cve.bz

CWE-288: Authentication Bypass Using an Alternate Path or Channel, page 2

Filter

The product requires authentication, but the product has an alternate path or channel that does not require authentication.

What the weakness is: CWE-288 at MITRE

Ask an AI about CWE-288

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-288: Authentication Bypass Using an Alternate Path or Channel and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/288.html and https://cve.bz/cve/cwe/288?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.3CVE-2026-100518EPSS 0.3%

    Unauthenticated Broken Authentication in Advanced Google reCAPTCHA <= 5.40 versions.

  2. 5.4CVE-2026-100261EPSS 0.2%

    In JetBrains YouTrack before 2026.2.18991 changing article visibility settings was possible without update permission

  3. 5.4CVE-2026-88828EPSS 0.2%

    The Blacklist Manager for WooCommerce WordPress plugin from 1.3.0 to 2.3.1 does not enforce its user blocking on every authentication path, allowing the holder of an account the site owner has blocked to keep authenticating with that accou…

  4. 8.6CVE-2026-63493EPSS 0.3%

    Snipe-IT is an IT asset/license management system. Prior to 8.7.0, a password-authenticated session for an account with self.api permission can reach the personal-access-token API flow before completing the account's second-factor challeng…

  5. 9.2CVE-2026-90481EPSS 0.3%

    In PortSwigger Burp Suite DAST (formerly Burp Suite Enterprise Edition) before 2026.8, an authentication bypass can occur via an alternate path or channel.

  6. 4.5CVE-2026-79680EPSS 0.3%

    Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module. An attacker using a specially modified VNC client that violates the RFB protocol can bypass Qt VNC Server's password authentication a…

  7. 7.3CVE-2026-93928EPSS 0.4%

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Authentication Bypass. This issue affects Taxi Booking Manager for WooCommerce: from n/a before 2.0.8.

  8. 8.1CVE-2026-58269EPSS 0.3%

    Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.4.0, `POST /api/auth/token` authenticates with username and password only, then calls `getTokens()`, which returns full acc…

  9. 6.5CVE-2026-81868EPSS 0.2%

    Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. Prior to 4.3.0, Steeltoe.Security.Authorization.Certificate deployments using AddOrgAndSpacePolicies() and UseCert…

  10. 9.8CVE-2026-62101EPSS 0.6%

    Unauthenticated Broken Authentication in EduAdmin Booking <= 5.4.2 versions.

  11. 7.7CVE-2026-14917EPSS 0.8%

    A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validate_assertion_signature option is explicitly set to false. This option is enabled by default. When disabled, the plugin may extract the SAML identity fro…

  12. 9.8CVE-2026-27546EPSS 1.0%

    An unauthenticated remote attacker can exploit an authentication bypass in the _account_log function to log in as an admin, even when accounts are properly configured.

  13. 8.2CVE-2026-57134EPSS 0.4%

    PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, MCPSecurity.evaluatePolicy() in src/praisonai-ts/src/mcp/security.ts invokes the configured credential validator only when AuthMethod is api-key or bearer. Basic and OAuth po…

  14. 6.9CVE-2026-91143EPSS 0.5%

    goproxy through 15.3 fails to apply HTTP proxy basic authentication to CONNECT tunnel requests, allowing unauthenticated clients to bypass credential requirements. Attackers can issue CONNECT requests to establish tunnels through the authe…

  15. 8.7CVE-2026-88260EPSS 0.3%

    Authentication bypass using an alternate path or channel and Improper validation of syntactic correctness of input vulnerability in Brainzcompany Zenius EMS 8.0 allows Remote Code Inclusion. This issue affects Zenius EMS 8.0: through OAM …

  16. 6.3CVE-2026-81906EPSS 0.6%

    Concrete CMS OAuth callback login path prior to version 9.5.3 did not check whether an account was active or email-validated before establishing a session. A deactivated or unvalidated user with an existing OAuth binding could complete aut…

  17. 7.3CVE-2026-81796EPSS 0.4%

    Authentication Bypass Using an Alternate Path or Channel vulnerability in WEN Solutions WP Travel wp-travel allows Password Recovery Exploitation.This issue affects WP Travel: from n/a through 12.0.3.

  18. 6.5CVE-2026-81787EPSS 0.4%

    Unauthenticated Broken Authentication in IMPress for IDX Broker <= 3.3.0 versions.

  19. 7.1CVE-2026-81783EPSS 0.4%

    Subscriber Broken Authentication in MailMunch – Grow your Email List <= 3.2.5 versions.

