# Authentication bypass.

Getting in without valid credentials: missing or broken authentication, sessions. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Authentication bypass in Veeam ONE](https://agentprime.io/advisories/CVE-2026-107671.md)
  `CVE-2026-107671` · CVE record: Veeam ONE · CVSS 8.5 High · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass
- [Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512)](https://agentprime.io/advisories/GHSA-8m4g-j4wp-wgcg.md)
  `GHSA-8m4g-j4wp-wgcg`, `CVE-2026-114616`, `PYSEC-2026-4356` · PyPI `authlib`: affected `<1.9.1`, fixed in `1.9.1` · CVSS 7.4 High · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass, Weak cryptography or TLS, Hard-coded credentials
- [Fireware OS Missing Authentication in FireCluster Sync Allows Privilege Escalation](https://agentprime.io/advisories/CVE-2026-90465.md)
  `CVE-2026-90465` · CVE record: WatchGuard Fireware OS · CVSS 8.7 High · Not analysed yet · Published 27 Oct 2026 · Tags: Command injection, Authentication bypass, Broken access control
- [Fireware OS Improper Authentication in AuthPoint MFA Verification Allows Session Hijacking](https://agentprime.io/advisories/CVE-2026-82332.md)
  `CVE-2026-82332` · CVE record: WatchGuard Fireware OS · CVSS 5.6 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass, CWE-346
- [Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds Write](https://agentprime.io/advisories/CVE-2026-93866.md)
  `CVE-2026-93866` · CVE record: WatchGuard Fireware OS · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Memory corruption, Authentication bypass
- [Fireware OS Missing Authentication in FireCluster State Sync Allows BOVPN Tunnel Denial of Service](https://agentprime.io/advisories/CVE-2026-104381.md)
  `CVE-2026-104381` · CVE record: WatchGuard Fireware OS · CVSS 6.0 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass, CWE-345
- [Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injection](https://agentprime.io/advisories/CVE-2026-93865.md)
  `CVE-2026-93865` · CVE record: WatchGuard Fireware OS · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Command injection, Authentication bypass, Broken access control
- [Authlib: ID token can disable its own nonce validation via the nonce_supported claim](https://agentprime.io/advisories/GHSA-c5mf-xmp2-59rc.md)
  `GHSA-c5mf-xmp2-59rc`, `CVE-2026-114617`, `PYSEC-2026-4357` · PyPI `authlib`: affected `<1.9.0`, fixed in `1.9.0` · CVSS 4.2 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass, CWE-807
- [Authlib: Default JWT bearer grant accepts assertions for the wrong audience](https://agentprime.io/advisories/GHSA-fch4-3c6x-j4gc.md)
  `GHSA-fch4-3c6x-j4gc`, `CVE-2026-114618`, `PYSEC-2026-4358` · PyPI `authlib`: affected `<1.9.0`, fixed in `1.9.0` · CVSS 6.8 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass, CWE-1188
- [@better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL](https://agentprime.io/advisories/GHSA-44jh-23m7-hpcf.md)
  `GHSA-44jh-23m7-hpcf`, `CVE-2026-110861` · npm `better-auth` and 2 more: affected `>=1.6.17, <1.7.7`, fixed in `1.7.7` · CVSS 6.3 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass, Race condition
- [better-auth: OAuth Proxy lets an attacker sign in as another user](https://agentprime.io/advisories/GHSA-r4xp-prcw-77qf.md)
  `GHSA-r4xp-prcw-77qf`, `CVE-2026-110864` · npm `better-auth`: affected `>=1.5.0-beta.12, <1.7.7`, fixed in `1.7.7` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass, CWE-345
- [better-auth: OAuth state can be used as a Magic Link to sign in as another user](https://agentprime.io/advisories/GHSA-965c-763c-88jm.md)
  `GHSA-965c-763c-88jm`, `CVE-2026-110862`, `CVE-2026-114607` · npm `better-auth`: affected `>=1.4.0-beta.18, <1.7.7`, fixed in `1.7.7` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass
- [3Dviewer-Nextcloud: Share password not enforced when streaming 3D models from a public link share](https://agentprime.io/advisories/CVE-2026-104189.md)
  `CVE-2026-104189` · CVE record: maz1987in 3Dviewer-Nextcloud · CVSS 7.5 High · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass, Broken access control
- [Local Privilege Escalation via IPC Broker Impersonation in TeamViewer Remote Management Monitoring for Windows](https://agentprime.io/advisories/CVE-2026-92376.md)
