Advisories · Weakness
CWE-302.
Every Advisory and CVE whose sources give the weakness CWE-302, newest first.
-
Apache OFBiz: Janrain Engage Social Login Improperly Binds External Identities to Local Accounts
- Apache Software Foundation Apache OFBiz
- CWE-302
- CVSS 5.3 Medium
Microsoft Identity Web Elevation of Privilege Vulnerability
- microsoft-identity-web
- CWE-302
- CVSS 9.3 CriticalCritical · CVSS 9+
Pre-Authentication Admin Bypass and Remote Code Execution in Nutanix Prism Gateway inside AOS
- Nutanix Acropolis Operating System (AOS)
- Authentication bypass
- CWE-302
- CVSS 9.9 CriticalCritical · CVSS 9+
kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace
- Authentication bypass
- CWE-302
<0.31.4 || >=0.32.0, <0.32.2 · fixed in 0.31.4, 0.32.2
GHSA-c8w2-fgvx-vhv4 · CVE-2026-61682 - CVSS 3.5 Low
Weblate: Unverified REST API email changes
- weblate
- CWE-302
- CWE-841
- CVSS 8.1 High
Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
- IBM Security Verify Access
- IBM Verify Identity Access
- CWE-302
- CVSS 8.2 High
Subscription Authentication Bypass via Unverified connectionParams.jwt
- neo4j graphql
- CWE-302
- CVSS 8.8 High
Microsoft Security Advisory CVE-2026-47303 – .NET Elevation of Privilege Vulnerability
- Other injection
- Broken access control
>=8.0.0, <8.0.29 || >=9.0.0, <9.0.18 || >=10.0.0, <10.0.10 · fixed in 8.0.29, 9.0.18, 10.0.10
GHSA-2p3q-h3hg-jcqq · CVE-2026-47303 - CVSS 8.2 High
Microsoft Security Advisory CVE-2026-50528 – .NET Security Feature Bypass Vulnerability
- Broken access control
- CWE-302
>=8.0.0, <8.0.29 || >=9.0.0, <9.0.18 || >=10.0.0, <10.0.10 · fixed in 8.0.29, 9.0.18, 10.0.10
GHSA-qvw7-jm5c-6hqw · CVE-2026-50528 - CVSS 6.8 Medium
DroneAware's Improper Account Activation in Registration and SSO Flows Leads to Account Takeover
- fduflyer DroneAware-Node-Releases
- Authentication bypass
- CWE-302
- CVSS 9.9 CriticalCritical · CVSS 9+
Postiz has cross-tenant SUPERADMIN takeover via Skool-provider JWT forgery
- gitroomhq postiz-app
- Broken access control
- CWE-302
- CVSS 5.4 Medium
NamelessMC: OAuth callback `state` is not validated, allowing login CSRF / session swapping
- Nameless
- Cross-site request forgery (CSRF)
- CWE-302
- CVSS 5.6 Medium
Dell ECS: Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0…
- Dell ECS
- Dell ObjectScale
- CWE-302
- CVSS 5.9 Medium
elabftw allows MFA bypass during login
- elabftw
- CWE-302
- CVSS 8.8 High
WeGIA has SQL Injection via Session Variable Override in DespachoControle.php
- LabRedesCefetRJ WeGIA
- SQL injection
- CWE-302
- CVSS 8.2 High
kcp's cache server is accessible without authentication or authorization checks
- Authentication bypass
- Broken access control
<0.29.3 || >=0.30.0, <0.30.3 · fixed in 0.29.3, 0.30.3
GHSA-3j3q-wp9x-585p · CVE-2026-39429 - CVSS 4.3 Medium
ZITADEL's truncated opaque tokens are still valid
- CWE-302
<1.80.0-v2.20.0.20260216092519-feab8e1fa371 || >=2.31.0, <=2.71.19 || >=3.0.0, <3.4.7 || >=4.0.0, <4.11.0 · fixed in 1.80.0-v2.20.0.20260216092519-feab8e1fa371, 3.4.7, 4.11.0
GHSA-6mq3-xmgp-pjm5 · CVE-2026-27840 - CVSS 7.3 High
Socomec Easy Config System: An authentication bypass vulnerability exists in the User profile management…
- Socomec Easy Config System
- CWE-302
- CVSS 9.8 CriticalCritical · CVSS 9+
The Newtec Celox UHD (models: CELOXA504, CELOXA820) running firmware version celox-21.6.13 is vulnerable to an authentication bypass.
