# Authentication bypass.

Getting in without valid credentials: missing or broken authentication, sessions. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Improper authentication in Hewlett Packard Enterprise (HPE) HPE Integrated Lights-Out (iLO) 7](https://agentprime.io/advisories/CVE-2026-79820.md)
  `CVE-2026-79820` · CVE record: Hewlett Packard Enterprise (HPE) HPE Integrated Lights-Out (iLO) 7 · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Oct 2026 · Tags: Authentication bypass
- [Casdoor API Endpoint authz_filter.go ApiFilter missing authentication](https://agentprime.io/advisories/CVE-2026-105307.md)
  `CVE-2026-105307` · CVE record: Casdoor · CVSS 6.9 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Authentication bypass
- [Ticket host-binding bypass via spoofed client IP in P4Search](https://agentprime.io/advisories/CVE-2026-103512.md)
  `CVE-2026-103512` · CVE record: Perforce P4 (Helix Core) · CVSS 5.3 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Authentication bypass
- [linlinjava litemall Login Endpoint AdminAuthController.java excessive authentication](https://agentprime.io/advisories/CVE-2026-105237.md)
  `CVE-2026-105237` · CVE record: linlinjava litemall · CVSS 6.3 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Authentication bypass, CWE-799
- [kishor-23 food-waste-management-system Login Flow login.php session fixiation](https://agentprime.io/advisories/CVE-2026-105233.md)
  `CVE-2026-105233` · CVE record: kishor-23 food-waste-management-system · CVSS 5.3 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Authentication bypass
- [kishor-23 food-waste-management-system Admin Signup signup.php missing authentication](https://agentprime.io/advisories/CVE-2026-105170.md)
  `CVE-2026-105170` · CVE record: kishor-23 food-waste-management-system · CVSS 6.9 Medium · Not analysed yet · Published 4 Oct 2026 · Tags: Authentication bypass
- [ZITADEL before 4.16.2 Account Pre-Hijacking via Forged External IdP Callback](https://agentprime.io/advisories/CVE-2026-105215.md)
  `CVE-2026-105215` · CVE record: zitadel zitadel · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Oct 2026 · Tags: Authentication bypass
- [ZITADEL before 4.17.1 Authentication Bypass via Login V2 for Deactivated Organizations](https://agentprime.io/advisories/CVE-2026-105213.md)
  `CVE-2026-105213` · CVE record: zitadel zitadel · CVSS 8.8 High · Not analysed yet · Published 4 Oct 2026 · Tags: Authentication bypass
- [ZITADEL before 3.4.14 and 4.16.2 Account Takeover via Passkey Enrollment](https://agentprime.io/advisories/CVE-2026-105212.md)
  `CVE-2026-105212` · CVE record: zitadel zitadel · CVSS 8.7 High · Not analysed yet · Published 4 Oct 2026 · Tags: Authentication bypass
- [ZITADEL before 4.17.1 Unauthenticated MFA Enrollment via Login V1 Init Handlers](https://agentprime.io/advisories/CVE-2026-105210.md)
  `CVE-2026-105210` · CVE record: zitadel zitadel · CVSS 8.8 High · Not analysed yet · Published 4 Oct 2026 · Tags: Authentication bypass
- [ZITADEL before 4.17.3 Account Takeover via External IdP Linking](https://agentprime.io/advisories/CVE-2026-105207.md)
  `CVE-2026-105207` · CVE record: zitadel zitadel · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Oct 2026 · Tags: Authentication bypass
- [Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication](https://agentprime.io/advisories/CVE-2026-105133.md)
  `CVE-2026-105133` · CVE record: Ahsay AhsayCBS · CVSS 6.9 Medium · Critical (KEV) · In CISA KEV · EPSS 0.84 · Not analysed yet · Published 4 Oct 2026 · Tags: Authentication bypass
- [OpenAM before 16.1.3 Unauthenticated Arbitrary Class Instantiation via JAX-RPC Interface](https://agentprime.io/advisories/CVE-2026-105115.md)
  `CVE-2026-105115` · CVE record: OpenIdentityPlatform OpenAM · CVSS 8.8 High · Not analysed yet · Published 3 Oct 2026 · Tags: Authentication bypass
- [Unauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft command injection and telemetry exfiltration](https://agentprime.io/advisories/CVE-2026-105105.md)
  `CVE-2026-105105` · CVE record: NASA-AMMOS AIT-Core · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Oct 2026 · Tags: Authentication bypass
- [MLS X.509 credential not bound to the LeafNode signature key](https://agentprime.io/advisories/CVE-2026-71885.md)
  `CVE-2026-71885` · CVE record: Legion of the Bouncy Castle Inc. BC-JAVA · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Oct 2026 · Tags: Authentication bypass, Weak cryptography or TLS
