Authentication bypass.

AshAuthentication brute_force_strategy does not limit sign-in and request actions defined on the resource

• Authentication bypass

>=5.0.0-rc.4, <5.0.0-rc.16 · fixed in 5.0.0-rc.16

WPPConnect Server through 2.10.74 Missing Authentication via /api/:session/chatwoot

• wppconnect-server
• Authentication bypass

Foxel through 2.4.0 Unauthenticated File Read via /api/fs/stream and /api/fs/thumb

• DrizzleTime Foxel
• Authentication bypass

Padloc through 4.3.0 Missing SCIM Token Validation via SCIM GET Requests

• padloc
• Authentication bypass

Authentication bypass vulnerability

• Zohocorp ManageEngine Key Manager Plus
• Authentication bypass

Two-factor authentication bypass

• Zohocorp ManageEngine Key Manager Plus
• Authentication bypass

Easy Digital Downloads <= 3.7.2 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Guest Checkout Email Binding at PayPal Capture

• smub Easy Digital Downloads – eCommerce Payments and Subscriptions made easy
• Authentication bypass

SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.9.5 - Unauthenticated Account Takeover

• SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments
• Authentication bypass

Authentication bypass in Johnson Controls EasyIO Neo EC and CW Edge Controller

• Johnson Controls EasyIO Neo EC and CW Edge Controller
• Authentication bypass

Improper authentication in Google Android

• Google Android
• Authentication bypass

Authentication bypass by spoofing in Dell Alienware Command Center (AWCC)

• Dell Alienware Command Center (AWCC)
• Authentication bypass

Nexbox A95X Amlogic S905X UART Unauthenticated Console Access

• Nexbox A95X
• Authentication bypass

Munshi Payment Bypass via Unauthenticated Webhook Endpoint

• Petpooja Munshi
• Authentication bypass
• CWE-345

Privilege escalation in downstream clusters via GlobalRole inheritedNamespacedRules

• SUSE Rancher
• Authentication bypass

Control Web Panel (CWP) < 1.29 Unauthenticated Loopback API Root Access

• Control Web Panel
• Authentication bypass

HotGo 2.8.4 through 2.15.1 Authentication Bypass via Client-Set SMS Verification Code

• bufanyun HotGo
• Authentication bypass

madong-admin-saas through 5.1.4 Missing Authentication via Platform Tenant Management API

• madong-code madong-admin-saas
• Authentication bypass

Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security Gateway

• Barracuda Networks Barracuda Email Security Gateway (ESG)
• Authentication bypass

Improper Token Renewal in Refresh Token Grant in Multiple WSO2 Products Allows Unauthorized Access to Blocked Accounts

• WSO2 API Manager
• WSO2 Universal Gateway
• Authentication bypass

mathurvishal CloudClassroom-PHP-Project Global Session session expiration

• mathurvishal CloudClassroom-PHP-Project
• Authentication bypass

Network-AI 5.14.0 before 5.15.5 Missing Authentication in A2AServer Task Operations

• Jovancoding Network-AI
• Authentication bypass

WAVLINK WN536AX6-A VPN Client List ioos sub_41a7c0 missing authentication

• WAVLINK WN536AX6-A
• Authentication bypass

Apache Wicket: The session id is renewed only on the first sign in, not on re-authentication

• Apache Software Foundation Apache Wicket
• Authentication bypass

Apache Wicket: WebSocket messages are processed against an HTTP session snapshot that survives invalidation

• Apache Software Foundation Apache Wicket
• Authentication bypass

Gitea OAuth2 account auto-linking takeover through the sign-up form

• Gitea
• Authentication bypass
• Broken access control

Presenton API missing authentication

• Presenton
• Authentication bypass

Wp Social Login and Register Social Counter <= 3.2.2 - Unauthenticated Authentication Bypass via Insufficient Email Verification in Social Login Callback

• roxnor Wp Social Login and Register Social Counter
• Authentication bypass

Uncanny Toolkit for LearnDash <= 3.8.2 - Unauthenticated Authentication Bypass via 'email' Parameter

• uncannyowl Uncanny Toolkit for LearnDash
• Authentication bypass

Welcart e-Commerce <= 2.12.5 - Account Takeover via Insecure Direct Object Reference to Unauthenticated User Input via 'member[ID]' Parameter

• uscnanbu Welcart e-Commerce
• Authentication bypass

UsersWP <= 1.2.78 - Unauthenticated Account Access via Predictable Dummy User Password Disclosed through Registration Form Hash

