md) `CVE-2026-92288` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Sept 2026 · Tags: Authentication bypass - [Incorrect Authorization via Stale ProjectCache Eviction and Repeated .git Suffixes in Gerrit Code Review](https://agentprime.io/advisories/CVE-2026-87720.md) `CVE-2026-87720` · CVE record: Gerrit Gerrit · CVSS 7.6 High · Not analysed yet · Published 24 Sept 2026 · Tags: Authentication bypass, Broken access control, CWE-706 - [Botslab G980H Dashcams Missing Authentication for Critical Function](https://agentprime.io/advisories/CVE-2026-84403.md) `CVE-2026-84403` · CVE record: Botslab G980H · CVSS 6.9 Medium · Not analysed yet · Published 24 Sept 2026 · Tags: Authentication bypass - [Botslab G980H Dashcams Missing Authentication for Critical Function](https://agentprime.io/advisories/CVE-2026-88956.md) `CVE-2026-88956` · CVE record: Botslab G980H · CVSS 7.0 High · Not analysed yet · Published 24 Sept 2026 · Tags: Authentication bypass - [social-auth-core has a Session Fixation issue](https://agentprime.io/advisories/GHSA-vqg6-3fw6-j9jg.md) `GHSA-vqg6-3fw6-j9jg`, `CVE-2026-57179`, `PYSEC-2026-4168` · PyPI `social-auth-core`: affected `<5.0.0`, fixed in `5.0.0` · CVSS 4.2 Medium · Not analysed yet · Published 24 Sept 2026 · Tags: Authentication bypass - [social-auth-core: VK App backend accepts unsigned callback data when auth_key is missing](https://agentprime.io/advisories/GHSA-3c93-f73f-qc9h.md) `GHSA-3c93-f73f-qc9h`, `CVE-2026-57178`, `PYSEC-2026-4165` · PyPI `social-auth-core`: affected `<5.0.0`, fixed in `5.0.0` · CVSS 7.4 High · Not analysed yet · Published 24 Sept 2026 · Tags: Authentication bypass, Weak cryptography or TLS - [social-auth-core has an Improper Authentication issue](https://agentprime.io/advisories/GHSA-vq6g-g6c7-5f2j.md) `GHSA-vq6g-g6c7-5f2j`, `CVE-2026-57175`, `PYSEC-2026-4167` · PyPI `social-auth-core`: affected `<5.0.0`, fixed in `5.0.0` · CVSS 6.4 Medium · Not analysed yet · Published 24 Sept 2026 · Tags: Authentication bypass - [Botslab G980H Dashcams Authentication Bypass by Capture-replay](https://agentprime.io/advisories/CVE-2026-77967.md) `CVE-2026-77967` · CVE record: Botslab G980H · CVSS 8.6 High · Not analysed yet · Published 24 Sept 2026 · Tags: Authentication bypass - [DBHub HTTP transport DNS rebinding allows unauthenticated browser-origin SQL execution](https://agentprime.io/advisories/GHSA-fm8p-53ww-hf6w.md) `GHSA-fm8p-53ww-hf6w`, `CVE-2026-61742` · npm `@bytebase/dbhub`: affected `<0.22.5`, fixed in `0.22.5` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Sept 2026 · Tags: Authentication bypass, CWE-346 - [Botslab G980H Dashcams Insufficient session expiration](https://agentprime.io/advisories/CVE-2026-82566.md) `CVE-2026-82566` · CVE record: Botslab G980H · CVSS 8.7 High · Not analysed yet · Published 24 Sept 2026 · Tags: Authentication bypass - [phpMyFAQ's two-factor authentication login bypasses the password factor](https://agentprime.io/advisories/GHSA-8gpw-xvpf-hvx5.md) `GHSA-8gpw-xvpf-hvx5`, `CVE-2026-56737`, `PKSA-p9tj-4psw-jkcc`, `PKSA-tcxy-t63n-k6vh` · Packagist `phpmyfaq/phpmyfaq` and 1 more: affected `>=3.2.0, <4.1.6`, fixed in `4.1.6` · CVSS 8.1 High · Not analysed yet · Published 24 Sept 2026 · Tags: Authentication bypass - [Improper authentication in Dell Rugged Control Center (RCC)](https://agentprime.io/advisories/CVE-2026-56792.md) `CVE-2026-56792` · CVE record: Dell Rugged Control Center (RCC) · CVSS 4.4 Medium · Not analysed yet · Published 24 Sept 2026 · Tags: Authentication bypass - [Improper authentication in Dell Rugged Control Center (RCC)](https://agentprime.io/advisories/CVE-2026-81473.md) `CVE-2026-81473` · CVE record: Dell Rugged Control Center (RCC) · CVSS 8.1 High · Not analysed yet · Published 24 Sept 2026 · Tags: Authentication bypass - [Missing authentication in Dell ThinOS 10](https://agentprime.io/advisories/CVE-2026-81455.md) `CVE-2026-81455` · CVE record: Dell ThinOS 10 · CVSS 8.6 High · Not analysed yet · Published 24 Sept 2026 · Tags: Authentication bypass - [Unauthenticated RCE Arbitrary File Upload Honeywell PD45 Industrial Printer version F10.19.010040](https://agentprime.io/advisories/CVE-2026-13249.md) `CVE-2026-13249` · CVE