Authentication bypass.

HCL BigFix Service Management is affected by multiple security vulnerabilities.

• HCL Software HCL BigFix Service Management
• Authentication bypass

QTS

• QNAP Systems Inc. QTS
• Authentication bypass

UpsellWP < 2.2.10 - Unauthenticated Price Manipulation via Frequently Bought Together

• UpsellWP
• Authentication bypass

Improper authentication in Nextcloud Files Lock

• Nextcloud Files Lock
• Authentication bypass

NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID

• NASA CryptoLib
• Authentication bypass

Microsoft Fabric Elevation of Privilege Vulnerability

• Microsoft Fabric
• Authentication bypass

Azure AI Foundry Elevation of Privilege Vulnerability

• Microsoft Azure AI Foundry
• Authentication bypass

Microsoft Dataverse Elevation of Privilege Vulnerability

• Microsoft Dataverse
• Authentication bypass

Session id is not renewed on authentication in ash_authentication, allowing session fixation

• Authentication bypass

>=0.2.0, <4.15.0 || >=5.0.0-rc.0, <5.0.0-rc.14 · fixed in 4.15.0, 5.0.0-rc.14

Remember-me sign-in guard reads a session key that is never written in ash_authentication, allowing session replacement

• Authentication bypass

>=4.10.0, <4.15.0 || >=5.0.0-rc.0, <5.0.0-rc.14 · fixed in 4.15.0, 5.0.0-rc.14

WeGIA: Hardcoded Secret Key Backdoor — Mass Data Destruction via deletar_socios.php

• LabRedesCefetRJ WeGIA
• Authentication bypass
• Hard-coded credentials

WeGIA: Unauthenticated Auth Bypass + Local File Inclusion

• LabRedesCefetRJ WeGIA
• Path traversal
• Authentication bypass

libmongoc SCRAM client nonce-validation bypass

• MongoDB Inc. C Driver
• Authentication bypass

Steeltoe: Header-forwarded client cert lacks proof of private-key possession

• Authentication bypass
• Weak cryptography or TLS

<4.3.0 · fixed in 4.3.0

Speakr: CSRF bypass via unauthenticated API token parameter in csrf_exempt_for_api_tokens hook

• murtaza-nasir speakr
• Authentication bypass
• Cross-site request forgery (CSRF)

OpenReception: Unauthenticated WebAuthn passkey injection via `POST /api/auth/passkeys` leads to account takeover

• open-reception appointment-booking-software
• Authentication bypass

Obsidian Web MCP: Unauthenticated vault access: /oauth/authorize auto-approves without authenticating the user

• jimprosser obsidian-web-mcp
• Authentication bypass
• Hard-coded credentials

Keycloak-services: keycloak: replay protection bypass leads to unauthorized access via database driver semantics mismatch

• Keycloak
• Red Hat Build of Keycloak
• Authentication bypass

libp2p: PeerStore accepts attacker-signed PeerRecords for a victim peer ID and stores certified attacker addresses

• Authentication bypass
• CWE-345

>=8.0.0, <12.0.24 · fixed in 12.0.24

AsyncHttpClient doesn't verify SCRAM and Digest mutual-authentication responses

• Authentication bypass
• CWE-390

>=3.0.8, <3.0.12 · fixed in 3.0.12

Kestra: Unauthenticated management/actuator endpoints exposed on port 8081 (/env, /loggers) bypass API basic-auth

• Authentication bypass

<2.0.0 · fixed in 2.0.0

pgAdmin 4: Authentication bypass via a client-controlled identity header in Webserver authentication mode

• pgadmin.org pgAdmin 4
• Authentication bypass
• CWE-807

dynamic_oidc identities are not namespaced by connection in ash_authentication, allowing cross-connection account takeover

• Authentication bypass

>=5.0.0-rc.10, <5.0.0-rc.14 · fixed in 5.0.0-rc.14

Vendure affected by external-authentication account takeover: external login linked to a pre-existing account by email without verification

• Authentication bypass

<3.7.0 · fixed in 3.7.0

Opencast: Session fixation in login enables account takeover via crafted link

• opencast
• Authentication bypass

HUBzero CMS through 2.2.32 Session Fixation via Query-String Session Identifier

• hubzero-cms
• Authentication bypass

OAuth2 sign-in attached to an existing account without an email comparison in AshAuthentication

• Authentication bypass

>=4.14.0, <4.15.0 || >=5.0.0-rc.10, <5.0.0-rc.14 · fixed in 4.15.0, 5.0.0-rc.14

BMCtest exposes Ironic without authentication and TLS during the test

• openshift-metal3 bmctest
• Authentication bypass

SGLang through 0.5.19 Unauthenticated Route Poisoning via PUT endpoint

• sgl-project sglang
• Authentication bypass

WordPress Headless Single Sign On plugin <= 1.7.0 - Broken Authentication vulnerability

