# Authentication bypass.

Getting in without valid credentials: missing or broken authentication, sessions. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [MISP HOTP Token Replay via Stale Session-Cached Counter Allows Second-Factor Authentication Bypass](https://agentprime.io/advisories/CVE-2026-103651.md)
  `CVE-2026-103651` · CVE record: MISP MISP · CVSS 7.6 High · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass, Race condition
- [Comelit 1456B gateway exposes remote configuration password via unauthenticated management interface](https://agentprime.io/advisories/CVE-2026-80276.md)
  `CVE-2026-80276` · CVE record: Comelit Group S.p.A. 1456B Multi-User Gateway · CVSS 7.5 High · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass
- [ZongXR SuperMarket Instant Buy InstantBuyController.java startBuy missing authentication](https://agentprime.io/advisories/CVE-2026-103539.md)
  `CVE-2026-103539` · CVE record: ZongXR SuperMarket · CVSS 5.3 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass
- [Missing proper authentication for critical APIs may allow sensitive information to be obtained or modified, or unauthorized operations to be performed](https://agentprime.io/advisories/CVE-2026-82825.md)
  `CVE-2026-82825` · CVE record: Hitachi Industrial Equipment Systems Hitachi Coding Software Suite · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass
- [Genians, Inc. Genian NAC/ZTNA Improper Access Control on the Internal Interface](https://agentprime.io/advisories/CVE-2026-76142.md)
  `CVE-2026-76142` · CVE record: Genians, Inc Genian NAC 5.0.75 LTS Release and 4 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Broken access control, Authentication bypass
- [ZongXR SuperMarket Order Deletion Endpoint OrderController.java OrderController.deleteOrder missing authentication](https://agentprime.io/advisories/CVE-2026-103538.md)
  `CVE-2026-103538` · CVE record: ZongXR SuperMarket · CVSS 6.9 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass
- [ZongXR Supermarket save Endpoint OrderController.java OrderController.addOrder missing authentication](https://agentprime.io/advisories/CVE-2026-103536.md)
  `CVE-2026-103536` · CVE record: ZongXR Supermarket · CVSS 6.9 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Authentication bypass
- [fastify vulnerable to authentication bypass via malformed URLs reaching encapsulated not-found handlers](https://agentprime.io/advisories/GHSA-p68q-wchp-6fh7.md)
  `GHSA-p68q-wchp-6fh7`, `CVE-2026-76169` · npm `fastify`: affected `>=4.0.0, <5.12.2`, fixed in `5.12.2` · CVSS 7.5 High · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass
- [Russh: Configured server auth-attempt cap is not enforced in the USERAUTH_REQUEST runtime path](https://agentprime.io/advisories/GHSA-g6xm-f9xp-qq35.md)
  `GHSA-g6xm-f9xp-qq35`, `CVE-2026-102825` · crates.io `russh`: affected `<0.62.6`, fixed in `0.62.6` · CVSS 3.7 Low · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass
- [Kiteworks Email Protection Gateway improper authentication](https://agentprime.io/advisories/CVE-2026-102106.md)
  `CVE-2026-102106` · CVE record: Kiteworks Email Protection Gateway · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass
- [Missing authentication on a Kiteworks appliance setup function](https://agentprime.io/advisories/CVE-2026-102110.md)
  `CVE-2026-102110` · CVE record: Kiteworks Core · CVSS 5.9 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass, CWE-670
- [Kiteworks Secure Data Forms Exposure of Sensitive Information to an Unauthorized Actor](https://agentprime.io/advisories/CVE-2026-102121.md)
  `CVE-2026-102121` · CVE record: Kiteworks Secure Data Forms · CVSS 8.6 High · Not analysed yet · Published 30 Sept 2026 · Tags: Information disclosure, Authentication bypass
- [Kiteworks Core Missing Authentication for Critical Function](https://agentprime.io/advisories/CVE-2026-102124.md)
  `CVE-2026-102124` · CVE record: Kiteworks Core · CVSS 6.5 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass, CWE-670
- [Kiteworks Email Protection Gateway Improper Authentication](https://agentprime.io/advisories/CVE-2026-102128.md)
  `CVE-2026-102128` · CVE record: Kiteworks Email Protection Gateway · CVSS 7.5 High · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass
- [Kiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous Type](https://agentprime.io/advisories/CVE-2026-102143.md)