- Authentication bypass
- CWE-302
- CVSS 8.1 High
2FA Expiry Bypass in Optimus Software's Brokerage Automation
- Optimus Software Brokerage Automation
- Broken access control
- CWE-302
- CVSS 9.0 CriticalCritical · CVSS 9+
Azure DevOps Server Elevation of Privilege Vulnerability
- Microsoft Azure DevOps
- CWE-302
- CVSS 4.1 Medium
Cisco Identity Services Engine IP Filter Access Restriction for Admin Access Configuration Bypass Vulnerability
- Cisco Identity Services Engine Software
- CWE-302
- CVSS 5.3 Medium
Apache APISIX: improper validation of issuer from introspection discovery url in plugin openid-connect
- Apache Software Foundation Apache APISIX
- CWE-302
- CVSS 10.0 CriticalCritical · CVSS 9+
Azure DevOps Elevation of Privilege Vulnerability
- Microsoft Azure DevOps
- CWE-302
- CVSS 7.5 High
Authentication Bypass Vulnerability in RupeeWeb trading platform
- Rupeeseed Technology Ventures RupeeWeb
- CWE-302
- CVSS 8.1 High
Authentication bypass in @sap/approuter
- Open redirect
- CWE-302
>=2.6.1, <16.7.2 · fixed in 16.7.2
GHSA-cpfx-964w-4jvp · CVE-2025-24876 - CVSS 9.9 CriticalCritical · CVSS 9+
OneIdentity Identity Manager: In One Identity Identity Manager 9.x before 9.3…
- OneIdentity Identity Manager
- CWE-302
- CVSS 8.8 High
Changing Information Technology CGFIDO - Authentication Bypass
- Changing Information Technology CGFIDO
- CWE-302
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Apache HugeGraph-Server: Fixed JWT Token (Secret)
- CWE-302
>=1.0.0, <1.5.0 · fixed in 1.5.0
GHSA-f697-gm3h-xrf9 · CVE-2024-43441 - CVSS 6.5 Medium
Protection Mechanism Failure in Digital Operation Services' WiFiBurada
- Digital Operation Services WiFiBurada
- CWE-302
- CWE-799
- CVSS 7.3 High
Airlift.microsoft.com Elevation of Privilege Vulnerability
- airlift.microsoft.com
- CWE-302
- CVSS 8.7 High
OTP Bypass Vulnerability
- Apex Softcell LD DP Back Office
- CWE-302
- CVSS 6.5 Medium
Ant Media Server does not properly authorize non-administrative API calls
- CWE-302
<=2.9.0 · no fixed version yet
GHSA-g95v-3pj6-j433 · CVE-2024-3462 - CVSS 7.3 HighCritical · CVSS 7+ and EPSS
Authentication Bypass by Assumed-Immutable Data in GitLab
- GitLab
- CWE-302
- CVSS 8.7 High
Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data
- Electrolink Compact DAB Transmitter
- Electrolink Medium DAB Transmitter
- CWE-302
- CVSS 8.7 High
Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data
- Electrolink Compact DAB Transmitter
- Electrolink Medium DAB Transmitter
- CWE-302
- CVSS 4.2 Medium
TYPO3 vulnerable to Weak Authentication in Session Handling
- Authentication bypass
- CWE-302
>=8.0.0, <8.7.55 || >=9.0.0, <9.5.44 || >=10.0.0, <10.4.41 || >=11.0.0, <11.5.33 || >=12.0.0, <12.4.8 · fixed in 8.7.55, 9.5.44, 10.4.41, 11.5.33, 12.4.8
GHSA-3vmm-7h4j-69rm · CVE-2023-47127 - CVSS 9.8 CriticalCritical · CVSS 9+
MFA bypass in Apereo CAS
- Apereo Foundation CAS
- CWE-302
- CVSS 9.8 CriticalCritical · CVSS 9+
Authentication Bypass in Exagate SYSGuard 3001
- Exagate SYSGuard 3001
- CWE-302
- CVSS 7.3 High
Click Studios Passwordstate API authentication bypass by assumed-immutable data
- Click Studios Passwordstate
- Click Studios Passwordstate Browser Extension Chrome
- CWE-302
- CVSS 5.9 Medium
TYPO3 CMS vulnerable to Weak Authentication in Frontend Login
- Authentication bypass
- CWE-302
>=10.0.0, <10.4.33 || >=11.0.0, <11.5.20 || >=12.0.0, <12.1.1 · fixed in 10.4.33, 11.5.20, 12.1.1
GHSA-jfp7-79g7-89rf · CVE-2022-23501 - CVSS 5.2 Medium
AliveCor Kardia App: CWE-302 Authentication Bypass by Assumed-Immutable Data in AliveCor Kardia App version…
- AliveCor Kardia App
- CWE-302
- CVSS 6.9 Medium
Linux Kernel LoadPin bypass via dm-verity table reload
- Linux Kernel
- CWE-302
-
Yokogawa Electric Corporation CENTUM CS 3000: CAMS for HIS Server contained in the following Yokogawa Electric products improperly…
- Yokogawa Electric Corporation CENTUM CS 3000
- Yokogawa Electric Corporation CENTUM VP
- CWE-302
- CVSS 5.4 Medium
Cisco Secure Email and Web Manager Spam Quarantine Unauthorized Access Vulnerability
- Cisco Content Security Management Appliance (SMA)
- CWE-302
- CVSS 4.3 Medium
Cisco Unified Communications Manager Self Care Portal Authorization Bypass Vulnerability
- Cisco Unified Communications Manager
- CWE-302
-
OpenVPN Access Server: OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user…
- OpenVPN Access Server
- CWE-302
-
PHP FormMail Generator generates PHP code for standard web forms, and the code generated is vulnerable to authentication bypass
- PHP FormMail Generator
- CWE-302