  `CVE-2026-92376` · CVE record: TeamViewer Remote Management - Monitoring · CVSS 7.8 High · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass
- [OAuthLib: Bearer token can be retrieved as long as client knows a valid client ID for device workflow](https://agentprime.io/advisories/GHSA-3jp2-3mrg-2vxc.md)
  `GHSA-3jp2-3mrg-2vxc`, `CVE-2026-49272` · PyPI `oauthlib`: affected `>=3.3.0, <4.0.1`, fixed in `4.0.1` · CVSS 8.5 High · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass
- [Authentication Bypass with X-Agentic-Ally-Token in Keepnet Labs Agentic AI / Agentic Ally](https://agentprime.io/advisories/CVE-2026-92546.md)
  `CVE-2026-92546` · CVE record: Keepnet Labs Cybersecurity Inc. Agentic AI / Agentic Ally · CVSS 7.5 High · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass
- [OTP Brute-Force Account Takeover in Idvlabs Software's Ontime](https://agentprime.io/advisories/CVE-2026-15586.md)
  `CVE-2026-15586` · CVE record: İdvlabs Software and Consulting Services Inc. Ontime · CVSS 5.3 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass
- [Missing authentication in NVIDIA NeMo Agent Toolkit](https://agentprime.io/advisories/CVE-2026-65145.md)
  `CVE-2026-65145` · CVE record: NVIDIA NeMo Agent Toolkit · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass
- [Missing authentication in Hitachi Energy TRO600 Series Firmware](https://agentprime.io/advisories/CVE-2026-106087.md)
  `CVE-2026-106087` · CVE record: Hitachi Energy TRO600 Series Firmware · CVSS 8.7 High · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass
- [@fastify/session vulnerable to session revocation bypass via a logout race condition](https://agentprime.io/advisories/CVE-2026-117499.md)
  `CVE-2026-117499` · CVE record: @fastify/session @fastify/session · CVSS 3.7 Low · Not analysed yet · Published 27 Oct 2026 · Tags: Race condition, Authentication bypass
- [Authentication bypass by replay in Eaton easyE4](https://agentprime.io/advisories/CVE-2026-41020.md)
  `CVE-2026-41020` · CVE record: Eaton easyE4 · CVSS 7.5 High · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass
- [REDAXO Core 5.3.0 before 5.21.4 Authentication Bypass via History Plugin](https://agentprime.io/advisories/CVE-2026-117532.md)
  `CVE-2026-117532` · CVE record: redaxo core · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass
- [REDAXO before 5.21.5 Insufficient Session Expiration on Password Change](https://agentprime.io/advisories/CVE-2026-116894.md)
  `CVE-2026-116894` · CVE record: redaxo core · CVSS 2.3 Low · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass
- [Authentication Bypass by Spoofing Vulnerability in HiRDB](https://agentprime.io/advisories/CVE-2026-82117.md)
  `CVE-2026-82117` · CVE record: Hitachi HiRDB Server Version 10 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass
- [Missing Authentication for Critical Function Vulnerability in HiRDB](https://agentprime.io/advisories/CVE-2026-82116.md)
  `CVE-2026-82116` · CVE record: Hitachi HiRDB Server Version 10 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass
- [Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3](https://agentprime.io/advisories/CVE-2026-76938.md)
  `CVE-2026-76938` · CVE record: Hitachi JP1/Automatic Job Management System 3 - Manager · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass
- [Authentication bypass by spoofing in twofactor_gauthenticator](https://agentprime.io/advisories/CVE-2026-107147.md)
  `CVE-2026-107147` · CVE record: alexandregz twofactor_gauthenticator · CVSS 6.3 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass
- [Insufficient session expiration in twofactor_gauthenticator](https://agentprime.io/advisories/CVE-2026-107146.md)
  `CVE-2026-107146` · CVE record: alexandregz twofactor_gauthenticator · CVSS 6.3 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass
- [Lack of rate-limiting in 2fa code check mechanism in twofactor_gauthenticator](https://agentprime.io/advisories/CVE-2026-107145.md)
  `CVE-2026-107145` · CVE record: alexandregz twofactor_gauthenticator · CVSS 6.3 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass
- [Qode Membership <= 2.0.6.2 - Authentication Bypass via Social Login](https://agentprime.io/advisories/CVE-2026-92885.md)
