# CWE-302.

Every Advisory and CVE whose sources give the weakness CWE-302, newest first.

## Records, newest first

- [Apache OFBiz: Janrain Engage Social Login Improperly Binds External Identities to Local Accounts](https://agentprime.io/advisories/CVE-2026-114277.md)
  `CVE-2026-114277` · CVE record: Apache Software Foundation Apache OFBiz · No CVSS score · Not analysed yet · Published 5 Nov 2026 · Tags: CWE-302
- [Microsoft Identity Web Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-80092.md)
  `CVE-2026-80092` · CVE record: Microsoft microsoft-identity-web · CVSS 5.3 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: CWE-302
- [Pre-Authentication Admin Bypass and Remote Code Execution in Nutanix Prism Gateway inside AOS](https://agentprime.io/advisories/CVE-2026-84731.md)
  `CVE-2026-84731` · CVE record: Nutanix Acropolis Operating System (AOS) · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Oct 2026 · Tags: Authentication bypass, CWE-302
- [kcp front-proxy does not strip inbound X-Remote-\* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace](https://agentprime.io/advisories/GHSA-c8w2-fgvx-vhv4.md)
  `GHSA-c8w2-fgvx-vhv4`, `CVE-2026-61682`, `GO-2026-6517` · Go `github.com/kcp-dev/kcp`: affected `<0.31.4 || >=0.32.0, <0.32.2`, fixed in `0.31.4`, `0.32.2` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Authentication bypass, CWE-302, CWE-348
- [Weblate: Unverified REST API email changes](https://agentprime.io/advisories/CVE-2026-77508.md)
  `CVE-2026-77508` · CVE record: WeblateOrg weblate · CVSS 3.5 Low · Not analysed yet · Published 26 Aug 2026 · Tags: CWE-302, CWE-841
- [Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access](https://agentprime.io/advisories/CVE-2026-13267.md)
  `CVE-2026-13267` · CVE record: IBM Security Verify Access and 3 more · CVSS 8.1 High · Not analysed yet · Published 12 Aug 2026 · Tags: CWE-302
- [Subscription Authentication Bypass via Unverified connectionParams.jwt](https://agentprime.io/advisories/CVE-2026-5423.md)
  `CVE-2026-5423` · CVE record: neo4j graphql · CVSS 8.2 High · Not analysed yet · Published 6 Aug 2026 · Tags: CWE-302
- [Microsoft Security Advisory CVE-2026-47303 – .NET Elevation of Privilege Vulnerability](https://agentprime.io/advisories/GHSA-2p3q-h3hg-jcqq.md)
  `GHSA-2p3q-h3hg-jcqq`, `BIT-dotnet-2026-47303`, `BIT-dotnet-sdk-2026-47303`, `CVE-2026-47303` · NuGet `Microsoft.AspNetCore.Authentication.Negotiate`: affected `>=8.0.0, <8.0.29 || >=9.0.0, <9.0.18 || >=10.0.0, <10.0.10`, fixed in `8.0.29`, `9.0.18`, `10.0.10` · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Other injection, Broken access control, CWE-302
- [Microsoft Security Advisory CVE-2026-50528 – .NET Security Feature Bypass Vulnerability](https://agentprime.io/advisories/GHSA-qvw7-jm5c-6hqw.md)
  `GHSA-qvw7-jm5c-6hqw`, `BIT-dotnet-2026-50528`, `BIT-dotnet-sdk-2026-50528`, `CVE-2026-50528` · NuGet `Microsoft.NetCore.App.Runtime.linux-arm` and 11 more: affected `>=8.0.0, <8.0.29 || >=9.0.0, <9.0.18 || >=10.0.0, <10.0.10`, fixed in `8.0.29`, `9.0.18`, `10.0.10` · CVSS 8.2 High · Not analysed yet · Published 20 Jul 2026 · Tags: Broken access control, CWE-302, CWE-636
- [DroneAware's Improper Account Activation in Registration and SSO Flows Leads to Account Takeover](https://agentprime.io/advisories/CVE-2026-48117.md)
  `CVE-2026-48117` · CVE record: fduflyer DroneAware-Node-Releases · CVSS 6.8 Medium · Not analysed yet · Published 17 Jun 2026 · Tags: Authentication bypass, CWE-302
- [Postiz has cross-tenant SUPERADMIN takeover via Skool-provider JWT forgery](https://agentprime.io/advisories/CVE-2026-48781.md)
  `CVE-2026-48781` · CVE record: gitroomhq postiz-app · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jun 2026 · Tags: Broken access control, CWE-302, CWE-345
