CWE-306: Missing Authentication for Critical Functionality
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
A kind of CWE-287 Improper Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- toptech systems multiload ii+, rcu ii+ +1 moreToptech Systems RCU II+ and Multiload II+ Missing Authentication for Critical Function8.7 High
- grisuno lazyownLazyOwn: Unauthenticated Socket.IO `input` Event Reaches LazyOwn Command Dispatcher — Unauthenticated RCE9.8 Critical
- somta juggleJuggle 1.6.0 Unauthenticated RCE via Exposed H2 Console9.3 Critical
- yolanmees spiksterSpikster Missing Authentication via API Route Group9.3 Critical
- lmsys sglangCVE-2026-159787.5 High
- apache jspwikiApache JSPWiki: Pre-Authentication Arbitrary Wiki Markup Rendering7.5 High
- opencostOpenCost < 1.121.0 Unauthenticated Helm Values Exposure and Admin Bypass8.7 High
- ftc software it services e-commerce management panelAuthentication Bypass in FTC Software's E-Commerce Management Panel8.2 High
- gladinet centrestackCentreStack < 17.2 Unauthenticated API Authorization Bypass8.8 High
- gladinet centrestackCentreStack < 17.3 Unauthenticated User Creation via Deserialization in GSNamespace.dll8.7 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 moreOCPP reconfiguration vulnerability9.3 Critical
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 moreJupiCore charging point reconfiguration without auth8.8 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 moreMissing authentication for MQTT Broker9.3 Critical
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +14 more +16 morePcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access rules7.3 High
- broadcom spring tools, spring tools for eclipse, tools for vscode / cursor / theia +2 morelive information startup mode is vulnerable for remote code execution8.0 High
- autel maxicharger ac elite homeAutel MaxiCharger AC Elite Home USB Authentication Bypass Vulnerability4.3 Medium
- aten unizonATEN Unizon RpcProvider Missing Authentication Denial-of-Service Vulnerability7.5 High
- flytohub flyto-coreFlyto2 Core: Unauthenticated flyto-verification /run: callback_url SSRF and internal runner-secret exfiltration9.3 Critical
- ibm websphere application server, websphere application server - liberty +1 moreIBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a server-side request forgery9.4 Critical
- nasa-ammos ait-dsn, nasa ait dsn +1 moreAIT-DSN < 2.2.2 Missing Authentication via SLE API Routes9.3 Critical
- nasa-ammos ait-gui, nasa ait gui +1 moreAIT-GUI < 2.5.1 Missing Authentication via Sessions.create()9.3 Critical
- goshs-labs goshsgoshs SFTP authentication bypass via empty password (incomplete fix of CVE-2026-40884)9.1 Critical
- ibm websphere application serverIBM WebSphere Application Server is affected by a privilege escalation9.8 Critical
- ibm websphere application server - liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability7.1 High
- at&t arris bgw210‑700CVE-2026-167718.8 High
- universal software inc. ukbsImproper Authentication in Universal Sotware's UKBS8.8 High
- ghost robotics vision 60Multiple vulnerabilities in Ghost Robotics' Vision 608.7 High
- tycon systems tpdin-monitor-web2Tycon Systems TPDIN-Monitor-WEB2 Missing Authentication for Critical Function9.3 Critical
- lakefslakeFS Unauthenticated Operator Metadata Overwrite via setup_comm_prefs6.9 Medium
- microsoft azure kubernetes serviceMicrosoft Azure Kubernetes Service Elevation of Privilege Vulnerability10.0 Critical
- openstack zaqarOpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID...4.8 Medium
- chatwootChatwoot < 4.16.0 Unauthenticated ActiveStorage Direct Upload Arbitrary Blob Creation8.8 High
- work90210 apifoldAPIFold Vulnerable to Unauthenticated Webhook Event Injection5.3 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote...10.0 Critical
- oracle platform security for javaVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...8.8 High
- oracle platform security for javaVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...8.8 High
- oracle platform security for javaVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...8.8 High
- oracle platform security for javaVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...9.8 Critical
- oracle platform security for javaVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...9.8 Critical
- oracle platform security for javaVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...10.0 Critical
- invoke-ai invokeaiInvokeAI < 6.13.7 Unauthenticated Directory Enumeration via scan_folder6.3 Medium
- n8nn8n before 2.28.0 Authentication Bypass via test-webhook6.3 Medium
- feedbinFeedbin Unauthenticated Entry Content Disclosure via GET /api/v2/entries/:id/text8.7 High
- oracle workflowVulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow...8.1 High
- oracle applications frameworkVulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component:...8.8 High
- oracle flow manufacturingVulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component:...8.8 High
- oracle yard managementVulnerability in the Oracle Yard Management product of Oracle E-Business Suite (component:...8.8 High
- oracle e-business suite, oracle corporation purchasing +1 moreVulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal...7.5 High
- oracle public sector financialsVulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite ...8.8 High
- oracle public sector payrollVulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component:...8.8 High
- Show moreLoading…