  `CVE-2026-92885` · CVE record: Qode Themes Qode Membership · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass
- [Supermicro BMC IPMI feature contains Critical Privilege Escalation and Arbitrary Access vulnerability](https://agentprime.io/advisories/CVE-2026-65211.md)
  `CVE-2026-65211` · CVE record: SMCI MBD-X12SPI · CVSS 7.2 High · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass
- [Supermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability](https://agentprime.io/advisories/CVE-2026-18450.md)
  `CVE-2026-18450` · CVE record: SMCI X12SPI · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass
- [Payment Integration Wompi <= 4.0.1 - Unauthenticated Payment Confirmation Forgery via IPN Callback](https://agentprime.io/advisories/CVE-2026-103312.md)
  `CVE-2026-103312` · CVE record: Unknown Payment Integration Wompi · CVSS 5.3 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass
- [Payex Payment Gateway for WooCommerce <= 1.2.10 - Unauthenticated Payment Confirmation Forgery via Empty-Default Secret Key](https://agentprime.io/advisories/CVE-2026-103332.md)
  `CVE-2026-103332` · CVE record: Unknown Payex Payment Gateway for Woocommerce · CVSS 5.3 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass
- [WebAuthn assertion replay permits second-factor bypass in Psono Server](https://agentprime.io/advisories/CVE-2026-117470.md)
  `CVE-2026-117470` · CVE record: esaqa GmbH Psono · CVSS 6.5 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass
- [SourceCodester Online Food Ordering System delete_admin.php missing authentication](https://agentprime.io/advisories/CVE-2026-116604.md)
  `CVE-2026-116604` · CVE record: SourceCodester Online Food Ordering System · CVSS 6.9 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Authentication bypass
- [YesWiki from 4.6.2 before 4.7.0 HTTP Signature Replay via ActivityPub Inbox](https://agentprime.io/advisories/CVE-2026-116825.md)
  `CVE-2026-116825` · CVE record: YesWiki yeswiki · CVSS 8.3 High · Not analysed yet · Published 26 Oct 2026 · Tags: Authentication bypass
- [OpenPanel before 3.0.0 Missing Authentication on Worker Bull Board](https://agentprime.io/advisories/CVE-2026-116817.md)
  `CVE-2026-116817` · CVE record: Openpanel-dev openpanel · CVSS 6.9 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Authentication bypass
- [Missing authentication in Apple iOS and iPadOS](https://agentprime.io/advisories/CVE-2026-84493.md)
  `CVE-2026-84493` · CVE record: Apple iOS and iPadOS · CVSS 4.4 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Authentication bypass
- [Authentication bypass by spoofing in Apple macOS](https://agentprime.io/advisories/CVE-2026-84610.md)
  `CVE-2026-84610` · CVE record: Apple macOS · CVSS 5.5 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Authentication bypass
- [Authentication bypass by spoofing in Apple macOS](https://agentprime.io/advisories/CVE-2026-112494.md)
  `CVE-2026-112494` · CVE record: Apple macOS · CVSS 5.5 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Authentication bypass
- [Improper authentication in Apple macOS](https://agentprime.io/advisories/CVE-2026-112427.md)
  `CVE-2026-112427` · CVE record: Apple macOS · CVSS 8.1 High · Not analysed yet · Published 26 Oct 2026 · Tags: Authentication bypass
- [Authentication bypass by spoofing in Apple macOS](https://agentprime.io/advisories/CVE-2026-112493.md)
  `CVE-2026-112493` · CVE record: Apple macOS · CVSS 7.8 High · Not analysed yet · Published 26 Oct 2026 · Tags: Authentication bypass
- [Authentication bypass by spoofing in Apple macOS](https://agentprime.io/advisories/CVE-2026-64789.md)
  `CVE-2026-64789` · CVE record: Apple macOS · CVSS 5.5 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Authentication bypass
- [Authentication bypass by spoofing in Apple macOS](https://agentprime.io/advisories/CVE-2026-112444.md)
  `CVE-2026-112444` · CVE record: Apple macOS · CVSS 4.4 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Authentication bypass
- [Improper authentication in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2026-112595.md)
  `CVE-2026-112595` · CVE record: Apple iOS and iPadOS and 2 more · CVSS 7.5 High · Not analysed yet · Published 26 Oct 2026 · Tags: Authentication bypass
- [Authentication bypass by spoofing in Apple macOS](https://agentprime.io/advisories/CVE-2026-86941.md)
