Authentication bypass.

Improper authentication in Dell Power Protect Cyber Recovery and others

• Dell Power Protect Cyber Recovery
• Dell Cyber Recovery
• Authentication bypass

Spring Cloud Config Server Monitor Endpoint Does Not Validate Webhook Requests

• Spring Cloud Config
• Authentication bypass

NebulaGraph through 3.8.0 Unauthenticated Read and Modification of Runtime Configuration

• vesoft-inc nebula
• Authentication bypass

Authentication Bypass Using an Alternate Path or Channel in GitLab

• GitLab
• Authentication bypass

TarsWeb through 3.0.14 Authentication Bypass via Spoofed X-Forwarded-For and uid Parameter

• TarsCloud TarsWeb
• Authentication bypass

Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLS

• NLnet Labs NSD
• Authentication bypass
• CWE-672

CAYIN Technology｜CAYIN CMS-WS/CMS-SE - Missing Authentication

• CAYIN Technology CAYIN CMS-WS
• CAYIN Technology CAYIN CMS-SE
• Authentication bypass

Insecure PIN derivation mechanism in Admin By Request (ABR)

• Admin By Request (ABR)
• Broken access control
• Authentication bypass

BlogVault, MalCare and WP Remote 5.16 - 6.62 - Unauthenticated Site Takeover via Connection Key Recovery

• BlogVault Backup & Staging
• MalCare WordPress Security Plugin
• Authentication bypass

Amelia < 2.4.7 - Unauthenticated Notification Queue Dispatch

• Booking for Appointments and Events Calendar
• Authentication bypass

Unauthorized credential switching

• FreeBSD
• Authentication bypass

Apache Tomcat's DIGEST authenticator has an Authentication Bypass by Capture-replay vulnerability

• Authentication bypass

>=11.0.0-M1, <11.0.25 || >=10.1.0-M1, <10.1.58 || >=9.0.0.M1, <9.0.121 || >=8.5.0, <=8.5.100 || >=7.0.30, <=7.0.109 · fixed in 11.0.25, 10.1.58, 9.0.121

The Netty configuration distribution service (port 8283) of super-diamond-server <= 1.3.3 has no authentication mechanism.

• Authentication bypass

DWSurvey v6.14.0 is is vulnerable to authentication bypass via the '/api/dwsurvey/none/' and '/api/dwsurvey/up/**' parameters.

• Authentication bypass

An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via spoofed TCP FIN packets without validating the…

• Authentication bypass
• Race condition

An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via the SPC Connect Pro software accepts replayed…

• Authentication bypass

better-auth SSO before 1.6.27 Domain Ownership Authentication Bypass

• better-auth sso
• Authentication bypass

Spring Security DPoPProofJwtDecoderFactory vulnerable to DPoP Proof Replay

• Spring Security
• Authentication bypass

Internationalization Single Sign-On - Critical - Access bypass - SA-CONTRIB-2026-081

• Drupal Internationalization Single Sign-On
• Authentication bypass

PanKM - Critical - Unsupported - SA-CONTRIB-2026-083

• Drupal PanKM
• Authentication bypass

Disable Login Page - Moderately critical - Access bypass - SA-CONTRIB-2026-110

• Drupal Disable Login Page
• Authentication bypass
• CWE-20

Apache Tomcat: Authenticated WebSocket session survives end of HTTP session

• Apache Software Foundation Apache Tomcat
• Authentication bypass

Apache Tomcat: Principal lookup can fail open in some cases

• Apache Software Foundation Apache Tomcat
• Authentication bypass

TypeBot: Account takeover via brute-forceable 6-digit magic-link code

• baptisteArno typebot.io
• Authentication bypass
• Weak cryptography or TLS

Punk::Plugin::TOTP versions before 0.05 for Perl allow the second-factor attempt limit to be reset by replaying an earlier session cookie because the challenge route counts failures in the session

• Authentication bypass
• CWE-642

Missing authentication in NVIDIA NemoClaw

• NVIDIA NemoClaw
• Authentication bypass

Weak authentication in NVIDIA NemoClaw

• NVIDIA NemoClaw
• Authentication bypass

@arikusi/deepseek-mcp-server: Missing Authentication on Self-Hosted HTTP MCP Endpoint

• Authentication bypass

>=1.4.2, <1.8.0 · fixed in 1.8.0

Alluxio through 2.9.5 S3 REST Proxy Authentication Bypass via Unverified Request Signature

• alluxio
• Authentication bypass

AshAuthentication vulnerable to OAuth2/OIDC account takeover via email-based user matching

• Authentication bypass

>=0.1.0, <4.14.0 || >=5.0.0-rc.0, <5.0.0-rc.10 · fixed in 4.14.0, 5.0.0-rc.10

Improper authentication in NVIDIA Unified Fabric Manager Enterprise - GA and others

