Authentication bypass.

Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Account Takeover via '_acf_objects' Object Identifier

• shabti Frontend Admin by DynamiApps
• Authentication bypass

HivePress Authentication <= 1.1.4 - Unauthenticated Authentication Bypass via 'access_token' Parameter to Facebook Authenticator

• HivePress Authentication
• Authentication bypass

Kernel memory disclosure and denial of service in MikroTik RouterOS btest service

• Mikrotik RouterOS
• Authentication bypass

Grav API Plugin before 1.0.20 Authentication Bypass via Host Header

• getgrav grav-plugin-api
• Authentication bypass

AVideo API Rate Limit Bypass via Bot User-Agent Header

• WWBN AVideo
• Authentication bypass

Lara Dashboard before 1.3.0 Missing Authentication in screenshot-login Route

• laradashboard
• Authentication bypass

AutoAgent Unauthenticated Remote Code Execution via the Sandbox TCP Command Server

• HKUDS AutoAgent
• Authentication bypass

Cua computer-server before 0.3.42 Unauthenticated RCE via Desktop Control

• trycua cua-computer-server
• Authentication bypass

Coolify through 4.3.17 OAuth Account Takeover via Unverified Email Matching

• coollabsio coolify
• Authentication bypass

RegistrationMagic 5.0.1.8 - 6.0.9.8 - Unauthenticated Authentication Bypass via Missing Facebook Token Audience Validation

• RegistrationMagic
• Authentication bypass

MStore API <= 4.20.0 - Unauthenticated Authentication Bypass via 'id_token' Parameter JWT Forgery

• inspireui MStore API – Create Native Android & iOS Apps On The Cloud
• Authentication bypass

TypeSpec: Unauthenticated Remote Shutdown of Spector Mock Server via POST /.admin/stop

• Authentication bypass

<0.1.0-alpha.27 · fixed in 0.1.0-alpha.27

OpenChoreo: cluster-gateway internal proxy performs no caller authentication and is not read-only — data-plane Secret disclosure and arbitrary Kubernetes mutation

• Privilege escalation
• Authentication bypass

<1.0.3 || >=1.1.0, <1.1.3 || >=1.2.0-rc.1, <1.2.0 · fixed in 1.0.3, 1.1.3, 1.2.0

ramon-victor freegpt-webui Backend Conversation API backend.py _conversation missing authentication

• ramon-victor freegpt-webui
• Authentication bypass

ramon-victor freegpt-webui Authentication Check __init__.py ChatCompletion.create missing authentication

• ramon-victor freegpt-webui
• Authentication bypass

jofpin trape Admin Endpoint sockets.py join_room missing authentication

• jofpin trape
• Authentication bypass

Frappe CRM: Authentication Bypass via Logged Invitation Keys in crm/api

• frappe crm
• Authentication bypass

jofpin trape Login Endpoint stats.py missing authentication

• jofpin trape
• Authentication bypass

Nango < 0.71.6 Missing Authentication RCE via runner tRPC server

• nango
• Authentication bypass

SolidInvoice's user invitation tokens have no expiry, allowing indefinite unauthorized company access via leaked or old invitation links

• SolidInvoice
• Authentication bypass

IBM i is Affected By An Improper Authentication Vulnerability in Network Authentication Service []

• i
• Authentication bypass

IBM i is Affected By Denial of Service Vulnerabilities in NFS [, ]

• i
• Authentication bypass

IBM i is Affected By Improper Authorization and Authentication Vulnerabilities in DDM / DRDA [, ]

• i
• Authentication bypass

FastChat Unauthenticated Worker Registration SSRF and Model Spoofing

• lm-sys FastChat
• Authentication bypass

TEN Framework 0.11.71 Unauthenticated File Read/Write via TMAN Designer

• ten-framework
• Authentication bypass

QAnything 2.0.0 Unauthenticated Cross-User File Disclosure

• netease-youdao QAnything
• Authentication bypass

xiaobei through 5.5.2 Unauthenticated Webhook Message Injection

• TeamWiseFlow xiaobei
• Authentication bypass

Aim 3.29.1 Remote Code Execution via Unauthenticated Method Dispatch

• aim
• Authentication bypass

Traefik v3.7 Authentication Bypass via TLS Option Conflict

• traefik
• Authentication bypass

Traefik before v2.11.55 and v3.0.0 through v3.7.10 Authentication Bypass via digestAuth

• traefik
• Authentication bypass

Missing authentication in ASUS Control Center Enterprise (ACC)

• ASUS Control Center Enterprise (ACC)
• Authentication bypass
• Hard-coded credentials

No authentication exists in the MQTT service of Trueview 6.0.23.4.

• Authentication bypass

PowerJob Worker version 5.1.2 (and likely earlier versions) exposes the /worker/deployContainer HTTP endpoint without authentication on the default transport port.

