Authentication bypass.

MISP HOTP Token Replay via Stale Session-Cached Counter Allows Second-Factor Authentication Bypass

• MISP
• Authentication bypass
• Race condition

Comelit 1456B gateway exposes remote configuration password via unauthenticated management interface

• Comelit Group S.p.A. 1456B Multi-User Gateway
• Authentication bypass

ZongXR SuperMarket Instant Buy InstantBuyController.java startBuy missing authentication

• ZongXR SuperMarket
• Authentication bypass

Missing proper authentication for critical APIs may allow sensitive information to be obtained or modified, or unauthorized operations to be performed

• Hitachi Industrial Equipment Systems Hitachi Coding Software Suite
• Authentication bypass

Genians, Inc. Genian NAC/ZTNA Improper Access Control on the Internal Interface

• Genians, Inc Genian NAC 5.0.75 LTS Release
• Genians, Inc Genian NAC 5.0.85 Release Stable
• Broken access control
• Authentication bypass

ZongXR SuperMarket Order Deletion Endpoint OrderController.java OrderController.deleteOrder missing authentication

• ZongXR SuperMarket
• Authentication bypass

ZongXR Supermarket save Endpoint OrderController.java OrderController.addOrder missing authentication

• ZongXR Supermarket
• Authentication bypass

fastify vulnerable to authentication bypass via malformed URLs reaching encapsulated not-found handlers

• Authentication bypass

>=4.0.0, <5.12.2 · fixed in 5.12.2

Russh: Configured server auth-attempt cap is not enforced in the USERAUTH_REQUEST runtime path

• Authentication bypass

<0.62.6 · fixed in 0.62.6

Kiteworks Email Protection Gateway improper authentication

• Kiteworks Email Protection Gateway
• Authentication bypass

Missing authentication on a Kiteworks appliance setup function

• Kiteworks Core
• Authentication bypass
• CWE-670

Kiteworks Secure Data Forms Exposure of Sensitive Information to an Unauthorized Actor

• Kiteworks Secure Data Forms
• Information disclosure
• Authentication bypass

Kiteworks Core Missing Authentication for Critical Function

• Kiteworks Core
• Authentication bypass
• CWE-670

Kiteworks Email Protection Gateway Improper Authentication

• Kiteworks Email Protection Gateway
• Authentication bypass

Kiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous Type

• Kiteworks Email Protection Gateway
• Authentication bypass
• Unrestricted file upload

Kiteworks Email Protection Gateway Uncontrolled Resource Consumption

• Kiteworks Email Protection Gateway
• Authentication bypass
• Denial of service

Kiteworks Secure Data Forms Missing Authentication for Critical Function

• Kiteworks Secure Data Forms
• Authentication bypass

Kiteworks Email Protection Gateway Improper Access Control

• Kiteworks Email Protection Gateway
• Authentication bypass

Taskcluster: Unauthenticated remote code execution in `web-server` via GraphQL `filter` argument (sift `$where`)

• taskcluster
• Code injection
• Privilege escalation

Soft Machine: Unauthenticated workspace API exposes arbitrary file read & directory exfiltration to any peer on the Fly private network

• Soft-Machine-io security
• Authentication bypass

PTZOptics Missing Authentication in Firmware Upload

• PTZOptics Move 4K 12X
• PTZOptics Move 4K 20X
• Authentication bypass

Undisclosed RCE in Zammad v6.3 and higher

• Zammad
• Authentication bypass

Authentication bypass in JetBrains YouTrack

• JetBrains YouTrack
• Authentication bypass

OpenSave before 2.4.0-beta.1 Authentication Bypass via Spoofed Relay Sender

• Liquid-co OpenSave
• Authentication bypass

LightLLM through 1.2.0 Missing Authentication on RL Control Routes

• ModelTC LightLLM
• Authentication bypass

@nestjs/platform-fastify: Path-scoped middleware bypass via absolute-form request targets

• Authentication bypass
• CWE-436

<11.2.4 || >=12.0.0, <12.0.2 · fixed in 11.2.4, 12.0.2

Missing Server-Side Authentication on REST API Endpoint in Trex Digital Manufacturing's Trex MES

• Trex Digital Smart Manufacturing Systems Inc. Trex MES
• Authentication bypass

WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.2 - Bypass vulnerability vulnerability

• miniOrange OAuth Single Sign On – SSO (OAuth Client)
• Authentication bypass

WordPress Paid Member Subscriptions plugin <= 3.0.9 - Bypass Vulnerability vulnerability

