CWE-306: Missing Authentication for Critical Functionality
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
A kind of CWE-287 Improper Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- nasa cryptolibNASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID8.7 High
- microsoft azure ai foundryAzure AI Foundry Elevation of Privilege Vulnerability10.0 Critical
- labredescefetrj wegiaWeGIA: Hardcoded Secret Key Backdoor — Mass Data Destruction via deletar_socios.php9.1 Critical
- labredescefetrj wegiaWeGIA: Unauthenticated Auth Bypass + Local File Inclusion9.1 Critical
- open-reception appointment-booking-softwareOpenReception: Unauthenticated WebAuthn passkey injection via `POST /api/auth/passkeys` leads to account takeover9.8 Critical
- jimprosser obsidian-web-mcpObsidian Web MCP: Unauthenticated vault access: /oauth/authorize auto-approves without authenticating the user9.4 Critical
- openshift-metal3 bmctestBMCtest exposes Ironic without authentication and TLS during the test5.3 Medium
- sgl-project sglangSGLang through 0.5.19 Unauthenticated Route Poisoning via PUT endpoint8.8 High
- dell openmanage server administrator, openmanage server administrator managed node (patch) for windows, openmanage server administrator managed node for rhel 8.10 +3 more +5 moreDell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing...4.0 Medium
- dell openmanage server administrator, openmanage server administrator managed node (patch) for windows, openmanage server administrator managed node for rhel 8.10 +3 more +5 moreDell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing...8.1 High
- acer system monitoringAuthentication Vulnerability in NitroSense and PredatorSense Software1.2 Low
- unknown to do list memberTo Do List Member 1.4 - 1.6 - Unauthenticated Stored XSS, File Listing and Deletion via Unprotected Upload Handler8.8 High
- acer agent serviceUnauthenticated Access Vulnerability in NitroSense and PredatorSense Software4.9 Medium
- djust-org djustdjust has an authorization bypass on the WebSocket/SSE mount path9.1 Critical
- tch qringTCH QRing R20_B006 Unauthenticated BLE Access7.1 High
- uvdesk community-skeletonUVdesk Community Skeleton through 1.1.8 Missing Authentication on the Installation Wizard9.3 Critical
- cisco identity services engine, identity services engine software, ise passive identity connector +1 more +3 moreCisco Identity Services Engine Certificate Reload Vulnerability5.3 Medium
- cisco identity services engine, identity services engine software, ise passive identity connector +1 more +3 moreCisco Identity Services Engine Information Disclosure Vulnerability5.3 Medium
- cisco identity services engine, identity services engine software, ise passive identity connector +1 more +3 moreCisco Identity Services Engine Event Injection Vulnerability5.3 Medium
- cisco secure firewall management center (fmc)Cisco Secure Firewall Management Center Software Information Disclosure and Disk Denial of Service Vulnerability7.5 High
- altium enterprise serverServer-Side Request Forgery in Altium Enterprise Server UnifiedLogin Service Allows Unauthenticated System Compromise10.0 Critical
- cisco nexus dashboardCisco Nexus Dashboard Software Security Hardening Release September 2026 - Missing Authentication for Critical Function9.8 Critical
- signozSigNoz 0.88.0 through 0.141.0 - Missing Authentication on Trace Funnel Analytics Endpoints8.8 High
- kubero-dev kuberoKubero through 3.1.1 Unauthenticated Notifications API Access9.3 Critical
- cobbr covenantCovenant through 0.6 Missing Authentication on the CovenantHub SignalR Hub9.3 Critical
- control id idsecureControl iD iDSecure Unauthenticated Denial of Service7.5 High
- djust-org djustdjust's observability endpoints are network-exposed: the localhost gate is an opt-in middleware the docs omit, and the views enforce only DEBUG7.4 High
- advantech eki-1242eims, eki-1242ieims +1 moreNozomi Networks Labs identified a CWE-306: Missing Authentication for Critical Function...8.8 High
- wnc t-mobile 5g box iduConfig disclosure in T-Mobile 5G Box IDU routers7.1 High
- arista networks velocloud edgeSecurity Advisory 01798.7 High
- xikestor sks8300-12e2t2x, sks8300-8t, sks8310-8x +2 moreXikeStor Layer3 switches miss authentication for downloading configuration data. Unauthenticated...8.7 High
- digital watchdog va1g4 recorder, vg4 recorder, vmax a1 g4 dvr +2 more +4 moreMissing Authentication for Critical Function in Digital Watchdog VMAX DVR and NVR Product Lineups8.7 High
- digital watchdog va1g4 recorder, vg4 recorder, vmax a1 g4 dvr +2 more +4 moreMissing Authentication for Critical Function in Digital Watchdog VMAX DVR and NVR Product Lineups7.1 High
- niaefeup tts-be`tts-be` application has a Broken Access Control vulnerability7.5 High
- oracle hyperion financial managementVulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component:...9.1 Critical
- oracle hyperion financial managementVulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component:...9.1 Critical
- oracle hyperion financial managementVulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component:...7.5 High
- oracle hyperion financial managementVulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component:...8.2 High
- oracle hyperion financial managementVulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component:...8.2 High
- oracle hyperion financial managementVulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component:...8.2 High
- oracle hyperion financial managementVulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component:...7.4 High
- oracle hyperion financial managementVulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component:...9.8 Critical
- oracle hyperion financial managementVulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component:...9.1 Critical
- oracle hyperion financial managementVulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component:...9.1 Critical
- oracle hyperion financial managementVulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component:...9.1 Critical
- oracle hyperion financial managementVulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component:...9.1 Critical
- oracle hyperion data relationship managementVulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion ...7.1 High
- oracle hyperion data relationship managementVulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion ...7.5 High
- oracle hyperion data relationship managementVulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion ...9.1 Critical
- oracle hyperion data relationship managementVulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion ...9.1 Critical
- Show moreLoading…