• Authentication bypass

PowerJob versions 4.x through 5.1.2 contain an unauthenticated remote code execution vulnerability in the /friend/process endpoint of the Server-Worker transport layer

• Authentication bypass

An issue in HubCore v.14.1.1 allows a remote attacker to escalate privileges via the HUBCOREID session cookie handling component.

• Authentication bypass

Microsoft Entra ID Elevation of Privilege Vulnerability

• Microsoft Entra
• Authentication bypass

Azure AI Language Elevation of Privilege Vulnerability

• Microsoft Azure AI Language Authoring
• Authentication bypass

MOOS core-moos through 10.4.0 MOOSDB Message Source Spoofing via Wire Identity

• themoos core-moos
• Authentication bypass

MOOS core-moos through 10.4.0 MOOSDB HTTP Server Unauthenticated Variable Write

• themoos core-moos
• Authentication bypass

MOOS core-moos through 10.4.0 Missing Authentication for MOOSDB Publish, Subscribe and DB_CLEAR

• themoos core-moos
• Authentication bypass

SiYuan: Localhost-trust admin bypass on auth-code-gated endpoints, with potential remote reachability via the fixed-port proxy

• Authentication bypass

<0.0.0-20260723031701-9c16e9851f0b · fixed in 0.0.0-20260723031701-9c16e9851f0b

SiYuan: Anonymous publish-password authentication bypass via getHeadingChildrenDOM / getHeading*Transaction / getBacklinkDoc (publish mode)

• Authentication bypass

<0.0.0-20260721020826-2d069dce84a2 · fixed in 0.0.0-20260721020826-2d069dce84a2

Claude Code Templates: Unauthenticated OS command injection (RCE) in Claude Code Studio server (--studio)

• Command injection
• Authentication bypass

<1.29.4 · fixed in 1.29.4

WordPress Really Simple SSL plugin <= 9.8.0 - 2FA Bypass vulnerability

• Really Simple Plugins Really Simple SSL
• Authentication bypass

WordPress FluentBooking Pro plugin <= 2.2.1 - Bypass Vulnerability vulnerability

• WP Manage Ninja FluentBooking Pro
• Authentication bypass

WordPress Pre-Orders for WooCommerce plugin <= 2.3 - Bypass Vulnerability vulnerability

• brightvesseldev Pre-Orders for WooCommerce
• Authentication bypass

Session Fixation in MISP CustomAuth Authentication Allows Session Hijacking

• misp
• Authentication bypass

ColdFusion | Improper Authentication (CWE-287)

• Adobe ColdFusion 2025
• Adobe ColdFusion 2023
• Authentication bypass

Missing Rate Limiting in Email OTP Verification Allows Brute-Force Authentication Bypass

• misp
• Authentication bypass

Rancher: SAML Assertion Replay

• SUSE Rancher
• Authentication bypass

Improper certificate validation in Eclipse Foundation Eclipse Arrowhead

• Eclipse Foundation Eclipse Arrowhead
• Authentication bypass
• Weak cryptography or TLS

NSEC wraparound detection trusted an unvalidated SOA record

• Authentication bypass

>=0.26.0, <0.26.2 · fixed in 0.26.2

NSEC3 owner names not checked against the zone in DNSSEC validation (hickory-proto)

• Authentication bypass

>=0.0.0-0, <0.26.0-beta.1 · fixed in 0.26.0-beta.1

Mandatory MFA bypass before enrollment

• SEPPmail AG SEPPmail Secure Email Gateway (SEG)
• Authentication bypass

A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to administrator level on the underlying Windows host, granting thems…

• Hitachi Energy MicroSCADA SYS600
• Authentication bypass

A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read and modify application objects without being authenticated t…

• Hitachi Energy MicroSCADA SYS600
• Authentication bypass

OpenChoreo: Unauthenticated build/workflow trigger via git-provider confusion (webhook signature bypass)

• Authentication bypass
• CWE-345

<1.0.3 || >=1.1.0, <1.1.3 || >=1.2.0-rc.1, <1.2.0-rc.2 · fixed in 1.0.3, 1.1.3, 1.2.0-rc.2

OpenChoreo: Unauthenticated access to data-plane operations via OpenChoreo cluster-gateway management APIs

• Authentication bypass
• Information disclosure

<1.0.2 || >=1.1.0, <1.1.2 · fixed in 1.0.2, 1.1.2

Centrifugo: Client-forgeable headers emulation lets any client spoof headers forwarded to proxy backends

• Authentication bypass

<6.9.0 · fixed in 6.9.0

Grav: 2FA Bypass via 'login.regenerate2FASecret' - Secret Rotation During Pending Challenge

• Authentication bypass
• Broken access control

<2.0.4 · fixed in 2.0.4