Advisories · Weakness
CWE-291.
Every Advisory and CVE whose sources give the weakness CWE-291, newest first.
- CVSS 3.5 Low
JetBrains YouTrack: In JetBrains YouTrack before 2026.2.18634 iP spoofing via HTTP headers allowed forged…
- JetBrains YouTrack
- CWE-291
- CVSS 9.3 CriticalCritical · CVSS 9+
Tenda AC8 IPv6 check_is_ipv6 ip address for authentication
- Tenda AC8
- Authentication bypass
- CWE-291
- CVSS 7.4 High
OpenClaw Canvas Authentication Bypass Vulnerability
- CWE-291
<2026.2.19 · fixed in 2026.2.19
GHSA-vvjh-f6p9-5vcf · CVE-2026-3690 - CVSS 6.9 Medium
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.
- Yokogawa Electric Corporation FAST/TOOLS
- CWE-291
- CVSS 7.7 High
Insufficient Session Management in dormakaba access manager
- dormakaba Access Manager 92xx-k5
- dormakaba Access Manager 92xx-k7
- CWE-291
- CVSS 8.7 High
Vasion Print (formerly PrinterLogic) Insecure Access to Docker Instances WAN
- Vasion Print Virtual Appliance Host
- Vasion Print Application
- CWE-291
- CVSS 9.0 CriticalCritical · CVSS 9+
LevelOne WBR-6012: The LevelOne WBR-6012 router with firmware R0.40e6 has an authentication bypass…
- LevelOne WBR-6012
- CWE-291
- CVSS 4.2 Medium
QTS, QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Authentication bypass
- CWE-291
- CVSS 5.9 Medium
Symfony2 improper IP based access control
- CWE-291
>=2.0.0, <2.0.19 || >=2.1.0, <2.1.4 · fixed in 2.0.19, 2.1.4
GHSA-hx53-jchx-cr52 - CVSS 5.6 Medium
Uniway Router Administrative Web Interface reliance on ip address for authentication
- Uniway Router
- CWE-291
- CVSS 5.3 Medium
IBM Aspera Faspex security bypass
- IBM Aspera Faspex
- CWE-291
- CVSS 9.1 CriticalCritical · CVSS 9+
DJI Spark 01.00.0900 allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address pool.
- CWE-291