record: Honeywell PD45 Industrial Printer · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Sept 2026 · Tags: Command injection, Authentication bypass, Unrestricted file upload - [ZITADEL: MFA bypass via session reuse in Login V2](https://agentprime.io/advisories/GHSA-9993-rfwp-rhwf.md) `GHSA-9993-rfwp-rhwf`, `CVE-2026-85056`, `GO-2026-6589` · Go `github.com/zitadel/zitadel`: affected `<1.80.0-v2.20.0.20260717062356-56f4798ed31f`, fixed in `1.80.0-v2.20.0.20260717062356-56f4798ed31f` · CVSS 8.2 High · Not analysed yet · Published 24 Sept 2026 · Tags: Authentication bypass - [volotat Anagnorisis Socket.IO Connect app.py missing authentication](https://agentprime.io/advisories/CVE-2026-97231.md) `CVE-2026-97231` · CVE record: volotat Anagnorisis · CVSS 6.9 Medium · Not analysed yet · Published 24 Sept 2026 · Tags: Authentication bypass - [Snipe-IT: 2FA bypass via the API token flow](https://agentprime.io/advisories/GHSA-hxcx-9h4f-42xx.md) `GHSA-hxcx-9h4f-42xx`, `CVE-2026-63493`, `PKSA-2634-9r51-kjsx` · Packagist `snipe/snipe-it`: affected `<8.7.0`, fixed in `8.7.0` · CVSS 8.6 High · Not analysed yet · Published 24 Sept 2026 · Tags: Authentication bypass - [authentik: MFA Bypass via State Confusion / Parameter Injection in AuthenticatorEmailStage](https://agentprime.io/advisories/CVE-2026-94606.md) `CVE-2026-94606` · CVE record: goauthentik authentik · CVSS 8.9 High · Not analysed yet · Published 24 Sept 2026 · Tags: Authentication bypass, CWE-807 - [authentik: Authentication bypass via assertion confusion in SAML sources](https://agentprime.io/advisories/CVE-2026-94612.md) `CVE-2026-94612` · CVE record: goauthentik authentik · CVSS 7.4 High · Not analysed yet · Published 24 Sept 2026 · Tags: Authentication bypass, CWE-345 - [CVE-2026-75907](https://agentprime.io/advisories/CVE-2026-75907.md) `CVE-2026-75907` · CVE record: Norwegian Cruise Line door access control · CVSS 7.5 High · Not analysed yet · Published 24 Sept 2026 · Tags: Authentication bypass - [Authentication bypass in PortSwigger Burp Suite DAST](https://agentprime.io/advisories/CVE-2026-90481.md) `CVE-2026-90481` · CVE record: PortSwigger Burp Suite DAST · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Sept 2026 · Tags: Authentication bypass - [Aap-gateway: aap-gateway: authorization bypass via workload identity token forgery](https://agentprime.io/advisories/CVE-2026-94416.md) `CVE-2026-94416` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 and 2 more · CVSS 6.8 Medium · Not analysed yet · Published 24 Sept 2026 · Tags: Authentication bypass - [Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module](https://agentprime.io/advisories/CVE-2026-79680.md) `CVE-2026-79680` · CVE record: qt qt · CVSS 4.5 Medium · Not analysed yet · Published 24 Sept 2026 · Tags: Authentication bypass - [Authentication Bypass in DIAEnergie](https://agentprime.io/advisories/CVE-2026-78308.md) `CVE-2026-78308` · CVE record: Deltaww DIAEnergie · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Sept 2026 · Tags: Authentication bypass - [SigNoz before 0.143.0 Insufficient Session Expiration Authentication Bypass](https://agentprime.io/advisories/CVE-2026-97056.md) `CVE-2026-97056` · CVE record: SigNoz signoz · CVSS 7.6 High · Not analysed yet · Published 24 Sept 2026 · Tags: Authentication bypass - [EthPress <= 2.3.5 - Unauthenticated Authentication Bypass](https://agentprime.io/advisories/CVE-2026-19125.md) `CVE-2026-19125` · CVE record: lynn999 EthPress – Web3 Login · CVSS 8.1 High · Not analysed yet · Published 23 Sept 2026 · Tags: Authentication bypass - [Klever-Go: /log controls global node logging](https://agentprime.io/advisories/GHSA-9v8p-frvj-2pcm.md) `GHSA-9v8p-frvj-2pcm`, `CVE-2026-86064`, `GO-2026-6583` · Go `github.com/klever-io/klever-go`: affected `<1.7.20`, fixed in `1.7.20` · CVSS 8.6 High · Not analysed yet · Published 23 Sept 2026 · Tags: Information disclosure, Authentication bypass - [WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability](https://agentprime.io/advisories/CVE-2026-95524.md) `CVE-2026-95524` · CVE record: weDevs WP User Frontend · CVSS 5.3 