- [NamelessMC: OAuth callback \`state\` is not validated, allowing login CSRF / session swapping](https://agentprime.io/advisories/CVE-2026-34460.md)
  `CVE-2026-34460` · CVE record: NamelessMC Nameless · CVSS 5.4 Medium · Not analysed yet · Published 2 Jun 2026 · Tags: Cross-site request forgery (CSRF), CWE-302, CWE-346
- [Dell ECS: Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0…](https://agentprime.io/advisories/CVE-2025-43992.md)
  `CVE-2025-43992` · CVE record: Dell ECS and 1 more · CVSS 5.6 Medium · Not analysed yet · Published 11 May 2026 · Tags: CWE-302
- [elabftw allows MFA bypass during login](https://agentprime.io/advisories/CVE-2026-28510.md)
  `CVE-2026-28510` · CVE record: elabftw elabftw · CVSS 5.9 Medium · Not analysed yet · Published 5 May 2026 · Tags: CWE-302
- [WeGIA has SQL Injection via Session Variable Override in DespachoControle.php](https://agentprime.io/advisories/CVE-2026-40285.md)
  `CVE-2026-40285` · CVE record: LabRedesCefetRJ WeGIA · CVSS 8.8 High · Not analysed yet · Published 17 Apr 2026 · Tags: SQL injection, CWE-302, CWE-473
- [kcp's cache server is accessible without authentication or authorization checks](https://agentprime.io/advisories/GHSA-3j3q-wp9x-585p.md)
  `GHSA-3j3q-wp9x-585p`, `CVE-2026-39429`, `GO-2026-5088` · Go `github.com/kcp-dev/kcp`: affected `<0.29.3 || >=0.30.0, <0.30.3`, fixed in `0.29.3`, `0.30.3` · CVSS 8.2 High · Not analysed yet · Published 8 Apr 2026 · Tags: Authentication bypass, Broken access control, CWE-302
- [ZITADEL's truncated opaque tokens are still valid](https://agentprime.io/advisories/GHSA-6mq3-xmgp-pjm5.md)
  `GHSA-6mq3-xmgp-pjm5`, `CVE-2026-27840`, `GO-2026-4573` · Go `github.com/zitadel/zitadel`: affected `<1.80.0-v2.20.0.20260216092519-feab8e1fa371 || >=2.31.0, <=2.71.19 || >=3.0.0, <3.4.7 || >=4.0.0, <4.11.0`, fixed in `1.80.0-v2.20.0.20260216092519-feab8e1fa371`, `3.4.7`, `4.11.0` · CVSS 4.3 Medium · Not analysed yet · Published 27 Feb 2026 · Tags: CWE-302
- [Socomec Easy Config System: An authentication bypass vulnerability exists in the User profile management…](https://agentprime.io/advisories/CVE-2024-45370.md)
  `CVE-2024-45370` · CVE record: Socomec Easy Config System · CVSS 7.3 High · Not analysed yet · Published 1 Dec 2025 · Tags: CWE-302
- [The Newtec Celox UHD (models: CELOXA504, CELOXA820) running firmware version celox-21.6.13 is vulnerable to an authentication bypass.](https://agentprime.io/advisories/CVE-2025-63210.md)
  `CVE-2025-63210` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Nov 2025 · Tags: Authentication bypass, CWE-302
- [2FA Expiry Bypass in Optimus Software's Brokerage Automation](https://agentprime.io/advisories/CVE-2025-8855.md)
  `CVE-2025-8855` · CVE record: Optimus Software Brokerage Automation · CVSS 8.1 High · Not analysed yet · Published 14 Nov 2025 · Tags: Broken access control, CWE-302, CWE-640
- [Azure DevOps Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-47158.md)
  `CVE-2025-47158` · CVE record: Microsoft Azure DevOps · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Jul 2025 · Tags: CWE-302
- [Cisco Identity Services Engine IP Filter Access Restriction for Admin Access Configuration Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-20285.md)
  `CVE-2025-20285` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.1 Medium · Not analysed yet · Published 16 Jul 2025 · Tags: CWE-302
- [Apache APISIX: improper validation of issuer from introspection discovery url in plugin openid-connect](https://agentprime.io/advisories/CVE-2025-46647.md)
  `CVE-2025-46647` · CVE record: Apache Software Foundation Apache APISIX · CVSS 5.3 Medium · Not analysed yet · Published 2 Jul 2025 · Tags: CWE-302
