agentprime: CWE-308

CVE-2026-121531: Umami 2FA Policy route.ts single-factor authentication

Tue, 03 Nov 2026 21:45:07 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-90862: Web Transfer Module Multi-Factor Authentication Bypass in Progress WS_FTP Server

Thu, 29 Oct 2026 15:48:42 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-111884: phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Missing Current-Password Step-Up on E-mail Change Enables Account Takeover

Sat, 17 Oct 2026 18:46:10 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-57490: FileRise: WebDAV authentication bypasses TOTP/MFA entirely

Wed, 14 Oct 2026 20:20:23 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

Nginx UI: Authentication bypass: password login does not enforce a passkey-only second factor (2FA bypass)

Fri, 09 Oct 2026 17:08:15 GMT

github.com/0xJacky/Nginx-UI >=1.9.10-0.20250517140552-daee3ac7ade1, <1.9.10-0.20260728074558-95cd21b70814, fixed in 1.9.10-0.20260728074558-95cd21b70814. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-79763: Termix: MFA-critical operations accept the account password as a sole factor (regression of CVE-2026-45749)

Thu, 24 Sep 2026 16:06:16 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-58240: Missing Authentication check in SAP NetWeaver (Message Server)

Tue, 08 Sep 2026 00:10:55 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-85590: phpMyFAQ before 4.1.8 Authentication Bypass via Two-Factor Disable

Fri, 04 Sep 2026 11:29:56 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-67611: OpenEMR 8.2.0 OAuth2 Password Grant Authentication Bypass via SMART Configuration

Mon, 03 Aug 2026 16:04:34 GMT

CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-15616: Local MFA not enforced during SSO sign-in

Thu, 23 Jul 2026 15:43:03 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-56022: Webmin MFA bypass

Thu, 18 Jun 2026 16:11:22 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-45749: Termix's TOTP two-factor authentication can be disabled or bypassed using only the account password

Fri, 05 Jun 2026 18:05:11 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

Vantage6: 2FA can be circumvented with hacked email access

Fri, 05 Jun 2026 15:24:35 GMT

vantage6 <5.0.0, fixed in 5.0.0. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-33550: Alinto SOGo: SOGo before 5.12.5 does not renew the OTP if a user disables/enables it…

Sun, 22 Mar 2026 02:16:56 GMT

CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-50618: A Use of Single-factor Authentication vulnerability in the Authentication component of CIPPlanner CIPAce before 9.17 allows attackers to bypass a protection mechanism.

Wed, 11 Feb 2026 00:00:00 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Zitadel May Bypass Second Authentication Factor

Wed, 29 Oct 2025 22:21:27 GMT

github.com/zitadel/zitadel <1.80.0-v2.20.0.20251029091250-b284f8474eed, fixed in 1.80.0-v2.20.0.20251029091250-b284f8474eed. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-42959: Missing Authentication check after implementation of SAP Security Note 3007182 and 3537476

Tue, 08 Jul 2025 00:35:03 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-47652: Insecure Authentication Vulnerability

Fri, 04 Oct 2024 12:13:22 GMT

CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-25681: IBM Spectrum Virtualize security bypass

Tue, 05 Mar 2024 19:42:01 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-50934: IBM PowerSC improper authentication

Fri, 02 Feb 2024 01:08:46 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Pimcore Admin UI has Two Factor Authentication disabled for non admin security firewalls

Mon, 27 Nov 2023 23:23:02 GMT

pimcore/admin-ui-classic-bundle <1.2.2, fixed in 1.2.2. CVSS 8.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2023-34228: JetBrains TeamCity: In JetBrains TeamCity before 2023.05 authentication checks were missing…

Wed, 31 May 2023 13:03:17 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.