• stiofansisland UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP
• Authentication bypass

Security Optimizer < 1.6.9 - 2FA Bypass via Missing Rate Limiting

• Security Optimizer
• Authentication bypass

Unverified Sign in with Apple callback parameter can override verified ID token claims

• Authentication bypass
• CWE-349

>=0.1.25, <0.3.2 · fixed in 0.3.2

Coop sessions are not invalidated on password reset

• roostorg coop
• Authentication bypass

Coop has SAML cross-tenant authentication bypass

• roostorg coop
• Authentication bypass

Coop has a data leak via unauthenticated GraphQL Query.allOrgs

• roostorg coop
• Authentication bypass

Coop: Unauthenticated org provisioning via GraphQL Mutation.createOrg

• roostorg coop
• Authentication bypass
• CWE-799

TAKO AI Agent for Okta: Unauthenticated first-run administrator takeover

• fctr-id okta-ai-agent
• Authentication bypass

ActivityPub Undo handler can unfollow or remove reposts on behalf of other accounts

• TryGhost ActivityPub
• Authentication bypass
• Broken access control

MoLing: unauthenticated SSE and wildcard CORS expose tool sessions

• gojue moling
• Authentication bypass
• CWE-942

pgAdmin 4: A user's other sessions survive a change of their password

• pgadmin.org pgAdmin 4
• Authentication bypass

pgAdmin 4: An LDAP or Kerberos login is logged in to another account with the same username

• pgadmin.org pgAdmin 4
• Authentication bypass
• Broken access control

pgAdmin 4: The failed login limit can be bypassed, and Flask-Security's own views skip pgAdmin's login and password checks

• pgadmin.org pgAdmin 4
• Authentication bypass
• Broken access control

Secret Server Authentication Bypass via Unauthenticated Pin Code Reset and Brute Force

• Delinea Secret Server (On-Prem)
• Authentication bypass

MyTube: Unauthenticated Media Access via Static Routes Bypassing Login

• franklioxygen MyTube
• Authentication bypass

Authorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management cluster

• SUSE Rancher
• Authentication bypass

Cluster identity takeover in Fleet cluster registration allows access to another cluster's Fleet namespace

• SUSE Rancher
• Authentication bypass

SerpBear before 3.1.1 Missing Authentication via POST /api/notify

• towfiqi serpbear
• Authentication bypass

xiaozhi-esp32-server through 0.9.8 Authentication Bypass via Spoofed Device-ID Header

• xinnan-tech xiaozhi-esp32-server
• Authentication bypass

SOCFortress CoPilot: Authentication Bypass and Missing Authorization on Velociraptor Sigma Exclusion Rules (Detection Suppression)

• socfortress CoPilot
• Authentication bypass
• Broken access control

SOCFortress CoPilot: Unauthenticated Exposure of ScoutSuite Reports and Uploaded GCP Service-Account Key via Static Mount

• socfortress CoPilot
• Information disclosure
• Authentication bypass

SOCFortress CoPilot: Hardcoded Default Header Secret - Unauthenticated Active-Response Invocation and Alert Injection

• socfortress CoPilot
• Authentication bypass
• Hard-coded credentials

Vvveb: Authentication Bypass via PHP Array Injection leading to full Account Takeover

• givanz Vvveb
• Authentication bypass

Authentication bypass by spoofing in Dell OpenManage Enterprise

• Dell OpenManage Enterprise
• Authentication bypass

Missing authentication in Dell OpenManage Enterprise

• Dell OpenManage Enterprise
• Authentication bypass

ArcadeDB before 26.10.2 Improper Session Revocation in Wire-Protocol Connections

• ArcadeData arcadedb
• Authentication bypass

Traefik 3.7.0-ea.1 before 3.7.15 mTLS Bypass via Ingress NGINX Provider

• traefik
• Authentication bypass

Unlimited authentication attempts in Dell OpenManage Enterprise

• Dell OpenManage Enterprise
• Authentication bypass

OPNsense 26.1.6 through 26.7.7 Captive Portal Session Takeover via Forged ARP

• opnsense core
• Authentication bypass

Lago through 1.55.0 Authentication Bypass via acceptInvite GraphQL Mutation

• lago
• Authentication bypass

Missing authentication check on POST/PUT requests

• Delta Electronics Delta UFC500
• Authentication bypass