- [Azure DevOps Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-29813.md)
  `CVE-2025-29813` · CVE record: Microsoft Azure DevOps · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 May 2025 · Tags: CWE-302
- [Authentication Bypass Vulnerability in RupeeWeb trading platform](https://agentprime.io/advisories/CVE-2025-26522.md)
  `CVE-2025-26522` · CVE record: Rupeeseed Technology Ventures RupeeWeb · CVSS 7.5 High · Not analysed yet · Published 14 Feb 2025 · Tags: CWE-302
- [Authentication bypass in @sap/approuter](https://agentprime.io/advisories/GHSA-cpfx-964w-4jvp.md)
  `GHSA-cpfx-964w-4jvp`, `CVE-2025-24876` · npm `@sap/approuter`: affected `>=2.6.1, <16.7.2`, fixed in `16.7.2` · CVSS 8.1 High · Not analysed yet · Published 11 Feb 2025 · Tags: Open redirect, CWE-302, CWE-1287
- [OneIdentity Identity Manager: In One Identity Identity Manager 9.x before 9.3…](https://agentprime.io/advisories/CVE-2024-56404.md)
  `CVE-2024-56404` · CVE record: OneIdentity Identity Manager · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jan 2025 · Tags: CWE-302
- [Changing Information Technology CGFIDO - Authentication Bypass](https://agentprime.io/advisories/CVE-2024-12838.md)
  `CVE-2024-12838` · CVE record: Changing Information Technology CGFIDO · CVSS 8.8 High · Not analysed yet · Published 31 Dec 2024 · Tags: CWE-302
- [Apache HugeGraph-Server: Fixed JWT Token (Secret)](https://agentprime.io/advisories/GHSA-f697-gm3h-xrf9.md)
  `GHSA-f697-gm3h-xrf9`, `CVE-2024-43441` · Maven `org.apache.hugegraph:hugegraph-server`: affected `>=1.0.0, <1.5.0`, fixed in `1.5.0` · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.73 · Not analysed yet · Published 24 Dec 2024 · Tags: CWE-302
- [Protection Mechanism Failure in Digital Operation Services' WiFiBurada](https://agentprime.io/advisories/CVE-2024-8475.md)
  `CVE-2024-8475` · CVE record: Digital Operation Services WiFiBurada · CVSS 6.5 Medium · Not analysed yet · Published 17 Dec 2024 · Tags: CWE-302, CWE-799
- [Airlift.microsoft.com Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-49056.md)
  `CVE-2024-49056` · CVE record: Microsoft airlift.microsoft.com · CVSS 7.3 High · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-302
- [OTP Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-47086.md)
  `CVE-2024-47086` · CVE record: Apex Softcell LD DP Back Office · CVSS 8.7 High · Not analysed yet · Published 19 Sept 2024 · Tags: CWE-302
- [Ant Media Server does not properly authorize non-administrative API calls](https://agentprime.io/advisories/GHSA-g95v-3pj6-j433.md)
  `GHSA-g95v-3pj6-j433`, `CVE-2024-3462` · Maven `io.antmedia:ant-media-server`: affected `<=2.9.0`, no fixed version yet · CVSS 6.5 Medium · Not analysed yet · Published 14 May 2024 · Tags: CWE-302
- [Authentication Bypass by Assumed-Immutable Data in GitLab](https://agentprime.io/advisories/CVE-2024-4024.md)
  `CVE-2024-4024` · CVE record: GitLab GitLab · CVSS 7.3 High · Critical (CVSS 7+ and EPSS) · EPSS 0.15 · Not analysed yet · Published 25 Apr 2024 · Tags: CWE-302
- [Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data](https://agentprime.io/advisories/CVE-2024-22179.md)
  `CVE-2024-22179` · CVE record: Electrolink Compact DAB Transmitter and 4 more · CVSS 8.7 High · Not analysed yet · Published 18 Apr 2024 · Tags: CWE-302
- [Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data](https://agentprime.io/advisories/CVE-2024-3741.md)
  `CVE-2024-3741` · CVE record: Electrolink Compact DAB Transmitter and 4 more · CVSS 8.7 High · Not analysed yet · Published 18 Apr 2024 · Tags: CWE-302
- [TYPO3 vulnerable to Weak Authentication in Session Handling](https://agentprime.io/advisories/GHSA-3vmm-7h4j-69rm.md)
