Authentication bypass.

FlexNet Beacon Missing Authentication Vulnerability

• Flexera FlexNet Beacon
• Flexera FlexNet Manager Suite
• Authentication bypass
• Information disclosure

Lack of authentication and authorization in the Images.ashx endpoint in MatchPoint

• TPC Software Matchpoint
• Authentication bypass

OpenEMR: Unauthenticated Information Disclosure in admin.php Exposes Database Names and Versions

• openemr
• Information disclosure
• Authentication bypass

FreeSWITCH: Inbound ICE connectivity checks are accepted without verifying STUN MESSAGE-INTEGRITY

• signalwire freeswitch
• Authentication bypass
• Weak cryptography or TLS

noname v1.11.2 through v1.11.6.1 Missing Authentication in Electron Local File Server

• noname
• Authentication bypass

EdgeChat before 2.20.3 Missing Authentication for Attachment Download via GET /files/:key

• aozorae EdgeChat
• Authentication bypass

Keycloak-services: keycloak-services: client manager can substitute sessionless token principal via hardcoded-claim mappers to obtain realm administrator authority

• Red Hat Build of Keycloak
• Red Hat Single Sign-On 7
• Authentication bypass

Keycloak-services: keycloak-services: unverified idp email auto-linking enables account takeover

• Red Hat Build of Keycloak
• Red Hat Single Sign-On 7
• Authentication bypass

Keycloak-services: keycloak-services: saml broker accepts holder-of-key assertions without proof of key possession

• Red Hat Build of Keycloak
• Red Hat Single Sign-On 7
• Authentication bypass

OpenHuman: Unauthenticated dictation WebSocket allows arbitrary audio streaming and unbounded memory growth

• tinyhumansai openhuman
• Authentication bypass
• Denial of service

OpenHuman: Unauthenticated Socket.IO RPC bypass allows invoking protected OpenHuman core controllers without the Bearer token

• tinyhumansai openhuman
• Authentication bypass

OpenHuman: Unauthenticated server-sent events endpoint leaks user-facing event data

• tinyhumansai openhuman
• Information disclosure
• Authentication bypass

Rapid7 Metasploit Framework Web Service unauthenticated bootstrap window allows creation of an administrator account without authentication

• Rapid7 Metasploit Framework
• Authentication bypass

Cendio ThinLinc Improper Authentication via Web Access

• Cendio ThinLinc
• Authentication bypass

OpenBMB Internet of Agents WebSocket Connection Manager app.py ConnectionManager.connect missing authentication

• OpenBMB Internet of Agents
• Authentication bypass

Apache OFBiz: Unauthenticated path-suffix view authorization bypass

• Apache Software Foundation Apache OFBiz
• Authentication bypass

Apache OFBiz: Unauthenticated saved-view authorization bypass with RCE impact

• Apache Software Foundation Apache OFBiz
• Authentication bypass

Apache OFBiz: externalLoginKey honoured pre-auth, reusable and unbound

• Apache Software Foundation Apache OFBiz
• Authentication bypass

Apache OFBiz: REST API authentication bypassed by default when the auth attribute is omitted from a .rest.xml operation

• Apache Software Foundation Apache OFBiz
• Authentication bypass
• CWE-1188

agentscope-ai AgentScope Agent Service deps.py get_current_user_id missing authentication

• AgentScope
• Authentication bypass

Apache OFBiz: Incorrect Authentication Algorithm Implementation in Password Reset Enables Full Account Takeover

• Apache Software Foundation Apache OFBiz
• Authentication bypass

Authentication bypass by spoofing in iXsystems TrueNAS SCALE

• iXsystems TrueNAS SCALE
• Authentication bypass

Authentication bypass by spoofing in GodotSteam

• GodotSteam
• Authentication bypass

OpenHands Landing missing authentication

• OpenHands
• Authentication bypass

Campcodes Bitcoin Wallet System ForgotPasswordController.php random_int excessive authentication

• Campcodes Bitcoin Wallet System
• Authentication bypass
• CWE-799

VitaFit Cloud API Authentication Bypass via POST /front/login/sns/

• Shenzhen Shine Industrial Co., Ltd. VitaFit
• Authentication bypass

GLPI: MFA bypass

• glpi
• Authentication bypass

VitaFit Android < 2.8.1.0 Long-Lived Session Token Exposure

• Shenzhen Shine Industrial Co., Ltd. VitaFit
• Authentication bypass

GPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeover

• gpustack
• Authentication bypass
• Weak cryptography or TLS

GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin

• gpustack
• Authentication bypass
• CWE-346

Traccar: Authentication bypass via path parameters exposes protected device media

• traccar
• Information disclosure
• Authentication bypass

Telepresence: Traffic Manager gRPC has no auth — any pod claims arbitrary namespace and intercepts services, receiving victim environment secrets

• telepresence
• Authentication bypass
• Broken access control

BlueprintUE Self-Hosted Edition 4.2.0 before 4.3.4 Login Rate Limit Bypass

• blueprintue-self-hosted-edition
• Authentication bypass

WPO365 LOGIN before 45.2 SAML Replay Protection Bypass

• WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN)
• Authentication bypass

Nexus Repository 3 - Disabled or Locked Single Sign-On Users Can Sign In Again

• Sonatype Nexus Repository 3
• Authentication bypass

Linksys E5350 Setup Wizard apply.cgi save_settings missing authentication

• Linksys E5350
• Authentication bypass

DeepSeek Harness Unauthenticated RPC Command Execution

• deepseek-ai deepseek-harness
• Authentication bypass

yezhihao jt808-server Web Management API WebMvcConfig.addInterceptors missing authentication

