Authentication bypass.

Authentication Bypass Vulnerabilities lead to Complete System Compromise in AOS-8

• Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
• Authentication bypass

Authentication Bypass Leading to Remote Code Execution in AOS-8

• Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
• Authentication bypass

Authentication Bypass in the SSH Daemon of AOS-8 leads to Complete System Compromise

• Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
• Authentication bypass

Authentication Bypass Leading to Remote Code Execution in AOS-8

• Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
• Authentication bypass

Authentication Bypass Leading to Remote Code Execution in AOS-10

• Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
• Authentication bypass

ABB Ability Edgenius | Missing Authentication in Edgenius AuthDB

• ABB Ability Edgenius
• Authentication bypass

Supabase Realtime: Expired JWTs with string exp are accepted by REST broadcast authorization

• supabase realtime
• Authentication bypass

Storybook dev server vulnerable to code injection from the local network

• Path traversal
• Code injection

>=8.0.0, <8.6.19 || >=9.0.0, <9.1.21 || >=10.0.0, <10.6.2 || >=11.0.0-alpha.0, <11.0.0-alpha.6 · fixed in 8.6.19, 9.1.21, 10.6.2, 11.0.0-alpha.6

Django REST framework: TokenProxy.delete() reports success and revokes nothing

• Authentication bypass
• CWE-390

>=3.12.0, <3.18.2 · fixed in 3.18.2

Lotus through 0.10.2 Improper Authentication via Event Ingestion API Key Prefix

• lotus
• Authentication bypass

WordPress SureCart plugin <= 4.9.5 - Broken Authentication vulnerability

• Brainstorm Force SureCart
• Authentication bypass

Royal MCP < 1.5.7 - Authentication Bypass via Preview Link Token

• Royal MCP
• Authentication bypass

NewType Infortech｜NT OneAPP - Authentication Bypass

• NewType Infortech NT OneAPP
• Authentication bypass

Authentication bypass in Roundcube Webmail

• Roundcube Webmail
• Authentication bypass

Traefik v3.7.0 before v3.7.14 mTLS Header Spoofing via Ingress-NGINX HTTP Router

• traefik
• Authentication bypass

Traefik before 2.11.58 and 3.7.14 Authentication Bypass via Negotiate Connection Pool

• traefik
• Authentication bypass

Traefik v3.7.0 before v3.7.14 Client CA Mix-up via auth-tls-secret Name Collision

• traefik
• Authentication bypass

Traefik v3.7.13 Authentication Bypass via ssl-passthrough Ingress HTTP Router

• traefik
• Authentication bypass

Traefik before v2.11.58 and v3.7.14 SNI Check Bypass via HTTP/2 Scheme

• traefik
• Authentication bypass

Email Verification / SMS Verification / OTP Verification - Critical - Access Bypass - SA-CONTRIB-2026-124

• Drupal Email Verification / SMS Verification / OTP Verification
• Authentication bypass

SAML SSO - Service Provider - Moderately critical - Insufficient replay protection - SA-CONTRIB-2026-150

• Drupal SAML SSO - Service Provider
• Authentication bypass

REST & JSON API Authentication for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2026-182

• REST & JSON API Authentication for Drupal
• Authentication bypass

Stop administrator login - Moderately critical - Access bypass - SA-CONTRIB-2026-183

• Drupal Stop administrator login
• Authentication bypass

Unauthenticated Biscuit Credential Disclosure via GET /enroll/status in Google OSS Agent Mesh (SAM)

• Google SAM
• Authentication bypass
• Hard-coded credentials

oretnom23 php-travel-agency-system Session session.php missing authentication

• oretnom23 php-travel-agency-system
• Authentication bypass

CVE-2026-82987

• Viewsonic vCast
• Authentication bypass

Vitest: Code injection via unauthenticated manual mock registration

• Code injection
• Authentication bypass

>=2.1.0-beta.7, <4.1.12 || >=5.0.0-beta.1, <5.0.3 · fixed in 4.1.12, 5.0.3

Keycloak-services: keycloak-services: required otp enrollment bypassed via update user locale required action ordering

• Red Hat Build of Keycloak
• Red Hat Single Sign-On 7
• Authentication bypass

Apache Traffic Server: tsmemcache plugin exposes the shared proxy cache over the network with no authentication

• Apache Software Foundation Apache Traffic Server
• Authentication bypass

Apache Pulsar Manager: Missing authentication and authorization and disclosure of the Pulsar admin credential; end of life

• Apache Software Foundation Apache Pulsar Manager
• Authentication bypass

MikroTik RouterOS 7.24.5 WebFig Session Token Replay Authentication Bypass

• MikroTik RouterOS
• Authentication bypass

ApostropheCMS: Missing Authentication in `cleanExport` Route

• Authentication bypass
• Broken access control

<3.7.1 · fixed in 3.7.1

MomoTommy file-management-system Files API FileController.php destroy missing authentication

