CWE-288: Authentication Bypass Using an Alternate Path or Channel
The product requires authentication, but the product has an alternate path or channel that does not require authentication.
A kind of CWE-306 Missing Authentication for Critical Functionality.
From the CWE List. © The MITRE Corporation.
Newest
- openclawOpenClaw < 2026.3.25 - Authorization Bypass in Microsoft Teams Feedback Invoke6.9 Medium
- openclawOpenClaw < 2026.3.25 - DM Pairing Bypass via Legacy Card Callbacks6.9 Medium
mppcrates.iompp has multiple payment bypass and griefing vulnerabilities9.3 Criticalmppxnpmmppx has multiple payment bypass and griefing vulnerabilities9.3 Critical- openclawOpenClaw < 2026.3.25 - Authorization Bypass in Group Reactions via requireMention Bypass5.3 Medium
- openclawOpenClaw < 2026.3.25 - Direct Message Policy Bypass via Verification Notices6.9 Medium
- moby, docker engine +1 moreMoby: AuthZ plugin bypass with oversized request body8.8 High
- buffalo inc. wi-fi router products, buffalo fs-m1266 firmware, fs-s1266 firmware +44 more +46 moreAuthentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker...8.7 High
- openclawOpenClaw < 2026.3.23 - Authentication Bypass via Local-Direct Requests in Canvas Gateway5.1 Medium
- gitlabAuthentication Bypass Using an Alternate Path or Channel in GitLab6.8 Medium
- nootheme jobica coreWordPress Jobica Core plugin <= 1.4.2 - Account Takeover vulnerability9.8 Critical
- themeum tutor lms proWordPress Tutor LMS Pro plugin <= 3.9.4 - Broken Authentication vulnerability8.1 High
- azzaroco ultimate membership proWordPress Ultimate Membership Pro plugin <= 13.7 - Account Takeover vulnerability8.1 High
- wasiliy strecker / contestgallery developer contest galleryWordPress Contest Gallery plugin <= 28.1.2.2 - Account Takeover vulnerability9.8 Critical
- thimpress learnpress – sepay paymentWordPress LearnPress – Sepay Payment plugin <= 4.0.0 - Broken Authentication vulnerability7.5 High
- dokan, inc. dokanWordPress Dokan plugin <= 4.2.4 - Broken Authentication vulnerability8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMitigation bypass in the Networking: HTTP component9.8 Critical
- blinkoBlinko: Low Privilege User Privilege Escalation - upsertUser Endpoint5.3 Medium
- go-vikunja vikunjaVikunja has a 2FA Bypass via Caldav Basic Auth6.9 Medium
- spring security, vmware spring boot +1 moreAuthentication Bypass under Actuator CloudFoundry endpoints8.2 High
- spring boot, vmware spring boot +1 moreAuthentication Bypass under Actuator Health groups paths8.2 High
- themepaste admin safety guardWordPress Admin Safety Guard plugin <= 1.2.6 - Broken Authentication vulnerability8.1 High
- openclawOpenClaw < 2026.2.26 - Authentication Bypass via Path Canonicalization Mismatch in /api/channels Gateway6.3 Medium
- google chromeUnsafe navigation in Navigation in Google Chrome on iOS prior to 146.0.7680.71 allowed a remote...5.3 Medium
- zitadelZITADEL SCIM Authentication Bypass via URL Encoding7.5 High
- gitlabAuthentication Bypass Using an Alternate Path or Channel in GitLab4.3 Medium
- micro research ltd. mr-gm5a-l1, mr-gm5l-s1 +1 moreAuthentication bypass issue exists in MR-GM5L-S1 and MR-GM5A-L1, which may allow an attacker to...9.3 Critical
- lantronix eds3000ps series, eds3008ps1ns firmware, eds3016ps1ns firmware +2 moreLantronix EDS3000PS Unverified Password Change5.1 Medium
- lantronix eds3000ps series, eds3008ps1ns firmware, eds3016ps1ns firmware +2 moreLantronix EDS3000PS OS Command Injection8.6 High
- lantronix eds3000ps series, eds3008ps1ns firmware, eds3016ps1ns firmware +2 moreLantronix EDS3000PS Authentication Bypass Using an Alternate Path or Channel9.3 Critical
- microsoft arc enabled servers - azure connected machine agent, arc enabled servers azure connected machine agent +1 moreArc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability7.8 High
- fortinet fortianalyzer, fortimanager, fortimanager cloud +2 moreAn authentication bypass using an alternate path or channel vulnerability in Fortinet...6.8 Medium
- designthemes wedesigntech ultimate booking addonWordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.1 - Account Takeover vulnerability8.8 High
- designthemes wedesigntech ultimate booking addonWordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.1 - Account Takeover vulnerability9.8 Critical
- ec-cube, ec-cube co.,ltd. 4.1 series, 4.2 series +1 more +3 moreEC-CUBE provided by EC-CUBE CO.,LTD. contains a multi-factor authentication (MFA) bypass...6.9 Medium
- drupal openid connect / oauth client, bojanz openid connect \/ oauth client +1 moreOpenID Connect / OAuth client - Moderately critical - Access bypass - SA-CONTRIB-2026-0266.5 Medium
- cisco secure firewall management center (fmc), secure firewall management center, secure firewall management center (fmc) and security cloud control (scc) firewall management +2 moreCisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability10.0 Critical
- openclawOpenClaw < 2026.3.2 - Authentication Bypass via Encoded Path in /api/channels Route8.3 High
- cyberlord92 all-in-one microsoft 365 & entra id / azure ad sso loginAll-in-One Microsoft 365 & Entra ID / Azure AD SSO Login <= 2.2.5 - Authentication Bypass9.8 Critical
- labredescefetrj wegiaWeGIA Vulnerable to Authentication Bypass via `extract($_REQUEST)`9.8 Critical
- seerrPlex-configured Seerr instances vulnerable to unauthenticated account registration via Jellyfin authentication endpoint7.3 High
- spipSPIP < 4.4.10 Authentication Bypass via PHP Type Juggling8.7 High
- pelco, inc. sarix professional ibp 3 series, sarix professional imp 3 series, sarix professional iwp 3 series +1 more +3 moreAuthentication Bypass Using an Alternate Path or Channel in Pelco, Inc. Sarix Pro 3 Series IP Cameras8.7 High
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership <= 5.1.2 - Authentication Bypass8.1 High
- gitlabAuthentication Bypass Using an Alternate Path or Channel in GitLab4.3 Medium
- arnabdotorg captchaCAPTCHA - Moderately critical - Access bypass - SA-CONTRIB-2026-0156.5 Medium
- gtsteffaniak filebrowser, filebrowser quantum +1 moreFileBrowser Quantum: Password Protection Not Enforced on Shared File Links7.1 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Networking: Cache component9.8 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Security component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMitigation bypass in the DOM: HTML Parser component9.8 Critical
- Show moreLoading…