CWE-306: Missing Authentication for Critical Functionality
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
A kind of CWE-287 Improper Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- dji crystalsky zs600cDJI CrystalSky ZS600C ships ADB without authentication (ro.adb.secure=0)7.0 High
- cgm clininetMissing Authentication in CGM CLININET6.9 Medium
- cgm clininetMissing Authentication in CGM CLININET7.1 High
- google agent development kit (adk) for javaCross-Site WebSocket Hijacking and Permissive CORS in Google Agent Development Kit (ADK) for Java Development Server7.2 High
- onphase formsAuthentication Bypass Leading to Server-Side Command Execution9.3 Critical
- kiloview e3 firmwareKiloview E3 NDI Encoder Missing Authentication for Critical Function8.7 High
- kiloview e3 firmwareKiloview E3 NDI Encoder Missing Authentication for Critical Function6.9 Medium
- microsoft azure kubernetes configuration serviceAzure Kubernetes Configuration Service Elevation of Privilege Vulnerability10.0 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Authentication Bypass in Web Interface of AOS-8 allows Remote Command Execution (RCE)8.1 High
- abb ability edgeniusABB Ability Edgenius | Missing Authentication in Edgenius AuthDB5.8 Medium
- traefikTraefik v3.7.13 Authentication Bypass via ssl-passthrough Ingress HTTP Router7.0 High
- google samUnauthenticated Biscuit Credential Disclosure via GET /enroll/status in Google OSS Agent Mesh (SAM)8.8 High
- oretnom23 php-travel-agency-systemoretnom23 php-travel-agency-system Session session.php missing authentication6.9 Medium
- viewsonic vcastCVE-2026-829877.5 High
- apache software foundation traffic serverApache Traffic Server: tsmemcache plugin exposes the shared proxy cache over the network with no authentication9.4 Critical
- apache software foundation pulsar managerApache Pulsar Manager: Missing authentication and authorization and disclosure of the Pulsar admin credential; end of life10.0 Critical
- storybookjs storybookStorybook dev server: devices on the same network can obtain the WebSocket token and write code into story files8.7 High
- momotommy file-management-systemMomoTommy file-management-system Files API FileController.php destroy missing authentication6.9 Medium
- dynamics365ninja d365fo-mcp-serverD365 F&O MCP Server: Official Azure one-click deployment ships with authentication disabled by default, exposing proprietary X++ source over the public internet7.5 High
- oretnom23 file-management-system-phporetnom23 file-management-system-php AJAX ajax.php delete_folder missing authentication6.9 Medium
- cisco open source snort3Open Source Snort 3 Control Channel Socket Aribitrary Command Execution Vulnerability7.8 High
- wso2 identity serverIncomplete reCaptcha Implementation in Authentication Flows in WSO2 Identity Server Allows Brute Force Attacks4.8 Medium
- dhikshitha29 insurance-management-systemdhikshitha29 Insurance-Management-System Plan Management Form AddNewPlan-inc.php missing authentication6.9 Medium
- apache software foundation brpcApache bRPC: Missing Authentication for Streaming RPC Frames9.1 Critical
- apache software foundation iotdbApache IoTDB: Remote code execution and Unauthenticated path traversal in legacy pipe sendFile RPC9.8 Critical
- triggerdotdev trigger.devTrigger.dev before 4.5.0 Missing Authentication in Dashboard Run Replay Action8.3 High
- trigger.dev cli-v3Trigger.dev CLI 3.0.0 before 4.5.4 Missing Authentication in MCP Server7.6 High
- triggerdotdev trigger.devTrigger.dev through 4.7.6 Missing Authentication in Supervisor Workload API8.8 High
- oracle essbaseVulnerability in Oracle Essbase (component: Security). The supported version that is affected...9.8 Critical
- oracle corporation agile product lifecycle management for processVulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle...8.2 High
- oracle corporation agile product lifecycle management for processVulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle...9.1 Critical
- oracle corporation agile product lifecycle management for processVulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle...8.2 High
- oracle business intelligence, oracle corporation business intelligence enterprise edition +1 moreVulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics ...8.1 High
- oracle business intelligence, oracle corporation business intelligence enterprise edition +1 moreVulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics ...8.8 High
- oracle business intelligence, oracle corporation business intelligence enterprise edition +1 moreVulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics ...8.6 High
- oracle applications managerVulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component:...8.8 High
- oracle corporation agile product lifecycle management for processVulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle...8.8 High
- oracle corporation agile product lifecycle management for processVulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle...7.5 High
- oracle workflowVulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow...8.1 High
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...7.3 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...9.8 Critical
- oracle identity manager connectorVulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware ...9.8 Critical
- oracle identity manager connectorVulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware ...9.1 Critical
- oracle corporation peoplesoft enterprise fin common objects brazilVulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft...5.3 Medium
- oracle siebel crm, oracle corporation siebel crm deployment +1 moreVulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server...7.4 High
- oracle siebel crm, oracle corporation siebel crm deployment +1 moreVulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server...7.4 High
- oracle siebel crm, oracle corporation siebel crm end user +1 moreVulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Communications...8.2 High
- oracle siebel crm, oracle corporation siebel crm deployment +1 moreVulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server...8.8 High
- oracle siebel crm, oracle corporation siebel apps - field service +1 moreVulnerability in the Siebel Apps - Field Service product of Oracle Siebel CRM (component: Smart...7.2 High
- oracle siebel crm, oracle corporation siebel apps - financial services +1 moreVulnerability in the Siebel Apps - Financial Services product of Oracle Siebel CRM (component:...6.5 Medium
- Show moreLoading…