Authentication bypass.

mall4j through 4.0 Insufficient Session Expiration via Token Refresh

• gz-yami mall4j
• Authentication bypass

mall4j through 4.0 Improper Authentication Accepts Storefront Tokens on Admin API

• gz-yami mall4j
• Authentication bypass

mall4j through 4.0 Unauthenticated Shipment Tracking Disclosure via Order Number

• gz-yami mall4j
• Authentication bypass

mall4j through 4.0 Missing Authentication in Product Review Deletion

• gz-yami mall4j
• Authentication bypass

mall4j through 4.0 Missing Authentication in Password Update Endpoint

• gz-yami mall4j
• Authentication bypass

Nginx Proxy Manager through 2.16.0 Missing Brute-Force Protection

• NginxProxyManager nginx-proxy-manager
• Authentication bypass

LiteLLM Weak JWT Authentication via Email-Based User Lookup

• BerriAI litellm
• Authentication bypass

Bluehood: Missing authentication on Bluehood API routes when web auth is enabled

• dannymcc bluehood
• Authentication bypass
• Broken access control

Session Not Revoked Server-Side on Logout in Rancher

• SUSE Rancher
• Authentication bypass

Missing authentication in Ecommerce Template product cache revalidation allows unauthenticated denial of service

• MarcosCamara01 Ecommerce Template
• Authentication bypass

Netcore NR289-GE boa_temp process_request missing authentication

• Netcore NR289-GE
• Authentication bypass

Unauthenticated GitRepo Spec Mutation via Fleet Git Webhook Receiver

• SUSE Rancher
• Authentication bypass

Cross-tenant BundleDeployment and Secret disclosure via spoofed cluster labels during agent-initiated registration in Fleet

• SUSE Rancher
• Authentication bypass
• Broken access control

Netcore NR289-GE CGI Dispatcher boa improper authentication

• Netcore NR289-GE
• Authentication bypass

Improper Authentication in Kaon AR2140X

• Kaon AR2140
• Authentication bypass

Missing authentication for backup functionality in Kaon AR2140X

• Kaon AR2140
• Authentication bypass

Missing Authentication in mH-DEVELOPER

• F&F Filipowski mH-DEVELOPER
• Authentication bypass

Apache Roller: WSSE digest authentication headers can be replayed

• Apache Software Foundation Apache Roller
• Authentication bypass

Apache Roller: Anonymous setup action allows frontpage configuration tampering

• Apache Software Foundation Apache Roller
• Authentication bypass

Blacklist Manager for WooCommerce 1.3.0 - 2.3.1 - Blocked User Restriction Bypass via XML-RPC and Application Passwords

• Blacklist Manager
• Authentication bypass

notionnext-org NotionNext Authentication Guard cache.js cleanCache missing authentication

• NotionNext
• Authentication bypass

ООО НПО Ритм GEOritm REST API obj-groups missing authentication

• ООО НПО Ритм GEOritm
• Authentication bypass

Seetong T8108/T8108P/T8116/T8232 Debug Service improper authentication

• Seetong T8108
• Seetong T8108P
• Authentication bypass

Obot Quickstart Docker Deployment Unauthenticated Admin Access

• obot
• Authentication bypass

mathurvishal CloudClassroom-PHP-Project loginlinkstudent.php missing authentication

• mathurvishal CloudClassroom-PHP-Project
• Authentication bypass

Heym before 0.0.53 Authentication Bypass via Telegram Webhook

• heym
• Authentication bypass

Heym before 0.0.53 Slack Webhook Signature Verification Bypass

• heym
• Authentication bypass

Parse Server 9.0.0 Authentication Bypass via Unverified Provider Identity

• parse-community parse-server
• Authentication bypass

Client accepts unsolicited RawPublicKey server certificate type

• wolfSSL
• Authentication bypass

Client session cache reference poisoning allows resumption with wrong server

• wolfSSL
• Authentication bypass

coollabsio Coolify GitHub App Setup redirect missing authentication

• coollabsio Coolify
• Authentication bypass

miniOrange OTP Login, Verification and SMS Notifications <= 5.5.5 - Unauthenticated Authentication Bypass via 'mo_wp_login_intent' Parameter