- [Burst Statistics <= 3.7.1 - Improper Authentication to Account Persistence via Share-Link Authentication Bypass via 'burst_share_token'](https://agentprime.io/advisories/CVE-2026-97343.md)
  `CVE-2026-97343` · CVE record: burstbv Burst Statistics – Simple WordPress Analytics (Google Analytics Alternative) · CVSS 4.3 Medium · Not analysed yet · Published 3 Oct 2026 · Tags: Authentication bypass
- [TillKit < 1.0.5 - Unauthenticated POS Takeover via Hard-Coded Default Manager PIN](https://agentprime.io/advisories/CVE-2026-91078.md)
  `CVE-2026-91078` · CVE record: Unknown TillKit · CVSS 8.2 High · Not analysed yet · Published 3 Oct 2026 · Tags: Authentication bypass
- [WP 2FA < 4.1.0 - Two-Factor Authentication Bypass via TOTP Code Replay](https://agentprime.io/advisories/CVE-2026-103514.md)
  `CVE-2026-103514` · CVE record: Unknown WP 2FA · CVSS 7.5 High · Not analysed yet · Published 3 Oct 2026 · Tags: Authentication bypass
- [Headroom vulnerable to Cross-Site WebSocket Hijacking (CSWSH)](https://agentprime.io/advisories/GHSA-h46j-26q3-rggf.md)
  `GHSA-h46j-26q3-rggf`, `CVE-2026-71416`, `PYSEC-2026-4220` · PyPI `headroom-ai`: affected `<0.35.0`, fixed in `0.35.0` · CVSS 8.8 High · Not analysed yet · Published 2 Oct 2026 · Tags: Authentication bypass, CWE-1385
- [Vibe-Trading FastAPI endpoints permit unauthenticated access, file upload, and an RCE chain](https://agentprime.io/advisories/GHSA-v2f8-6655-7grj.md)
  `GHSA-v2f8-6655-7grj`, `CVE-2026-114108` · PyPI `vibe-trading-ai`: affected `>=0.1.0, <0.1.7`, fixed in `0.1.7` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Oct 2026 · Tags: Information disclosure, Authentication bypass, Unrestricted file upload, Broken access control
- [Trigger.dev: Unauthenticated Realtime Stream Data Injection via Run FriendlyId](https://agentprime.io/advisories/GHSA-59h8-w5q6-mfmp.md)
  `GHSA-59h8-w5q6-mfmp`, `CVE-2026-114086` · npm `trigger.dev`: affected `<4.5.5`, fixed in `4.5.5` · CVSS 6.9 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: Authentication bypass
- [Missing authentication in Zilliz Attu](https://agentprime.io/advisories/CVE-2026-105049.md)
  `CVE-2026-105049` · CVE record: Zilliz Attu · CVSS 5.8 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: Authentication bypass
- [Monta monta.app Missing Authentication for Critical Function](https://agentprime.io/advisories/CVE-2026-95102.md)
  `CVE-2026-95102` · CVE record: Monta monta.app · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Oct 2026 · Tags: Authentication bypass
- [Monta monta.app Improper Restriction of Excessive Authentication Attempts](https://agentprime.io/advisories/CVE-2026-97363.md)
  `CVE-2026-97363` · CVE record: Monta monta.app · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Authentication bypass
- [Monta monta.app Insufficient Session Expiration](https://agentprime.io/advisories/CVE-2026-97212.md)
  `CVE-2026-97212` · CVE record: Monta monta.app · CVSS 6.9 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: Authentication bypass
- [UTMStack < 11.2.16 Authentication Bypass via InternalApiKeyFilter](https://agentprime.io/advisories/CVE-2026-82042.md)
  `CVE-2026-82042` · CVE record: UTMStack UTMStack · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Oct 2026 · Tags: Authentication bypass
- [Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentication bypass allows certificate mis-issuance with arbitrary subject](https://agentprime.io/advisories/CVE-2026-104988.md)
  `CVE-2026-104988` · CVE record: Red Hat Red Hat Certificate System 10 and 4 more · CVSS 8.1 High · Not analysed yet · Published 2 Oct 2026 · Tags: Authentication bypass
- [Microsoft Exchange Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96940.md)
  `CVE-2026-96940` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 8.8 High · Not analysed yet · Published 2 Oct 2026 · Tags: Authentication bypass
- [Missing authentication for critical function in Loom for AWS](https://agentprime.io/advisories/CVE-2026-103956.md)
  `CVE-2026-103956` · CVE record: AWS loom · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Oct 2026 · Tags: Authentication bypass, CWE-1188
- [onetwothreeneth HospitalManagementSystem sessions.php improper authentication](https://agentprime.io/advisories/CVE-2026-104638.md)