• NVIDIA Unified Fabric Manager Enterprise - GA
• NVIDIA Unified Fabric Manager Enterprise - LTS 2025
• Authentication bypass

djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch event-handler calls

• Broken access control
• Authentication bypass

<1.0.4 · fixed in 1.0.4

nextcloud-mcp-server: Unauthenticated `POST /webhooks/nextcloud` allows arbitrary vector data deletion when `WEBHOOK_SECRET` is unset ( default )

• Authentication bypass

<0.117.2 · fixed in 0.117.2

PraisonAI: Authentication fail-open in Recipe server allows unauthenticated access when API key or JWT auth is configured without a secret

• Authentication bypass

<4.6.58 · fixed in 4.6.58

PraisonAI: [Auth Bypass] PraisonAI async Jobs API (`/api/v1/runs`) has no authentication — unauthenticated job execution, result theft, cancel and delete

• Authentication bypass

<4.6.58 · fixed in 4.6.58

PraisonAI: [Auth Bypass] `praisonai serve agents --api-key` is silently ignored — agent-invocation routes (`POST /agents`, `POST /agents/{agent_name}`) run unauthenticated

• Authentication bypass

<4.6.58 · fixed in 4.6.58

PraisonAI serve agents --api-key is ignored, allowing unauthenticated remote agent execution

• Authentication bypass

>=4.6.34, <4.6.58 · fixed in 4.6.58

praisonaiagents: AgentServer declares auth_token but never enforces it on any route

• Authentication bypass
• Broken access control

<1.6.58 · fixed in 1.6.58

PraisonAI has an origin validation bypass in MCP HTTP Stream transport that allows browser-mediated unauthenticated tool execution on local MCP server

• Authentication bypass
• CWE-346

<4.6.58 · fixed in 4.6.58

liketrek TREK OIDC Service oidcService.ts findOrCreateUser improper authentication

• TREK
• Authentication bypass

WatchGuard Agent improper authentication allows unauthenticated remote code execution

• WatchGuard Agent
• Authentication bypass
• Weak cryptography or TLS

WatchGuard Agent path traversal allows unauthenticated remote code execution

• WatchGuard Agent
• Code injection
• Authentication bypass

liketrek TREK Pre-2FA mfa_token authService.ts loginUser improper authentication

• TREK
• Authentication bypass

Apache Hive: Unauthenticated authentication bypass in HiveServer2 HTTP SAML bearer-token validation allows impersonation of any Hive user

• Apache Software Foundation Apache Hive
• Authentication bypass
• CWE-305

Polkit authentication bypass in LACT

• ilya-zlobintsev LACT
• Authentication bypass

TYPO3-EXT-SA-2026-015: Insufficient Session Expiration in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)

• Authentication bypass

<3.0.6 · fixed in 3.0.6

SMS Password Authorization Bypass via Failed Attempt Counter

• Weidmueller Interface IE-SR-2TX-WL-4G-EU
• Weidmueller Interface IE-SR-2TX-WL-4G-US-V
• Authentication bypass

Purpose-limited JWT accepted as full bearer authentication in AshAuthentication

• Authentication bypass

>=3.10.5, <4.14.2 || >=5.0.0-rc.0, <5.0.0-rc.13 · fixed in 4.14.2, 5.0.0-rc.13

Missing authentication in FURUNO ELECTRIC CO., LTD. FA-50

• FURUNO ELECTRIC CO., LTD. FA-50
• Authentication bypass

Rocket.Chat Missing DDP Rate Limit on the sendForgotPasswordEmail Meteor Method

• RocketChat Rocket.Chat
• Authentication bypass
• CWE-204

WordPress WPLegalPages plugin <= 3.7.0 - Broken Authentication vulnerability

• WP Legal Pages WPLegalPages
• Authentication bypass

Faveo Helpdesk post-ticket-reply Endpoint FormController.php post_ticket_reply missing authentication

• Faveo Helpdesk
• Authentication bypass

CakePHP: Potential Authentication bypass with CookieAuthenticator

• cakephp authentication
• Authentication bypass
• Denial of service

Explicit organization scopes survive token refresh after membership ends

• hexpm
• Authentication bypass

joserfc claim-validation bypass via array-typed single-string claims (iss/sub/jti)

• authlib joserfc
• Authentication bypass
• CWE-345

RansomLook Login Endpoint Allows Timing-Based Username Enumeration and Unthrottled Authentication Attempts

• ransomlook
• Authentication bypass
• Denial of service

Apache Camel-platform-http-main: when JWT authentication was configured with a keystore but no issuer or audience, the iss and aud claims were never validated, so any unexpired token signed by a trusted key was accepted

• Authentication bypass

>=4.8.0, <4.22.0 · fixed in 4.22.0

rConfig Core 8.0.0 < 8.2.10 Unauthorized Admin Registration via web.php

• rconfig
• Authentication bypass
• CWE-1188

HCL Hive is affected by a missing rate limit

• HCLSoftware HCL Hive
• Authentication bypass

Authentication bypass between ZCC and client connector portal

• Zscaler Client Connector
• Authentication bypass