• yezhihao jt808-server
• Authentication bypass

ProSoft ICX35 Login Lockout Bypass via Client-Side Cookies

• ProSoft Technology X35-HWC-A
• ProSoft Technology ICX35-HWC-E
• Authentication bypass
• CWE-602

SharpEmu: Cross-site request forgery in the debugger frontend leads to arbitrary process execution

• sharpemu
• Authentication bypass
• Cross-site request forgery (CSRF)

WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of Service

• WatchGuard AuthPoint Authentication Gateway
• Authentication bypass
• CWE-252

WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions

• WatchGuard AuthPoint Authentication Gateway
• Authentication bypass

frr: ospf6d fails to enforce all OSPFv3 packets use IPv6 link-local addresses

• frrouting
• Authentication bypass

Databasement before 1.10.9 Account Takeover via OIDC Email Auto-Linking

• David-Crty Databasement
• Authentication bypass

CVE-2026-118513: X509Authenticator and X509AuthenticationListener Read Escaped RFC 2253 Commas and Bare Slashes Inside a DN Value as RDN Boundaries: Incomplete Fix for CVE-2026-45063

• Authentication bypass

>=2.0.0, <3.0.0 || >=3.0.0, <4.0.0 || >=4.0.0, <5.0.0 || >=5.0.0, <5.1.0 || >=5.1.0, <5.2.0 || >=5.2.0, <5.3.0 || >=5.3.0, <5.4.0 || >=5.4.0, <5.4.56 || >=6.0.0, <6.1.0 || >=6.1.0, <6.2.0 || >=6.2.0, <6.3.0 || >=6.3.0, <6.4.0 || >=6.4.0, <6.4.50 || >=7.0.0, <7.1.0 || >=7.1.0, <7.2.0 || >=7.2.0, <7.3.0 || >=7.3.0, <7.4.0 || >=7.4.0, <7.4.23 || >=8.0.0, <8.1.0 || >=8.1.0, <8.1.11 · fixed in 3.0.0, 4.0.0, 5.0.0, 5.1.0, 5.2.0, 5.3.0, 5.4.0, 5.4.56, 6.1.0, 6.2.0, 6.3.0, 6.4.0, 6.4.50, 7.1.0, 7.2.0, 7.3.0, 7.4.0, 7.4.23, 8.1.0, 8.1.11

CVE-2026-118513: X509Authenticator and X509AuthenticationListener Read Escaped RFC 2253 Commas and Bare Slashes Inside a DN Value as RDN Boundaries: Incomplete Fix for CVE-2026-45063

• Authentication bypass

>=2.0.0, <3.0.0 || >=3.0.0, <4.0.0 || >=4.0.0, <5.0.0 || >=5.0.0, <5.1.0 || >=5.1.0, <5.2.0 || >=5.2.0, <5.3.0 || >=5.3.0, <5.4.0 || >=5.4.0, <5.4.56 || >=6.0.0, <6.1.0 || >=6.1.0, <6.2.0 || >=6.2.0, <6.3.0 || >=6.3.0, <6.4.0 || >=6.4.0, <6.4.50 || >=7.0.0, <7.1.0 || >=7.1.0, <7.2.0 || >=7.2.0, <7.3.0 || >=7.3.0, <7.4.0 || >=7.4.0, <7.4.23 || >=8.0.0, <8.1.0 || >=8.1.0, <8.1.11 · fixed in 3.0.0, 4.0.0, 5.0.0, 5.1.0, 5.2.0, 5.3.0, 5.4.0, 5.4.56, 6.1.0, 6.2.0, 6.3.0, 6.4.0, 6.4.50, 7.1.0, 7.2.0, 7.3.0, 7.4.0, 7.4.23, 8.1.0, 8.1.11

WordPress Simple Cloudflare Turnstile plugin <= 1.44.1 - Broken Authentication vulnerability

• RelyWP Simple Cloudflare Turnstile
• Authentication bypass

About Time Technologies｜Herowatch Mini - Missing Authentication

• About Time Technologies Herowatch Mini
• Authentication bypass

Linksys E5600 Login mesh_login.cgi improper authentication

• Linksys E5600
• Authentication bypass

Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution Vulnerability

• Quest Foglight for Databases
• Authentication bypass

Emerson Ovation Missing Authentication for Critical Functionality

• Emerson Ovation
• Authentication bypass

NocoDB 0.300.0 before 2026.08.0 Unauthenticated OAuth Authorization Code Creation

• nocodb
• Authentication bypass

blueprintUE Self-Hosted Edition before 4.3.4 Non-Expiring Account Confirmation Tokens

• blueprintue-self-hosted-edition
• Authentication bypass

miroslavpejic85 MiroTalk P2P Room Action server.js checkPassword excessive authentication

• miroslavpejic85 MiroTalk P2P
• Authentication bypass
• CWE-799

CVE-2026-22060 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)

• NETAPP StorageGRID (formerly StorageGRID Webscale)
• Authentication bypass

Umami 2FA Policy route.ts single-factor authentication

• Umami
• Authentication bypass
• CWE-308

CVE-2026-22058 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)

• NETAPP StorageGRID (formerly StorageGRID Webscale)
• Authentication bypass

Yeti: Unauthenticated Access to Full Audit Timeline Discloses All Threat Intelligence Data

• yeti
• Authentication bypass

mathurvishal CloudClassroom-PHP-Project loginlinkadmin.php session_regenerate_id session fixiation

• mathurvishal CloudClassroom-PHP-Project
• Authentication bypass

Arc has unauthenticated application log disclosure via `/api/v1/logs`

• Information disclosure
• Authentication bypass

<0.0.0-20260615165136-bb7d9761ad98 · fixed in 0.0.0-20260615165136-bb7d9761ad98