• miniOrange Headless Single Sign On
• Authentication bypass

WordPress EduAdmin Booking plugin <= 5.4.2 - Broken Authentication vulnerability

• Chris Åkerfeldt Wendel EduAdmin Booking
• Authentication bypass

Revoked session accepted because the session jti is never checked in AshAuthentication and AshAuthentication Phoenix

• Authentication bypass

>=4.9.1, <4.15.0 || >=5.0.0-rc.0, <5.0.0-rc.14 · fixed in 4.15.0, 5.0.0-rc.14

Sign-in token minted for one resource accepted by another in AshAuthentication

• Authentication bypass

>=3.10.5, <4.15.0 || >=5.0.0-rc.0, <5.0.0-rc.14 · fixed in 4.15.0, 5.0.0-rc.14

Replayable OAuth2 CSRF state retained after a failed callback in AshAuthentication

• Authentication bypass

>=0.6.0, <4.15.0 || >=5.0.0-rc.0, <5.0.0-rc.14 · fixed in 4.15.0, 5.0.0-rc.14

admin3 through 3.0.0 Session Not Invalidated When a User Account Is Disabled

• cjbi admin3
• Authentication bypass

Missing authentication in Dell OpenManage Server Administrator Managed Node (Patch) for Windows and others

• Dell OpenManage Server Administrator Managed Node (Patch) for Windows
• Dell OpenManage Server Administrator Managed Node for RHEL 8.10
• Authentication bypass

AVideo LoginControl PGP Second Factor Authentication Bypass

• WWBN AVideo
• Authentication bypass

Missing authentication in Dell OpenManage Server Administrator Managed Node (Patch) for Windows and others

• Dell OpenManage Server Administrator Managed Node (Patch) for Windows
• Dell OpenManage Server Administrator Managed Node for RHEL 8.10
• Authentication bypass

SAML Audience Confusion Allows Cross-SP Authentication

• SUSE github.com/neuvector/neuvector
• Authentication bypass

Flaw in Neuvector can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently

• SUSE neuvector
• Authentication bypass

Password Authentication Bypass Vulnerability in GX Works3 and Motion Control Setting

• Mitsubishi Electric Corporation GX Works3
• Mitsubishi Electric Corporation Motion Control Setting
• Authentication bypass

Authentication Vulnerability in NitroSense and PredatorSense Software

• Acer System Monitoring
• Authentication bypass

To Do List Member 1.4 - 1.6 - Unauthenticated Stored XSS, File Listing and Deletion via Unprotected Upload Handler

• To Do List Member
• Authentication bypass

Login with QR <= 1.0.0 - Unauthenticated Authentication Bypass via 'autologin_code' Parameter

• Login with QR
• Authentication bypass

The Pressengine <= 1.0 - Unauthenticated Authentication Bypass

• The Pressengine
• Authentication bypass

Private Feed Key <= 0.1 - Unauthenticated Authentication Bypass via 'feedkey' Parameter

• Private Feed Key
• Authentication bypass

Unauthenticated Access Vulnerability in NitroSense and PredatorSense Software

• Acer Agent Service
• Authentication bypass

djust has an authorization bypass on the WebSocket/SSE mount path

• Authentication bypass
• Broken access control

<1.0.7 · fixed in 1.0.7

djust: SSE sessions are not bound to the authenticated user; the client-chosen session_id is the sole authorization capability (session hijack)

• Authentication bypass
• Broken access control

<1.0.7 · fixed in 1.0.7

AVideo through 29.0 Rate Limit Bypass via Non-Atomic Counter Increment

• WWBN AVideo
• Authentication bypass

WWBN AVideo through 29.0 Authentication Bypass via Stored Password Hash

• WWBN AVideo
• Authentication bypass

TCH QRing R20_B006 Unauthenticated BLE Access

• TCH QRing
• Authentication bypass

UVdesk Community Skeleton through 1.1.8 Missing Authentication on the Installation Wizard

• uvdesk community-skeleton
• Authentication bypass

Docs before 5.4.1 Stale Collaboration Session After Access Revocation

• suitenumerique Docs
• Authentication bypass

OpenNHP through 1.0.2 Authentication Bypass via Fallback Verifier

• opennhp
• Authentication bypass

Cisco Identity Services Engine Certificate Reload Vulnerability

• Cisco Identity Services Engine Software
• Cisco ISE Passive Identity Connector
• Authentication bypass

ISE 802.1x Session Hijack Vulnerability

• Cisco Identity Services Engine Software
• Authentication bypass

Cisco Identity Services Engine Information Disclosure Vulnerability

• Cisco Identity Services Engine Software
• Cisco ISE Passive Identity Connector
• Authentication bypass

Cisco Identity Services Engine Event Injection Vulnerability

• Cisco Identity Services Engine Software
• Cisco ISE Passive Identity Connector
• Authentication bypass

Cisco Secure Firewall Management Center Software Information Disclosure and Disk Denial of Service Vulnerability

• Cisco Secure Firewall Management Center (FMC)
• Authentication bypass