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Authentication bypass - [WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability](https://agentprime.io/advisories/CVE-2026-95523.md) `CVE-2026-95523` · CVE record: weDevs WP User Frontend · CVSS 6.5 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Authentication bypass - [WordPress Captcha Code plugin <= 3.32 - Bypass Vulnerability vulnerability](https://agentprime.io/advisories/CVE-2026-94457.md) `CVE-2026-94457` · CVE record: WebFactory Captcha Code · CVSS 4.8 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Authentication bypass - [9router /v1 APIs has unauthenticated access via reverse proxy locality collapse](https://agentprime.io/advisories/GHSA-x5c9-v98j-722r.md) `GHSA-x5c9-v98j-722r`, `CVE-2026-56675` · npm `9router`: affected `<0.5.2`, fixed in `0.5.2` · CVSS 8.3 High · Not analysed yet · Published 23 Sept 2026 · Tags: Authentication bypass, CWE-441 - [IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities](https://agentprime.io/advisories/CVE-2026-19267.md) `CVE-2026-19267` · CVE record: IBM Financial Transaction Manager (FTM) for RedHat OpenShift · CVSS 6.2 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Authentication bypass - [IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities](https://agentprime.io/advisories/CVE-2026-18185.md) `CVE-2026-18185` · CVE record: IBM Financial Transaction Manager (FTM) for RedHat OpenShift · CVSS 7.3 High · Not analysed yet · Published 23 Sept 2026 · Tags: Authentication bypass - [Missing authentication in Dell Secure Connect Gateway (SCG) Policy Manager](https://agentprime.io/advisories/CVE-2026-73588.md) `CVE-2026-73588` · CVE record: Dell Secure Connect Gateway (SCG) Policy Manager · CVSS 7.4 High · Not analysed yet · Published 23 Sept 2026 · Tags: Authentication bypass - [Insufficient session expiration in Dell Secure Connect Gateway (SCG) Policy Manager](https://agentprime.io/advisories/CVE-2026-73586.md) `CVE-2026-73586` · CVE record: Dell Secure Connect Gateway (SCG) Policy Manager · CVSS 6.4 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Authentication bypass - [Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2026-86681.md) `CVE-2026-86681` · CVE record: Zohocorp ManageEngine Applications Manager · CVSS 7.6 High · Not analysed yet · Published 23 Sept 2026 · Tags: Authentication bypass - [AuthPoint Gateway Improper Authentication in LDAP Sync Allows First-Factor Authentication Bypass](https://agentprime.io/advisories/CVE-2026-95676.md) `CVE-2026-95676` · CVE record: WatchGuard AuthPoint Authentication Gateway · CVSS 7.4 High · Not analysed yet · Published 23 Sept 2026 · Tags: Authentication bypass, CWE-636 - [Authentication Bypass vulnerability](https://agentprime.io/advisories/CVE-2026-75825.md) `CVE-2026-75825` · CVE record: Zohocorp ManageEngine OpManager · CVSS 8.8 High · Not analysed yet · Published 23 Sept 2026 · Tags: Authentication bypass - [SUMIT Payment Gateway for WooCommerce < 4.0.0 - Unauthenticated Payment Confirmation Forgery via bit IPN](https://agentprime.io/advisories/CVE-2026-84091.md) `CVE-2026-84091` · CVE record: Unknown SUMIT Payment Gateway for WooCommerce · CVSS 5.3 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Authentication bypass - [Apache Tomcat: Fix for CVE-2026-34500 was incomplete. OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled](https://agentprime.io/advisories/CVE-2026-86248.md) `CVE-2026-86248` · CVE record: Apache Software Foundation Apache Tomcat · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Sept 2026 · Tags: Authentication bypass - [Apache Tomcat: Cross-context authentication mix-up with Jakarta Authentication configured](https://agentprime.io/advisories/CVE-2026-75973.md) `CVE-2026-75973` · CVE record: Apache Software Foundation Apache Tomcat · CVSS 7.3 High · Not analysed yet · Published 23 Sept 2026 · Tags: Authentication bypass - [Keycloak-services: keycloak-services: conditional otp skip-header policy evaluated against untrusted proxy headers](https://agentprime.io/advisories/CVE-2026-96445.md) `CVE-2026-96445` · CVE record: Red Hat Red Hat build of Keycloak 26.6.8 and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Authentication