  `CVE-2026-104638` · CVE record: onetwothreeneth HospitalManagementSystem · CVSS 6.9 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: Authentication bypass
- [xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape](https://agentprime.io/advisories/CVE-2026-94422.md)
  `CVE-2026-94422` · CVE record: Fedora Fedora and 2 more · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Authentication bypass
- [User Impersonation/Authorization Bypass in XMPP Server ejabberd](https://agentprime.io/advisories/CVE-2026-104733.md)
  `CVE-2026-104733` · CVE record: ProcessOne ejabberd · CVSS 7.4 High · Not analysed yet · Published 2 Oct 2026 · Tags: Authentication bypass
- [YesWiki before 4.6.7 Session Fixation via Login in AuthController.php](https://agentprime.io/advisories/CVE-2026-104469.md)
  `CVE-2026-104469` · CVE record: YesWiki yeswiki · CVSS 7.6 High · Not analysed yet · Published 2 Oct 2026 · Tags: Authentication bypass
- [YesWiki before 4.6.7 Non-Expiring Password Reset Tokens via LostPasswordAction](https://agentprime.io/advisories/CVE-2026-104468.md)
  `CVE-2026-104468` · CVE record: YesWiki yeswiki · CVSS 6.3 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: Authentication bypass
- [YesWiki before 4.6.7 Unauthenticated Open Mail Relay via Contact Mail Handler](https://agentprime.io/advisories/CVE-2026-104446.md)
  `CVE-2026-104446` · CVE record: YesWiki yeswiki · CVSS 6.9 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: Authentication bypass
- [YesWiki before 4.6.7 Authentication Bypass via ActivityPub Inbox Actor Spoofing](https://agentprime.io/advisories/CVE-2026-104445.md)
  `CVE-2026-104445` · CVE record: YesWiki yeswiki · CVSS 8.8 High · Not analysed yet · Published 2 Oct 2026 · Tags: Authentication bypass
- [JSON API Auth <= 3.1.2 - Unauthenticated Authentication Bypass via Cached 'generate_auth_cookie' Response](https://agentprime.io/advisories/CVE-2026-97637.md)
  `CVE-2026-97637` · CVE record: parorrey JSON API Auth · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Oct 2026 · Tags: Authentication bypass
- [Paytm Payment Gateway < 2.8.9 - Unauthenticated Order Status Manipulation via Payment Callback](https://agentprime.io/advisories/CVE-2026-81740.md)
  `CVE-2026-81740` · CVE record: Unknown Paytm Payment Gateway · CVSS 5.3 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: Authentication bypass
- [Divi Membership <= 2.3.0 - Unauthenticated Authentication Bypass via 'paypal_param' Parameter](https://agentprime.io/advisories/CVE-2026-19660.md)
  `CVE-2026-19660` · CVE record: DiviEngine Divi Membership · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Oct 2026 · Tags: Authentication bypass
- [DevKit Pro <= 2.3.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover via 'original_user_id' Cookie in Frontend Revert Switch Flow](https://agentprime.io/advisories/CVE-2026-14378.md)
  `CVE-2026-14378` · CVE record: dplugins DevKit Pro · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Oct 2026 · Tags: Authentication bypass
- [Mooncake through 0.3.13.post1 Missing Authentication in HTTP Metadata Server](https://agentprime.io/advisories/CVE-2026-103765.md)
  `CVE-2026-103765` · CVE record: kvcache-ai Mooncake · CVSS 8.8 High · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass
- [Missing Authentication in Teledyne FLIR Robots running Aware2](https://agentprime.io/advisories/CVE-2026-14983.md)
  `CVE-2026-14983` · CVE record: Teledyne FLIR Aware2 · CVSS 7.1 High · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass
- [Podgrab Missing Authentication on WebSocket /ws Endpoint](https://agentprime.io/advisories/CVE-2026-104058.md)
  `CVE-2026-104058` · CVE record: akhilrex podgrab · CVSS 6.3 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass
- [Unauthenticated Remote Code Execution via MacTool Command Injection in TP-Link Tapo C120 & C200](https://agentprime.io/advisories/CVE-2026-102369.md)
  `CVE-2026-102369` · CVE record: TP-Link Systems Inc. Tapo C200 v5 and 1 more · CVSS 8.7 High · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass
- [Unauthenticated do Method Onboarding Connect Allows Wi‑Fi Reconfiguration Denial of Service Vulnerability in TP-Link Tapo C120 & C200](https://agentprime.io/advisories/CVE-2026-78578.md)
  `CVE-2026-78578` · CVE record: TP-Link Systems Inc. Tapo C200 v5 and 1 more · CVSS 7.1 High · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass
- [Unauthenticated Onboarding Scan Information Disclosure in TP-Link Tapo C120 & C200](https://agentprime.io/advisories/CVE-2026-78577.md)
  `CVE-2026-78577` · CVE record: TP-Link Systems Inc. Tapo C200 v5 and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass
- [Foreman: unauthenticated information disclosure via provisioning token validation flaw](https://agentprime.io/advisories/CVE-2026-12423.md)
  `CVE-2026-12423` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass
- [Apache HTTP Server: mod_auth_digest one-time-nonce replay attack](https://agentprime.io/advisories/CVE-2026-73636.md)
  `CVE-2026-73636` · CVE record: Apache Software Foundation Apache HTTP Server · CVSS 8.1 High · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass
- [WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access](https://agentprime.io/advisories/CVE-2026-13043.md)
  `CVE-2026-13043` · CVE record: WatchGuard Endpoint Security · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass, Hard-coded credentials
- [Apache HTTP Server: mod_auth_digest reauthentication attack](https://agentprime.io/advisories/CVE-2026-48005.md)
  `CVE-2026-48005` · CVE record: Apache Software Foundation Apache HTTP Server · CVSS 7.5 High · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass
- [WordPress hCaptcha for WP plugin <= 5.3.0 - Bypass Vulnerability vulnerability](https://agentprime.io/advisories/CVE-2026-103347.md)
  `CVE-2026-103347` · CVE record: hcaptcha hCaptcha for WP · CVSS 5.3 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass
- [HCL iControl is affected by a Session Timeout vulnerability](https://agentprime.io/advisories/CVE-2026-66253.md)
  `CVE-2026-66253` · CVE record: HCL Software iControl · CVSS 3.1 Low · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass
- [Apache APISIX: Openid-connect introspection validation issue](https://agentprime.io/advisories/CVE-2026-94276.md)
  `CVE-2026-94276` · CVE record: Apache Software Foundation Apache APISIX · CVSS 5.1 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass
- [Ghost 6.20.0 before 6.57.1 Authentication Bypass via Session Handling](https://agentprime.io/advisories/CVE-2026-103283.md)
  `CVE-2026-103283` · CVE record: TryGhost Ghost · CVSS 8.6 High · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass
- [Ghost 3.10.0 before 6.34.0 Session Invalidation Bypass](https://agentprime.io/advisories/CVE-2026-103279.md)
  `CVE-2026-103279` · CVE record: TryGhost Ghost · CVSS 7.6 High · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass
- [Fleet before 4.87.0 Authentication Bypass via Device Identifiers](https://agentprime.io/advisories/CVE-2026-103264.md)
  `CVE-2026-103264` · CVE record: fleetdm fleet · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass
- [ground-station before 0.8.0 Authentication Bypass via setup.restore](https://agentprime.io/advisories/CVE-2026-103244.md)
  `CVE-2026-103244` · CVE record: sgoudelis ground-station · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass
- [Oc-mirror\_\_release-4.21: embedded local cache registry listens on all interfaces without authentication, with delete enabled](https://agentprime.io/advisories/CVE-2026-96577.md)
  `CVE-2026-96577` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.18 and 4 more · CVSS 7.1 High · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass
- [MISP TOTP Code Replay Allows Duplicate Authentication Within Validity Period](https://agentprime.io/advisories/CVE-2026-103655.md)
  `CVE-2026-103655` · CVE record: MISP MISP · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass
- [Ultimate Multisite <= 2.15.0 - Unauthenticated Authentication Bypass via 'checkout_form' Parameter](https://agentprime.io/advisories/CVE-2026-75957.md)
  `CVE-2026-75957` · CVE record: superdav42 Ultimate Multisite – WordPress Multisite SaaS & WaaS Platform · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass

Newest: <https://agentprime.io/advisories/tag/auth-bypass.md>
Older: <https://agentprime.io/advisories/tag/auth-bypass.md?cursor=WyIyMDI2LTEwLTAxVDA3OjQwOjIzLjU0MTAwMFoiLCJDVkUtMjAyNi03NTk1NyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=auth-bypass&cursor=WyIyMDI2LTEwLTA1VDE4OjA5OjM1LjY0OTAwMFoiLCJDVkUtMjAyNi0xMDU2MzgiXQ>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/auth-bypass/?cursor=WyIyMDI2LTEwLTA1VDE4OjA5OjM1LjY0OTAwMFoiLCJDVkUtMjAyNi0xMDU2MzgiXQ>. Everything for agents: <https://agentprime.io/llms.txt>.