  `CVE-2026-86941` · CVE record: Apple macOS · CVSS 6.2 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Authentication bypass
- [Improper authentication in Apple iOS and iPadOS](https://agentprime.io/advisories/CVE-2026-86989.md)
  `CVE-2026-86989` · CVE record: Apple iOS and iPadOS · CVSS 5.1 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Authentication bypass
- [Unauthorized Access to Internal Web Resources](https://agentprime.io/advisories/CVE-2026-70381.md)
  `CVE-2026-70381` · CVE record: WolfVision Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro and 3 more · CVSS 6.9 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Authentication bypass
- [OmniRoute 3.8.50 before 3.8.52 Missing Authentication via /api/sync/tokens](https://agentprime.io/advisories/CVE-2026-116634.md)
  `CVE-2026-116634` · CVE record: cheaper-inference OmniRoute · CVSS 8.2 High · Not analysed yet · Published 26 Oct 2026 · Tags: Authentication bypass
- [Burrito: Unauthenticated webhooks trigger unauthorized Terraform plans when webhookSecret is unset](https://agentprime.io/advisories/CVE-2026-102649.md)
  `CVE-2026-102649` · CVE record: padok-team burrito · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Oct 2026 · Tags: Authentication bypass, Broken access control
- [Akuvox Akubela HyPanel PS51 login improper authentication](https://agentprime.io/advisories/CVE-2026-116371.md)
  `CVE-2026-116371` · CVE record: Akuvox Akubela HyPanel PS51 · CVSS 5.3 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Authentication bypass
- [Missing Authentication for Critical Function in boneIO](https://agentprime.io/advisories/CVE-2026-77061.md)
  `CVE-2026-77061` · CVE record: boneIO boneIO · CVSS 5.3 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Authentication bypass
- [Improper Restriction of Excessive Authentication Attempts in boneIO](https://agentprime.io/advisories/CVE-2026-77057.md)
  `CVE-2026-77057` · CVE record: boneIO boneIO · CVSS 2.3 Low · Not analysed yet · Published 26 Oct 2026 · Tags: Authentication bypass
- [Missing Authentication in Default Configuration in boneIO](https://agentprime.io/advisories/CVE-2026-77053.md)
  `CVE-2026-77053` · CVE record: boneIO boneIO · CVSS 8.7 High · Not analysed yet · Published 26 Oct 2026 · Tags: Authentication bypass
- [Missing Authentication for Node-RED in boneIO](https://agentprime.io/advisories/CVE-2026-77052.md)
  `CVE-2026-77052` · CVE record: boneIO boneIO · CVSS 8.7 High · Not analysed yet · Published 26 Oct 2026 · Tags: Authentication bypass
- [Authentication bypass in Fortinet FortiSandbox and others](https://agentprime.io/advisories/CVE-2026-107656.md)
  `CVE-2026-107656` · CVE record: Fortinet FortiSandbox and 1 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Oct 2026 · Tags: Authentication bypass
- [danmu_api before 1.21.7 Authentication Bypass via Default Token in Env Endpoints](https://agentprime.io/advisories/CVE-2026-116485.md)
  `CVE-2026-116485` · CVE record: huangxd- danmu_api · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Oct 2026 · Tags: Authentication bypass
- [Improper Authentication Vulnerability in CreditNirvana Collections Platform](https://agentprime.io/advisories/CVE-2026-110475.md)
  `CVE-2026-110475` · CVE record: CreditNirvana CreditNirvana Collections Platform (CollectionWorkz) · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Oct 2026 · Tags: Authentication bypass
- [Authentication bypass by replay in Siemens Mendix SAML (Mendix 10 compatible) and others](https://agentprime.io/advisories/CVE-2026-89209.md)
  `CVE-2026-89209` · CVE record: Siemens Mendix SAML (Mendix 10 compatible) and 2 more · CVSS 7.6 High · Not analysed yet · Published 26 Oct 2026 · Tags: Authentication bypass

Newest: <https://agentprime.io/advisories/tag/auth-bypass.md>
Older: <https://agentprime.io/advisories/tag/auth-bypass.md?cursor=WyIyMDI2LTEwLTI2VDEwOjQxOjAxLjA4ODAwMFoiLCJDVkUtMjAyNi04OTIwOSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=auth-bypass&cursor=WyIyMDI2LTEwLTI3VDE3OjQxOjIxLjYzNjAwMFoiLCJDVkUtMjAyNi0xMDI4MTYiXQ>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/auth-bypass/?cursor=WyIyMDI2LTEwLTI3VDE3OjQxOjIxLjYzNjAwMFoiLCJDVkUtMjAyNi0xMDI4MTYiXQ>. Everything for agents: <https://agentprime.io/llms.txt>.