CWE-286: Incorrect User Management
The product does not properly manage a user within its environment.
A kind of CWE-284 Improper Access Control.
From the CWE List. © The MITRE Corporation.
Newest
- bosch bsh elp (electronic platform) modules The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific... 8.1 High
- weintek cmt3092x firmware, easyweb +1 more Weintek cMT3092X Incorrect User Management 7.1 High
- openclaw OpenClaw < 2026.3.22 - Privilege Escalation via Self-Declared Scopes in Trusted-Proxy Control UI 8.7 High
- weblate Weblate has improper validation upon invitation acceptance 1.0 Low
- goauthentik authentik authentik deactivated service accounts can authenticate to OAuth 4.8 Medium
- summerpearlgroup vacation rental management platform Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 does not properly... 6.5 Medium
- phpmyfaq phpMyFAQ duplicate email registration allows multiple accounts with the same email 8.1 High
- rockwell automation factorytalk® linx, rockwellautomation factorytalk linx +1 more Rockwell Automation FactoryTalk® Linx Network Browser Security Bypass Vulnerability 8.4 High
- abb aspect-enterprise, matrix series, nexus series +2 more Authenticated Escalation to guest to root 9.5 Critical
- fortinet fortiweb An Incorrect User Management vulnerability [CWE-286] in FortiWeb version 7.6.2 and below, version... 5.6 Medium
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 more A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could... 7.3 High
- zoom workplace, zoom communications, inc workplace apps, zoom meeting software development kit +4 more +6 more Zoom Workplace Apps - Incorrect User Management 4.9 Medium
- gitlab Incorrect User Management in GitLab 4.4 Medium
- gitlab Incorrect User Management in GitLab 4.2 Medium
- ibm concert, concert software +1 more IBM Concert Software improper access controls 4.3 Medium
- canonical authd Authd allows attacker-controlled usernames to yield controllable UIDs 7.5 High
- cs-cart multivendor An issue discovered in CS-Cart MultiVendor 4.16.1 allows attackers to alter arbitrary user... 9.8 Critical
- nask ezd rp Users listing in EZD RP 7.1 High
- nask ezd rp Privilege Escalation in EZD RP 8.7 High
- hitachi energy foxman-un, unem +1 more A user/password reuse vulnerability exists in the FOXMAN-UN/UNEM application and server... 8.0 High
- ibm qradar siem, qradar security information and event manager +1 more IBM QRadar SIEM information disclosure 6.8 Medium
- osm n2vc Improper verification of a user input in Open Source MANO v7-v12 allows an authenticated attacker... 7.5 High
- portainer Portainer CE allows username enumeration through authentication response timing 5.3 Medium
- scalefusion ScaleFusion 10.5.2 does not properly limit users to the Edge application because file downloads... 4.6 Medium
- gitlab Improper User Management in GitLab 4.9 Medium
- gitlab Incorrect User Management in GitLab 5.4 Medium
- gitlab Incorrect User Management in GitLab 5.4 Medium
- cisco sd-wan vmanage, catalyst sd-wan manager +1 more A vulnerability in the command line interface (cli) management interface of Cisco SD-WAN vManage... 7.1 High
- nvidia bluefield 1, bluefield 2 ga, bluefield 2 lts +5 more +7 more NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit contains a vulnerability... 7.8 High
- gitlab Incorrect User Management in GitLab 8.2 High
- canon mf1127c firmware, i-sensys lbp621cw firmware, i-sensys lbp623cdw firmware +43 more +45 more Unintentional change of settings during initial registration of system administrators which uses... 5.9 Medium
- fortinet fortimanager An incorrect user management vulnerability [CWE-286] in the FortiManager version 6.4.6 and below... 6.0 Medium
- siemens sinema remote connect server A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The... 6.5 Medium
- codesys control for beaglebone sl, control for beckhoff cx9020 sl, control for empc-a/imx6 sl +9 more +11 more A bug in the CODESYS V3 CmpUserMgr component fails to correctly apply a security policy. 6.5 Medium
- philips mri 1.5t, mri 3t, mri 1.5t firmware +1 more +3 more Philips MRI 1.5T and 3T Improper Access Control 5.9 Medium
- dell powerscale onefs Dell PowerScale OneFS versions 8.1.0-9.1.0 contain an Incorrect User Management vulnerability... 7.3 High