  `CVE-2026-102143` · CVE record: Kiteworks Email Protection Gateway · CVSS 7.5 High · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass, Unrestricted file upload
- [Kiteworks Email Protection Gateway Uncontrolled Resource Consumption](https://agentprime.io/advisories/CVE-2026-102144.md)
  `CVE-2026-102144` · CVE record: Kiteworks Email Protection Gateway · CVSS 5.3 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass, Denial of service
- [Kiteworks Secure Data Forms Missing Authentication for Critical Function](https://agentprime.io/advisories/CVE-2026-102150.md)
  `CVE-2026-102150` · CVE record: Kiteworks Secure Data Forms · CVSS 7.2 High · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass
- [Kiteworks Email Protection Gateway Improper Access Control](https://agentprime.io/advisories/CVE-2026-102149.md)
  `CVE-2026-102149` · CVE record: Kiteworks Email Protection Gateway · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass
- [Taskcluster: Unauthenticated remote code execution in \`web-server\` via GraphQL \`filter\` argument (sift \`$where\`)](https://agentprime.io/advisories/CVE-2026-55094.md)
  `CVE-2026-55094` · CVE record: taskcluster taskcluster · CVSS 8.7 High · Not analysed yet · Published 30 Sept 2026 · Tags: Code injection, Privilege escalation, Authentication bypass, CWE-20
- [Soft Machine: Unauthenticated workspace API exposes arbitrary file read & directory exfiltration to any peer on the Fly private network](https://agentprime.io/advisories/CVE-2026-46711.md)
  `CVE-2026-46711` · CVE record: Soft-Machine-io security · CVSS 8.3 High · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass
- [PTZOptics Missing Authentication in Firmware Upload](https://agentprime.io/advisories/CVE-2026-75969.md)
  `CVE-2026-75969` · CVE record: PTZOptics Move 4K 12X and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass
- [Undisclosed RCE in Zammad v6.3 and higher](https://agentprime.io/advisories/CVE-2026-102489.md)
  `CVE-2026-102489` · CVE record: Zammad GmbH Zammad · CVSS 8.7 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.50 · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass
- [Authentication bypass in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2026-100261.md)
  `CVE-2026-100261` · CVE record: JetBrains YouTrack · CVSS 5.4 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass
- [OpenSave before 2.4.0-beta.1 Authentication Bypass via Spoofed Relay Sender](https://agentprime.io/advisories/CVE-2026-103397.md)
  `CVE-2026-103397` · CVE record: Liquid-co OpenSave · CVSS 6.3 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass
- [LightLLM through 1.2.0 Missing Authentication on RL Control Routes](https://agentprime.io/advisories/CVE-2026-103270.md)
  `CVE-2026-103270` · CVE record: ModelTC LightLLM · CVSS 8.7 High · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass
- [@nestjs/platform-fastify: Path-scoped middleware bypass via absolute-form request targets](https://agentprime.io/advisories/GHSA-9c5c-9qcx-q35q.md)
  `GHSA-9c5c-9qcx-q35q` · npm `@nestjs/platform-fastify`: affected `<11.2.4 || >=12.0.0, <12.0.2`, fixed in `11.2.4`, `12.0.2` · CVSS 7.4 High · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass, CWE-436
- [Missing Server-Side Authentication on REST API Endpoint in Trex Digital Manufacturing's Trex MES](https://agentprime.io/advisories/CVE-2026-18783.md)
  `CVE-2026-18783` · CVE record: Trex Digital Smart Manufacturing Systems Inc. Trex MES · CVSS 8.8 High · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass
- [WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.2 - Bypass vulnerability vulnerability](https://agentprime.io/advisories/CVE-2026-97274.md)
  `CVE-2026-97274` · CVE record: miniOrange OAuth Single Sign On – SSO (OAuth Client) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass
- [WordPress Paid Member Subscriptions plugin <= 3.0.9 - Bypass Vulnerability vulnerability](https://agentprime.io/advisories/CVE-2026-97249.md)
  `CVE-2026-97249` · CVE record: Cozmoslabs Paid Member Subscriptions · CVSS 5.3 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass
- [WordPress All In One WP Security & Firewall plugin <= 5.4.8 - Bypass Vulnerability vulnerability](https://agentprime.io/advisories/CVE-2026-96825.md)
  `CVE-2026-96825` · CVE record: David Anderson / Team Updraft All In One WP Security & Firewall · CVSS 4.2 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass
- [Apache WSS4J: UsernameToken replay protection bypassed by re-encoding the Nonce](https://agentprime.io/advisories/CVE-2026-92899.md)
  `CVE-2026-92899` · CVE record: Apache Software Foundation Apache WSS4J · CVSS 4.8 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass, CWE-180
- [Apache WSS4J: SAML Sender-Vouches Authentication Bypass](https://agentprime.io/advisories/CVE-2026-88920.md)
  `CVE-2026-88920` · CVE record: Apache Software Foundation Apache WSS4J · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass
- [Apache MINA SSHD: Repeated-publickey policy bypass on server](https://agentprime.io/advisories/CVE-2026-93994.md)
  `CVE-2026-93994` · CVE record: Apache Software Foundation Apache MINA SSHD · CVSS 8.1 High · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass
- [Apache MINA SSHD: LDAP password authentication ineffective](https://agentprime.io/advisories/CVE-2026-94052.md)
  `CVE-2026-94052` · CVE record: Apache Software Foundation Apache MINA SSHD · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass
- [DigiWin｜EasyFlow .NET - Missing Authentication](https://agentprime.io/advisories/CVE-2026-102458.md)
  `CVE-2026-102458` · CVE record: DigiWin EasyFlow .NET · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass
- [Pgpool Global Development Group Pgpool-II: Pgpool-II contains an incorrect implementation of an authentication algorithm…](https://agentprime.io/advisories/CVE-2026-92873.md)
  `CVE-2026-92873` · CVE record: Pgpool Global Development Group Pgpool-II · CVSS 6.9 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in baserCMS](https://agentprime.io/advisories/CVE-2026-93462.md)
  `CVE-2026-93462` · CVE record: baserCMS User Community baserCMS · CVSS 6.9 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass
- [FluentCart < 1.6.5 - Unauthenticated Guest Customer Account Takeover via Checkout Email](https://agentprime.io/advisories/CVE-2026-100143.md)
  `CVE-2026-100143` · CVE record: Unknown FluentCart A New Era of eCommerce · CVSS 6.5 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass
- [AiSOC 5.1.0 before 12.0.0 Missing Authentication on Realtime Service Internal Endpoints](https://agentprime.io/advisories/CVE-2026-103057.md)
  `CVE-2026-103057` · CVE record: beenuar AiSOC · CVSS 5.3 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass
- [AiSOC 9.0.0 before 12.0.0 Missing Authentication on Actions Service Response-Action API](https://agentprime.io/advisories/CVE-2026-103053.md)
  `CVE-2026-103053` · CVE record: beenuar AiSOC · CVSS 5.3 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Authentication bypass
- [Toptech TMS7 and TopHAT Session Fixation](https://agentprime.io/advisories/CVE-2026-71302.md)
  `CVE-2026-71302` · CVE record: Toptech Systems TMS7 and 1 more · CVSS 7.5 High · Not analysed yet · Published 29 Sept 2026 · Tags: Authentication bypass
- [Dockhand < 1.0.40 Unauthenticated Webhook Trigger via Git Webhook Endpoints](https://agentprime.io/advisories/CVE-2026-53988.md)
  `CVE-2026-53988` · CVE record: Finsys dockhand · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Sept 2026 · Tags: Authentication bypass
- [Improper PAPI Packet handling leads to unauthorized access in HPE Networking Instant ON APs](https://agentprime.io/advisories/CVE-2026-76730.md)
  `CVE-2026-76730` · CVE record: Hewlett Packard Enterprise (HPE) Instant ON · CVSS 6.5 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Authentication bypass
- [Authentication Bypass Leading to Unauthorized Network Access in HPE Networking Instant ON API Endpoint](https://agentprime.io/advisories/CVE-2026-76726.md)
  `CVE-2026-76726` · CVE record: Hewlett Packard Enterprise (HPE) Instant ON · CVSS 8.1 High · Not analysed yet · Published 29 Sept 2026 · Tags: Authentication bypass
- [Authentication Bypass in a Management Protocol of HPE Networking Instant ON APs](https://agentprime.io/advisories/CVE-2026-76725.md)
  `CVE-2026-76725` · CVE record: Hewlett Packard Enterprise (HPE) Instant ON · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Sept 2026 · Tags: Authentication bypass
- [Marmite through 0.4.2 Unauthenticated API Access via Development Server](https://agentprime.io/advisories/CVE-2026-102811.md)
  `CVE-2026-102811` · CVE record: rochacbruno marmite · CVSS 8.7 High · Not analysed yet · Published 29 Sept 2026 · Tags: Authentication bypass