  `GHSA-3vmm-7h4j-69rm`, `BIT-typo3-2023-47127`, `CVE-2023-47127`, `PKSA-jp7z-h3vv-yr4s` · Packagist `typo3/cms-core`: affected `>=8.0.0, <8.7.55 || >=9.0.0, <9.5.44 || >=10.0.0, <10.4.41 || >=11.0.0, <11.5.33 || >=12.0.0, <12.4.8`, fixed in `8.7.55`, `9.5.44`, `10.4.41`, `11.5.33`, `12.4.8` · CVSS 4.2 Medium · Not analysed yet · Published 14 Nov 2023 · Tags: Authentication bypass, CWE-302
- [MFA bypass in Apereo CAS](https://agentprime.io/advisories/CVE-2023-4612.md)
  `CVE-2023-4612` · CVE record: Apereo Foundation CAS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Nov 2023 · Tags: CWE-302
- [Authentication Bypass in Exagate SYSGuard 3001](https://agentprime.io/advisories/CVE-2023-4669.md)
  `CVE-2023-4669` · CVE record: Exagate SYSGuard 3001 · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Sept 2023 · Tags: CWE-302
- [Click Studios Passwordstate API authentication bypass by assumed-immutable data](https://agentprime.io/advisories/CVE-2022-3875.md)
  `CVE-2022-3875` · CVE record: Click Studios Passwordstate and 1 more · CVSS 7.3 High · Not analysed yet · Published 19 Dec 2022 · Tags: CWE-302
- [TYPO3 CMS vulnerable to Weak Authentication in Frontend Login](https://agentprime.io/advisories/GHSA-jfp7-79g7-89rf.md)
  `GHSA-jfp7-79g7-89rf`, `BIT-typo3-2022-23501`, `CVE-2022-23501`, `PKSA-hf6f-qcwd-7279`, `PKSA-sy8t-czj6-2rjr` · Packagist `typo3/cms` and 1 more: affected `>=10.0.0, <10.4.33 || >=11.0.0, <11.5.20 || >=12.0.0, <12.1.1`, fixed in `10.4.33`, `11.5.20`, `12.1.1` · CVSS 5.9 Medium · Not analysed yet · Published 13 Dec 2022 · Tags: Authentication bypass, CWE-302
- [AliveCor Kardia App: CWE-302 Authentication Bypass by Assumed-Immutable Data in AliveCor Kardia App version…](https://agentprime.io/advisories/CVE-2022-40703.md)
  `CVE-2022-40703` · CVE record: AliveCor Kardia App · CVSS 5.2 Medium · Not analysed yet · Published 26 Oct 2022 · Tags: CWE-302
- [Linux Kernel LoadPin bypass via dm-verity table reload](https://agentprime.io/advisories/CVE-2022-2503.md)
  `CVE-2022-2503` · CVE record: Linux Kernel Linux Kernel · CVSS 6.9 Medium · Not analysed yet · Published 12 Aug 2022 · Tags: CWE-302
- [Yokogawa Electric Corporation CENTUM CS 3000: CAMS for HIS Server contained in the following Yokogawa Electric products improperly…](https://agentprime.io/advisories/CVE-2022-22729.md)
  `CVE-2022-22729` · CVE record: Yokogawa Electric Corporation CENTUM CS 3000 and 2 more · No CVSS score · Not analysed yet · Published 11 Mar 2022 · Tags: CWE-302
- [Cisco Secure Email and Web Manager Spam Quarantine Unauthorized Access Vulnerability](https://agentprime.io/advisories/CVE-2021-1561.md)
  `CVE-2021-1561` · CVE record: Cisco Cisco Content Security Management Appliance (SMA) · CVSS 5.4 Medium · Not analysed yet · Published 18 Aug 2021 · Tags: CWE-302
- [Cisco Unified Communications Manager Self Care Portal Authorization Bypass Vulnerability](https://agentprime.io/advisories/CVE-2021-1399.md)
  `CVE-2021-1399` · CVE record: Cisco Cisco Unified Communications Manager · CVSS 4.3 Medium · Not analysed yet · Published 8 Apr 2021 · Tags: CWE-302
- [OpenVPN Access Server: OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user…](https://agentprime.io/advisories/CVE-2020-15074.md)
  `CVE-2020-15074` · CVE record: OpenVPN Access Server · No CVSS score · Not analysed yet · Published 14 Jul 2020 · Tags: CWE-302
- [PHP FormMail Generator generates PHP code for standard web forms, and the code generated is vulnerable to authentication bypass](https://agentprime.io/advisories/CVE-2016-9482.md)
  `CVE-2016-9482` · CVE record: PHP FormMail Generator · No CVSS score · Not analysed yet · Published 13 Jul 2018 · Tags: CWE-302

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-302>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-302/>. Everything for agents: <https://agentprime.io/llms.txt>.