• MomoTommy file-management-system
• Authentication bypass

D365 F&O MCP Server: Official Azure one-click deployment ships with authentication disabled by default, exposing proprietary X++ source over the public internet

• dynamics365ninja d365fo-mcp-server
• Authentication bypass
• CWE-1188

oretnom23 file-management-system-php AJAX ajax.php delete_folder missing authentication

• oretnom23 file-management-system-php
• Authentication bypass

Open Source Snort 3 Control Channel Socket Aribitrary Command Execution Vulnerability

• Cisco Open Source Snort3
• Authentication bypass

Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities

• Cisco Emergency Responder
• Cisco Unified Communications Manager
• Authentication bypass

Improper Token Revocation in WSO2 Identity Server Allows Unauthorized Access

• WSO2 Identity Server
• WSO2 Carbon OAuth
• Authentication bypass

Incomplete reCaptcha Implementation in Authentication Flows in WSO2 Identity Server Allows Brute Force Attacks

• WSO2 Identity Server
• Authentication bypass

dhikshitha29 Insurance-Management-System Plan Management Form AddNewPlan-inc.php missing authentication

• dhikshitha29 Insurance-Management-System
• Authentication bypass

Apache bRPC: Authentication bypass when a server sets ServerOptions.internal_port and ServerOptions.auth

• Apache Software Foundation Apache bRPC
• Authentication bypass

Apache bRPC: Missing Authentication for Streaming RPC Frames

• Apache Software Foundation Apache bRPC
• Authentication bypass

Apache bRPC: HTTP builtin request can mark a connection authenticated and bypass auth for later requests

• Apache Software Foundation Apache bRPC
• Authentication bypass

Apache IoTDB: Remote code execution and Unauthenticated path traversal in legacy pipe sendFile RPC

• Apache Software Foundation Apache IoTDB
• Authentication bypass

Apache IoTDB: Auth Bypass in pipeTransfer() interface

• Apache Software Foundation Apache IoTDB
• Authentication bypass

Contest Gallery < 34.0.1 - Unauthenticated Vote Restriction Bypass via Spoofable Client-IP and Forgeable Voter Identity

• Contest Gallery
• Authentication bypass

Cart Abandonment Recovery for WooCommerce < 2.2.0 - Unauthenticated Authentication Bypass via Unsigned Recovery Token

• Cart Abandonment Recovery for WooCommerce
• Authentication bypass

WholesaleX < 3.0.9 - Unauthenticated Account Activation and Administrator Approval Bypass

• WholesaleX
• Authentication bypass

miniOrange 2FA 6.2.9 - 6.3.0 - 2FA Bypass via Passkey Second-Factor Rebinding

• miniOrange 2FA
• Authentication bypass

Payment Gateway for Idram < 2.1.6 - Unauthenticated Payment Confirmation Forgery via Empty-Default Merchant Secret

• Payment Gateway for Idram
• Authentication bypass

Trigger.dev before 4.5.0 Missing Authentication in Dashboard Run Replay Action

• triggerdotdev trigger.dev
• Authentication bypass

Trigger.dev CLI 3.0.0 before 4.5.4 Missing Authentication in MCP Server

• trigger.dev cli-v3
• Authentication bypass

Trigger.dev through 4.7.6 Missing Authentication in Supervisor Workload API

• triggerdotdev trigger.dev
• Authentication bypass

IBM i Improper Authentication

• i
• Authentication bypass

Missing authentication in Oracle Corporation Oracle Essbase

• Oracle Corporation Oracle Essbase
• Authentication bypass

Missing authentication in Oracle Corporation Oracle Agile Product Lifecycle Management for Process

• Oracle Corporation Oracle Agile Product Lifecycle Management for Process
• Authentication bypass

Missing authentication in Oracle Corporation Oracle Agile Product Lifecycle Management for Process

• Oracle Corporation Oracle Agile Product Lifecycle Management for Process
• Authentication bypass

Missing authentication in Oracle Corporation Oracle Agile Product Lifecycle Management for Process

• Oracle Corporation Oracle Agile Product Lifecycle Management for Process
• Authentication bypass

Missing authentication in Oracle Corporation Oracle Business Intelligence Enterprise Edition

• Oracle Corporation Oracle Business Intelligence Enterprise Edition
• Authentication bypass

Missing authentication in Oracle Corporation Oracle Business Intelligence Enterprise Edition

• Oracle Corporation Oracle Business Intelligence Enterprise Edition
• Authentication bypass