- [Joomla! Core - \[20260914\] - Core - MFA Authentication Bypass through rememberme cookies in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3](https://agentprime.io/advisories/CVE-2026-92227.md)
  `CVE-2026-92227` · CVE record: Joomla! Project Joomla! CMS · CVSS 8.2 High · Not analysed yet · Published 29 Sept 2026 · Tags: Authentication bypass
- [OAuth credentials not disabled when application is disabled](https://agentprime.io/advisories/CVE-2026-101271.md)
  `CVE-2026-101271` · CVE record: pretix pretix · CVSS 2.1 Low · Not analysed yet · Published 29 Sept 2026 · Tags: Authentication bypass
- [Incorrect session validation for API-uploaded files](https://agentprime.io/advisories/CVE-2026-101269.md)
  `CVE-2026-101269` · CVE record: pretix pretix · CVSS 2.3 Low · Not analysed yet · Published 29 Sept 2026 · Tags: Authentication bypass
- [Customer session fixation](https://agentprime.io/advisories/CVE-2026-101268.md)
  `CVE-2026-101268` · CVE record: pretix pretix · CVSS 1.7 Low · Not analysed yet · Published 29 Sept 2026 · Tags: Authentication bypass
- [Apache DolphinScheduler: Unauthorized Disclosure of Data Source Information via /datasources/unauth-datasource](https://agentprime.io/advisories/CVE-2026-66083.md)
  `CVE-2026-66083` · CVE record: Apache Software Foundation Apache DolphinScheduler · CVSS 6.5 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Hitachi Energy Asset Suite](https://agentprime.io/advisories/CVE-2026-11796.md)
  `CVE-2026-11796` · CVE record: Hitachi Energy Asset Suite · CVSS 5.1 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Hitachi Energy Asset Suite](https://agentprime.io/advisories/CVE-2026-7395.md)
  `CVE-2026-7395` · CVE record: Hitachi Energy Asset Suite · CVSS 8.5 High · Not analysed yet · Published 29 Sept 2026 · Tags: Authentication bypass
- [Missing authentication in Hitachi Energy RTU500 series CMU firmware](https://agentprime.io/advisories/CVE-2026-8065.md)
  `CVE-2026-8065` · CVE record: Hitachi Energy RTU500 series CMU firmware · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Sept 2026 · Tags: Authentication bypass
- [Missing Authentication in the local .NET backend of Progress Telerik Fiddler Everywhere](https://agentprime.io/advisories/CVE-2026-86158.md)
  `CVE-2026-86158` · CVE record: Progress Software Progress® Telerik® Fiddler® Everywhere · CVSS 7.7 High · Not analysed yet · Published 29 Sept 2026 · Tags: Authentication bypass
- [Rebuild Login Endpoint login improper authentication](https://agentprime.io/advisories/CVE-2026-102248.md)
  `CVE-2026-102248` · CVE record: Rebuild · CVSS 6.9 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Authentication bypass
- [MODSetter SurfSense circleback Endpoint circleback_webhook_route.py missing authentication](https://agentprime.io/advisories/CVE-2026-102245.md)
  `CVE-2026-102245` · CVE record: MODSetter SurfSense · CVSS 6.9 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Authentication bypass
- [Bitwarden Server 2025.6.0 < 2025.6.0 Authentication Bypass via SSO Identifier Truncation](https://agentprime.io/advisories/CVE-2026-101878.md)
  `CVE-2026-101878` · CVE record: bitwarden bitwarden server · CVSS 7.7 High · Not analysed yet · Published 29 Sept 2026 · Tags: Authentication bypass
- [Trusted Domain Project OpenDMARC SPF Macro opendmarc_spf.c opendmarc_sp2_find_mailfrom_domain improper authentication](https://agentprime.io/advisories/CVE-2026-101281.md)
  `CVE-2026-101281` · CVE record: Trusted Domain Project OpenDMARC · CVSS 6.9 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Authentication bypass
- [Trusted Domain Project OpenDMARC Multi-Record Set opendmarc_policy_query_dmarc authentication spoofing](https://agentprime.io/advisories/CVE-2026-101280.md)
  `CVE-2026-101280` · CVE record: Trusted Domain Project OpenDMARC · CVSS 6.9 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Authentication bypass

Newest: <https://agentprime.io/advisories/tag/auth-bypass.md>
Older: <https://agentprime.io/advisories/tag/auth-bypass.md?cursor=WyIyMDI2LTA5LTI5VDAwOjMwOjE1LjUwNDAwMFoiLCJDVkUtMjAyNi0xMDEyODAiXQ>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=auth-bypass&cursor=WyIyMDI2LTEwLTAxVDA3OjQwOjIzLjU0MTAwMFoiLCJDVkUtMjAyNi03NTk1NyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/auth-bypass/?cursor=WyIyMDI2LTEwLTAxVDA3OjQwOjIzLjU0MTAwMFoiLCJDVkUtMjAyNi03NTk1NyJd>. Everything for agents: <https://agentprime.io/llms.txt>.