CWE-287: Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Also known as authentification, AuthN, AuthC.
A kind of CWE-284 Improper Access Control.
From the CWE List. © The MITRE Corporation.
Newest
- joomla joomla\!, joomla! project cms +1 moreJoomla! Core - [20260511] - MFA Authentication Bypass8.2 High
- joomla joomla\!, joomla! project cms +1 moreJoomla! Core - [20260512] - MFA Authentication Bypass8.2 High
- besen bs20 ev charging stationBesen BS20 EV Charging Station BLE/WiFi authentication replay2.3 Low
- No product listedJeecgBoot OpenAPI Endpoint call improper authentication6.3 Medium
- itzcrazykns vaneItzCrazyKns Vane API route.ts missing authentication6.3 Medium
- microsoft azure resource managerAzure Resource Manager Elevation of Privilege Vulnerability10.0 Critical
- bestpractical rtRT: LDAP authentication bypass via empty password8.1 High
- baptistearno typebot.ioTypeBot: WhatsApp Webhook Endpoint Missing Signature Verification6.5 Medium
- flask-middleware flask-security-tooFlask-Security-Too OAuth reauthentication freshness bypass via cross- user OAuth identity acceptance5.3 Medium
- lizardbyte sunshineSunshine: Authentication bypass via improper client certificate validation9.8 Critical
- imagemagickImageMagick: Heap Buffer Over-Read in distributed pixel cache server5.7 Medium
- netatalkAuthentication bypass via admin auth user6.4 Medium
- goauthentik authentikauthentik: SAML NameID XML Comment Injection Enables Authentication Bypass via Identifier Truncation8.7 High
- esri arcgis serverImproper Authentication issue in ArcGIS Server5.3 Medium
- mispMISP OIDC authentication bypass via automatic email-based account linking under insecure IdP configurations6.0 Medium
- beycanpress account switcherAccount Switcher <= 1.0.2 - Authenticated (Subscriber+) Authentication Bypass to Privilege Escalation8.8 High
github.com/Kuadrant/mcp-gatewayGoMCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin "router-key" / "mcp-init-host" path9.3 Critical- apache ofbizApache OFBiz: Authentication Bypass via Password-Change Logic Flaw Leading to RCE9.8 Critical
- apache ofbizApache OFBiz: Cookie Manipulation Allows Authenticated JWT Forgery and Account Impersonation5.3 Medium
- No product listedAn authentication bypass vulnerability exists in the embedded HTTP server of Panabit PAP-XM320 up...9.8 Critical
- jwt ruby-jwt`jwt` (Ruby gem) - empty-key HMAC bypass9.1 Critical
- microsoft azure local, azure resource manager +1 moreAzure Local Disconnected Operations (ALDO) Elevation of Privilege Vulnerability10.0 Critical
edumfaPyPIeduMFA Passkeys: missing expiration flag may allow replay attacks and reuse of old challenges8.7 High- sanluan publiccmsSanluan PublicCMS Trade Address Query TradeAddressListDirective.java execute missing authentication6.9 Medium
- avideoAVideo - Arbitrary User Session Hijacking via Meet Plugin uploadRecordedVideo Endpoint9.2 Critical
- better-authbetter-auth before 1.6.2 OAuth State Validation Bypass6.0 Medium
- m615926 receive notifications after form submitting – form notify for any formsReceive Notifications After Form Submitting – Form Notify for Any Forms <= 1.1.10 - Unauthenticated Authentication Bypass via LINE OAuth Callback9.8 Critical
github.com/slack-go/slackGoslack-go `SecretsVerifier` accepts empty signing secret without precondition4.8 Medium- openclaw crabboxCrabbox < v0.12.0 Authentication Bypass via Header Spoofing8.7 High
- cisco catalyst sd-wan, catalyst sd-wan manager, catalyst sd-wan controller +2 more +4 moreCisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability10.0 Critical
- burstbv burst statistics – privacy-friendly wordpress analytics (google analytics alternative)Burst Statistics 3.4.0 - 3.4.1.1 - Authentication Bypass to Admin Account Takeover9.8 Critical
- hoppscotchhoppscotch: Unauthenticated Onboarding Config Disclosure via Empty Recovery Token7.5 High
- grafana, grafana oss +1 moreDashboard Import Overwrites ACL — Editor Privilege Escalation to Dashboard Admin7.1 High
- th30d4y openlearnxOpenLearnX: Critical Authentication Bypass via JWT Signature Verification Disabled Leading to Account Takeover6.9 Medium
- churchcrm crmChurchCRM: Incomplete fix for CVE-2026-40582: public API login still bypasses 2FA and account lockout in ChurchCRM 7.2.29.6 Critical
- espressif arduino-esp32arduino-esp32: Digest authentication URI mismatch bypass in WebServer allows cross-resource replay attack7.5 High
- smp46 pingvin-share-xPingvin Share X: TOTP Authentication Bypass via Password-only Login9.1 Critical
- microsoft azure sdk for javaAzure SDK for Java Security Feature Bypass Vulnerability9.1 Critical
- apache tomcatApache Tomcat: Digest authenticator will authenticate any unknown user9.8 Critical
- inkeep agentsinkeep agents runAuth Middleware runAuth.ts createDevContext authentication bypass6.9 Medium
- socfortress copilotSOCFortress CoPilot: Hardcoded JWT secret allows unauthenticated full admin compromise and lateral movement into all integrated SOC tools10.0 Critical
- openclawOpenClaw bluebubbles Webhook monitor.ts handleBlueBubblesWebhookRequest improper authentication6.9 Medium
- industrial application software ias canias erpIndustrial Application Software IAS Canias ERP Login RMI improper authentication6.9 Medium
- industrial application software ias canias erpIndustrial Application Software IAS Canias ERP Java RMI Session Management iasServerRemoteInterface.doAction improper authentication6.9 Medium
- industrial application software ias canias erpIndustrial Application Software IAS Canias ERP RMI doAction improper authentication6.9 Medium
- ugreen cm933UGREEN CM933 Administrative missing authentication5.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: LDAP Empty Password Authentication Bypass9.1 Critical
- open-telemetry opentelemetry-collector-contrib, opentelemetry collector contrib +1 moreazureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replay8.1 High
- nearform fast-jwtfast-jwt: Empty HMAC secret accepted via async key resolver - JWT auth bypass9.1 Critical
- picotronica e-clinic healthcare system echsPicoTronica e-Clinic Healthcare System ECHS API Endpoint patient-records missing authentication6.9 Medium
- Show moreLoading…