• cyberlord92 miniOrange OTP Login, Verification and SMS Notifications
• Authentication bypass

Duplicate Advisory: INVITED users auto-promoted via SSO email match (invite-token bypass)

• Authentication bypass

<=3.1.4 · no fixed version yet

froxlor before 2.3.12 Authentication Bypass via Session Persistence

• froxlor
• Authentication bypass

Froxlor before 2.3.11 2FA Bypass via Namespace Confusion

• froxlor
• Authentication bypass

Budibase Server 3.41.0 before 3.45.0 Authentication Bypass via OIDC

• budibase server
• Authentication bypass

stoatchat before 0.15.5 MFA Brute Force via Insufficient Rate Limiting

• stoatchat
• Authentication bypass

grav-plugin-comments before 1.2.11 Unauthenticated Information Disclosure

• getgrav grav-plugin-comments
• Authentication bypass

grav-plugin-login 3.8.7 through 3.9.6 Two-Factor Authentication Bypass

• grav
• Authentication bypass

Capgo.app before 12.264.5 Upload Expiry Bypass via build upload

• Cap-go capgo.app
• Authentication bypass

Flowise through 3.1.4 Authentication Bypass via Email-Only SSO

• Flowise
• Authentication bypass

Flowise through 3.1.4 Authentication Bypass via SSO Email Match

• Flowise
• Authentication bypass

OpenClaw before 2026.8.1 Canvas Capability Revocation Bypass

• OpenClaw
• Authentication bypass

Flame through 2.4.0 Admin Token Insufficient Session Expiration

• pawelmalak flame
• Authentication bypass

Flame through 2.4.0 Brute-Force Attack via Login Endpoint

• pawelmalak flame
• Authentication bypass

SCBE-AETHERMOORE Unauthenticated AetherBrowser Ops API Exposes Operator Email Digests

• Authentication bypass

>=4.0.2, <4.2.1 · fixed in 4.2.1

Zoraxy 3.2.3 through 3.3.4 Client IP Spoofing via X-Forwarded-For IPv6

• tobychui zoraxy
• Authentication bypass

Knowns Unrestricted Path Traversal leading to out-of-bounds arbitrary .md file read, write, and deletion in MCP Docs + Memory Tools

• Path traversal
• Authentication bypass

<0.30.0 · fixed in 0.30.0

Unauthenticated Event Stream Exposure of Session Tokens in Navigator NCS

• Ciena Navigator NCS
• Authentication bypass

GLPI: Missing Rate Limiting on Login and TOTP Verification — Account Takeover via Brute Force

• glpi
• Authentication bypass

Zammad: Missing rate limiting allows password brute-forcing during two-factor login

• zammad
• Information disclosure
• Authentication bypass

Zammad: S/MIME signature verification allows forged sender impersonation

• zammad
• Authentication bypass
• Weak cryptography or TLS

Zammad: Account takeover via unverified email matching during SSO auto-link

• zammad
• Authentication bypass

X-SpringBoot through 6.0 Authentication Bypass via Login Code

• yzcheng90 X-SpringBoot
• Authentication bypass

X-SpringBoot through 6.0 Credential Exposure via Unauthenticated Endpoint

• yzcheng90 X-SpringBoot
• Authentication bypass

Zammad: Denial of Service via OTRS Import Controller

• zammad
• Authentication bypass
• Denial of service

Zammad: PGP signature spoofing via unvalidated verification return

• zammad
• Authentication bypass
• Weak cryptography or TLS

zhistaredu StarTraining api-docs Endpoint SecurityConfig.java missing authentication

• zhistaredu StarTraining
• Authentication bypass

zhistaredu StarTraining Druid Console index.html anonymous missing authentication

• zhistaredu StarTraining
• Authentication bypass

RabbitMQ: OAuth2 is_integer(Exp) guard skips token-expiry checks for float exp

• rabbitmq-server
• Authentication bypass