• Cozmoslabs Paid Member Subscriptions
• Authentication bypass

WordPress All In One WP Security & Firewall plugin <= 5.4.8 - Bypass Vulnerability vulnerability

• David Anderson / Team Updraft All In One WP Security & Firewall
• Authentication bypass

Apache WSS4J: UsernameToken replay protection bypassed by re-encoding the Nonce

• Apache Software Foundation Apache WSS4J
• Authentication bypass
• CWE-180

Apache WSS4J: SAML Sender-Vouches Authentication Bypass

• Apache Software Foundation Apache WSS4J
• Authentication bypass

Apache MINA SSHD: Repeated-publickey policy bypass on server

• Apache Software Foundation Apache MINA SSHD
• Authentication bypass

Apache MINA SSHD: LDAP password authentication ineffective

• Apache Software Foundation Apache MINA SSHD
• Authentication bypass

DigiWin｜EasyFlow .NET - Missing Authentication

• DigiWin EasyFlow .NET
• Authentication bypass

Pgpool Global Development Group Pgpool-II: Pgpool-II contains an incorrect implementation of an authentication algorithm…

• Pgpool Global Development Group Pgpool-II
• Authentication bypass

Missing authentication in baserCMS

• baserCMS
• Authentication bypass

FluentCart < 1.6.5 - Unauthenticated Guest Customer Account Takeover via Checkout Email

• FluentCart A New Era of eCommerce
• Authentication bypass

AiSOC 5.1.0 before 12.0.0 Missing Authentication on Realtime Service Internal Endpoints

• beenuar AiSOC
• Authentication bypass

AiSOC 9.0.0 before 12.0.0 Missing Authentication on Actions Service Response-Action API

• beenuar AiSOC
• Authentication bypass

Toptech TMS7 and TopHAT Session Fixation

• Toptech Systems TMS7
• Toptech Systems TopHAT
• Authentication bypass

Dockhand < 1.0.40 Unauthenticated Webhook Trigger via Git Webhook Endpoints

• Finsys dockhand
• Authentication bypass

Improper PAPI Packet handling leads to unauthorized access in HPE Networking Instant ON APs

• Hewlett Packard Enterprise (HPE) Instant ON
• Authentication bypass

Authentication Bypass Leading to Unauthorized Network Access in HPE Networking Instant ON API Endpoint

• Hewlett Packard Enterprise (HPE) Instant ON
• Authentication bypass

Authentication Bypass in a Management Protocol of HPE Networking Instant ON APs

• Hewlett Packard Enterprise (HPE) Instant ON
• Authentication bypass

Marmite through 0.4.2 Unauthenticated API Access via Development Server

• rochacbruno marmite
• Authentication bypass

Joomla! Core - [20260914] - Core - MFA Authentication Bypass through rememberme cookies in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3

• Joomla! Project Joomla! CMS
• Authentication bypass

OAuth credentials not disabled when application is disabled

• pretix
• Authentication bypass

Incorrect session validation for API-uploaded files

• pretix
• Authentication bypass

Customer session fixation

• pretix
• Authentication bypass

Apache DolphinScheduler: Unauthorized Disclosure of Data Source Information via /datasources/unauth-datasource

• Apache Software Foundation Apache DolphinScheduler
• Authentication bypass

Missing authentication in Hitachi Energy Asset Suite

• Hitachi Energy Asset Suite
• Authentication bypass

Missing authentication in Hitachi Energy Asset Suite

• Hitachi Energy Asset Suite
• Authentication bypass

Missing authentication in Hitachi Energy RTU500 series CMU firmware

• Hitachi Energy RTU500 series CMU firmware
• Authentication bypass

Missing Authentication in the local .NET backend of Progress Telerik Fiddler Everywhere

• Progress Software Progress® Telerik® Fiddler® Everywhere
• Authentication bypass

Rebuild Login Endpoint login improper authentication

• Rebuild
• Authentication bypass

MODSetter SurfSense circleback Endpoint circleback_webhook_route.py missing authentication

• MODSetter SurfSense
• Authentication bypass

Bitwarden Server 2025.6.0 < 2025.6.0 Authentication Bypass via SSO Identifier Truncation

• bitwarden server
• Authentication bypass

Trusted Domain Project OpenDMARC SPF Macro opendmarc_spf.c opendmarc_sp2_find_mailfrom_domain improper authentication

• Trusted Domain Project OpenDMARC
• Authentication bypass

Trusted Domain Project OpenDMARC Multi-Record Set opendmarc_policy_query_dmarc authentication spoofing

• Trusted Domain Project OpenDMARC
• Authentication bypass