bypass - [Reachy Mini Bluetooth PIN authentication can be bypassed by racing an authenticated device](https://agentprime.io/advisories/CVE-2026-96456.md) `CVE-2026-96456` · CVE record: Pollen Robotics Reachy Mini · CVSS 6.3 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Authentication bypass, Race condition - [Reachy Mini daemon allows unauthenticated remote code execution through the app installation endpoint](https://agentprime.io/advisories/CVE-2026-96455.md) `CVE-2026-96455` · CVE record: Pollen Robotics Reachy Mini · CVSS 8.8 High · Not analysed yet · Published 23 Sept 2026 · Tags: Authentication bypass, CWE-494 - [Apache Doris: Improper Authentication Allows Unauthorized Access to FE Meta Service](https://agentprime.io/advisories/CVE-2026-31377.md) `CVE-2026-31377` · CVE record: Apache Software Foundation Apache Doris · CVSS 7.5 High · Not analysed yet · Published 23 Sept 2026 · Tags: Authentication bypass - [uniFLOW Online Legacy UI Previous login session retained when entering Reduced Function Login](https://agentprime.io/advisories/CVE-2026-92378.md) `CVE-2026-92378` · CVE record: NT-ware uniFLOW Online · CVSS 4.1 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Authentication bypass - [MQTT WebSocket Command Execution Vulnerability in NitroSense](https://agentprime.io/advisories/CVE-2026-50227.md) `CVE-2026-50227` · CVE record: Acer NitroSense V5 · CVSS 6.1 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Command injection, Authentication bypass - [Premium Packages < 7.2.1 - Unauthenticated PayPal Webhook Signature Verification Bypass](https://agentprime.io/advisories/CVE-2026-93511.md) `CVE-2026-93511` · CVE record: Unknown Premium Packages · CVSS 5.3 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Authentication bypass - [WP OAuth Server < 6.4.0 - Subscriber+ Cross-User Account Takeover via OIDC ID Token Substitution](https://agentprime.io/advisories/CVE-2026-82843.md) `CVE-2026-82843` · CVE record: Unknown WP OAuth Server ( Login with WordPress ) · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Sept 2026 · Tags: Authentication bypass - [Authentication bypass by spoofing in OpenEye Apex Network Video Recorder (NVR)](https://agentprime.io/advisories/CVE-2026-92929.md) `CVE-2026-92929` · CVE record: OpenEye Apex Network Video Recorder (NVR) · CVSS 5.3 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Authentication bypass - [Mstfakts College-Management-System Authentication server.php session_start session fixiation](https://agentprime.io/advisories/CVE-2026-95828.md) `CVE-2026-95828` · CVE record: Mstfakts College-Management-System · CVSS 5.3 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Authentication bypass - [IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities](https://agentprime.io/advisories/CVE-2026-18074.md) `CVE-2026-18074` · CVE record: IBM Financial Transaction Manager (FTM) for RedHat OpenShift · CVSS 8.2 High · Not analysed yet · Published 22 Sept 2026 · Tags: Authentication bypass - [IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities](https://agentprime.io/advisories/CVE-2026-17635.md) `CVE-2026-17635` · CVE record: IBM Financial Transaction Manager (FTM) for RedHat OpenShift · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Sept 2026 · Tags: Authentication bypass - [lightrag-hku: No Rate Limiting on /login Endpoint Allows Brute-Force Attacks](https://agentprime.io/advisories/GHSA-frch-4w6v-q5xx.md) `GHSA-frch-4w6v-q5xx`, `CVE-2026-85734`, `PYSEC-2026-4062` · PyPI `lightrag-hku`: affected `<1.5.5`, fixed in `1.5.5` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Sept 2026 · Tags: Authentication bypass - [Tinyauth: Unauthenticated login attempts can trigger global login lockdown denial of service](https://agentprime.io/advisories/GHSA-9xhm-w3wj-xhqh.md) `GHSA-9xhm-w3wj-xhqh`, `CVE-2026-77561`, `GO-2026-6564` · Go `github.com/steveiliop56/tinyauth`: affected `<1.0.1-0.20260715123057-dade1e2c8f27`, fixed in `1.0.1-0.20260715123057-dade1e2c8f27` · CVSS 5.3 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Authentication bypass Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .