CWE-290: Authentication Bypass by Spoofing
This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.
A kind of CWE-1390 Weak Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- docker engine, engine overlay network driver, moby overlay network driver +2 moreBlind VXLAN injection into encrypted overlay networks from cluster peer6.9 Medium
- hcaptcha for wpWordPress hCaptcha for WP plugin <= 5.3.0 - Bypass Vulnerability vulnerability5.3 Medium
- liquid-co opensaveOpenSave before 2.4.0-beta.1 Authentication Bypass via Spoofed Relay Sender6.3 Medium
- cyberlord92 oauth single sign on – sso (oauth client)WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.2 - Bypass vulnerability vulnerability9.8 Critical
- cozmoslabs paid member subscriptionsWordPress Paid Member Subscriptions plugin <= 3.0.9 - Bypass Vulnerability vulnerability5.3 Medium
- all in one wp security & firewall team in one wp security & firewall, david anderson / team updraft all in one wp security & firewall +1 moreWordPress All In One WP Security & Firewall plugin <= 5.4.8 - Bypass Vulnerability vulnerability4.2 Medium
- apache wss4jApache WSS4J: UsernameToken replay protection bypassed by re-encoding the Nonce4.8 Medium
- trusted domain project opendmarcTrusted Domain Project OpenDMARC Multi-Record Set opendmarc_policy_query_dmarc authentication spoofing6.9 Medium
- suse rancher, rancher fleet +1 moreCross-tenant BundleDeployment and Secret disclosure via spoofed cluster labels during agent-initiated registration in Fleet7.1 High
- fedora, red hat enterprise linux 10, enterprise linux 9 +2 morexdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape8.7 High
- tobychui zoraxyZoraxy 3.2.3 through 3.3.4 Client IP Spoofing via X-Forwarded-For IPv69.1 Critical
- zammadZammad: S/MIME signature verification allows forged sender impersonation7.1 High
- red hat ansible automation platform 2, ansible automation platform 2.6 for rhel 9, ansible automation platform 2.7 +2 moreAap-gateway: aap-gateway: authorization bypass via workload identity token forgery6.8 Medium
- wedevs wp user frontendWordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability5.3 Medium
- wedevs wp user frontendWordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability6.5 Medium
- webfactory captcha codeWordPress Captcha Code plugin <= 3.32 - Bypass Vulnerability vulnerability4.8 Medium
- shahjada premium packagesPremium Packages < 7.2.1 - Unauthenticated PayPal Webhook Signature Verification Bypass5.3 Medium
- openeye apex network video recorder (nvr)OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 trusts an X-Forwarded-For header...5.3 Medium
- No product listedpH7Software pH7Builder (pH7 Social Dating CMS) through 18.2.0 resolves the client IP address in...6.5 Medium
- laurent22 joplinJoplin: SAML SSO account takeover via email-based account linking (missing is_external check in ssoLogin)7.4 High
- warp-tech warpgateWarpgate: x-warpgate-username Header Not Stripped from Client Requests Enables Identity Spoofing to WebSocket Backend Targets4.9 Medium
- fabiolb fabioFabio - Incomplete fix for CVE-2025-48865: operator-configured trust headers (clientip/tls/requestid) still strippable via the Connection header5.8 Medium
- mailu helm-charts, mailu +1 moreMailu: Authentication bypass in header-based proxy authentication via spoofable `X-Forwarded-By` trust9.8 Critical
- kcp-dev kcpkcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace9.9 Critical
- red hat data grid 8, fuse 7, jboss enterprise application platform 7 +6 more +8 moreWildfly-elytron-realm-token: parameter injection in eap's elytron oauth24.2 Medium
- microsoft fabricMicrosoft Fabric Elevation of Privilege Vulnerability10.0 Critical
- microsoft dataverseMicrosoft Dataverse Elevation of Privilege Vulnerability9.0 Critical
- team-alembic ash authenticationRemember-me sign-in guard reads a session key that is never written in ash_authentication, allowing session replacement9.1 Critical
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4: Authentication bypass via a client-controlled identity header in Webserver authentication mode9.3 Critical
- team-alembic ash authenticationdynamic_oidc identities are not namespaced by connection in ash_authentication, allowing cross-connection account takeover9.1 Critical
- libp2p js-libp2plibp2p: PeerStore accepts attacker-signed PeerRecords for a victim peer ID and stores certified attacker addresses8.2 High
- miniorange headless single sign onWordPress Headless Single Sign On plugin <= 1.7.0 - Broken Authentication vulnerability9.8 Critical
- cisco identity services engine softwareISE 802.1x Session Hijack Vulnerability3.8 Low
- cisco identity services engine software, ise passive identity connector +1 moreCisco ISE API Authentication Bypass Vulnerability10.0 Critical
- @fastify/proxy-addr@fastify/proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet9.1 Critical
- wnc t-mobile 5g box iduSession auth bypass via cookie value in T-Mobile 5G Box IDU routers8.7 High
- mahmudul hasan arif fluentboardsFluentBoards < 2.0.15 - Board Member+ Comment Author Spoofing via 'comment_by' Parameter3.8 Low
- delinea secret server (on-prem)Authentication Bypass via SAML Response Manipulation9.5 Critical
- bookstackapp bookstackBookStack < 26.05.5 Authentication Bypass via Social Login Provider Confusion9.1 Critical
- proxy-addrproxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet9.1 Critical
- arista networks eosOn affected platforms running Arista EOS with both 802.1X port authentication and the RADIUS proxy feature configured with dynamic authorization, a low-privileged attacker on an adjacent network segme…5.9 Medium
- apple ipados, macos, visionos +3 more +5 moreA file quarantine bypass was addressed with additional checks. This issue is fixed in iOS 26.7...4.4 Medium
- ibm iIBM i is Affected By Multiple Vulnerabilities in Navigator for i and Digital Certificate Manager for i.5.3 Medium
- eclipse foundation data plane coreIn Siglet current and past versions the refresh token handler do not enforce proof of possession...6.3 Medium
- ping identity pingamImproper Claim Validation in PingAM OIDC Provider9.5 Critical
- apache software foundation syncopeApache Syncope: JWT subject spoofing9.1 Critical
- n-able mail assureN-able Mail Assure through April 2026 contains a design-level authorization flaw that allows an...4.3 Medium
- cisa malcolmAuthentication Bypass by Spoofing in Malcolm7.1 High
- lenovo software fixAn authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a...8.5 High
- elliot sowers/ relywp simple cloudflare turnstileWordPress Simple Cloudflare Turnstile plugin <= 1.42.1 - Captcha Bypass vulnerability5.6 Medium
- Show moreLoading…