  20. 8.7CVE-2026-88861EPSS 0.5%

    Capgo (Cap-go/capgo.app) contains an authentication bypass affecting all versions (no patched version available at time of publication). The Edge authorization path allows a password-only Supabase aal1 session to exercise privileged RBAC p…

  21. 6.0CVE-2026-86084EPSS 0.5%

    n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the public OIDC login and callback endpoints completed authentication even when OIDC was not the enabled active authentication method. An Enterprise…

  22. 7.8CVE-2026-49887EPSS 0.09%

    In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. Us…

  23. 8.1CVE-2026-83527EPSS 1.8%

    An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated attacker to gain administrative level access.

  24. 8.7CVE-2026-77103EPSS 0.5%

    CommServe contained an authentication bypass issue affecting access authorization and information disclosure. Software customers upgrade to resolved maintenance release. Update CommServe.

  25. 8.7CVE-2026-62650EPSS 0.6%

    A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Server-side authorization checks in the web-based management interface are not properly enforced, allowing role-based access control (RBAC) restrictions to be byp…

  26. 7.5CVE-2026-76169EPSS 0.5%

    fastify versions >= 4.0.0 and before 5.12.2 can route a malformed URL sent under one plugin prefix to the custom not-found handler of a different sibling plugin, and invoke it without the preHandler hook declared for that handler. The inte…

  27. 9.8CVE-2026-62916EPSS 0.9%

    Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.

  28. 7.4CVE-2026-84777EPSS 0.4%

    Unauthenticated Broken Authentication in Really Simple SSL <= 9.8.0 versions.

  29. 3.7CVE-2026-81168EPSS 0.3%

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA Protected Page allows Functionality Bypass. This issue affects CAPTCHA Protected Page versions: from 0.0.0 to 1.0.2.

  30. 4.1CVE-2026-16647EPSS 0.4%

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Disable Login Page allows Functionality Bypass. This issue affects Disable Login Page versions: from 0.0.0 to 1.1.4.

  31. 7.4CVE-2026-82225EPSS 0.4%

    Unauthenticated Broken Authentication in RegistrationMagic <= 6.0.9.8 versions.

  32. 8.6CVE-2026-82269EPSS 0.6%

    Gophish through 0.12.1 fails to enforce account lockout and password change requirements in the API authentication middleware. Attackers with valid API keys can bypass these security controls and retain full API access even when their acco…

  33. 9.3CVE-2026-76943EPSS 1.0%

    Xiiaozet LK100Wt contains an authentication weakness within an administrative service that may allow an attacker to bypass intended access controls and obtain command execution capabilities. Successful exploitation could allow unauthori…

  34. 9.3CVE-2026-65641EPSS 0.5%

    A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account.

  35. 5.5CVE-2026-3035EPSS 0.3%

    GitLab has remediated an issue in GitLab EE affecting all versions from 11.3 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user with project Maintainer permissions could have acc…

  36. 8.1CVE-2026-58092EPSS 0.4%

    In FreeBSD 15.0, the kernel structure used to represent user credentials changed: previously the primary group ID was stored in the first element of the array containing the list of supplementary group IDs, whereas now the primary group ID…

  37. 9.8CVE-2026-16639EPSS 0.6%

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. This issue affects Internationalization Single Sign-On versions: from 0.0.0 to 1.8.0.

  38. 8.8CVE-2026-63587EPSS 0.4%

    The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via the 'Enable Password Authorization' setting. The device increments a retry counter on each failed SMS password attempt; after 5 consecutive fai…

  39. 7.3CVE-2026-78259EPSS 0.4%

    Unauthenticated Broken Authentication in WPLegalPages <= 3.7.0 versions.

  40. 9.8CVE-2026-74001EPSS 0.6%

    Unauthenticated Broken Authentication in User Registration & Membership Pro <= 5.4.5 versions.

  41. 7.6CVE-2026-66677EPSS 0.4%

    Subscriber Broken Authentication in Leyka <= 3.32.3 versions.

  42. 9.3CVE-2026-19490KEVEPSS 33%

    Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21.

  43. 8.8CVE-2026-50191EPSS 0.5%

    4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards is vulnerable to pre-account takeover when registrationEnabled, localRegistrationEnabled, and ssoRegistrationEnabled are enabled and Google, GitHub, Mi…

  44. 7.1CVE-2026-24185EPSS 0.3%

    NVIDIA NVOS for network switches contains a vulnerability in the secure shell (SSH) server configuration component while PKA-only mode is enabled, where an administrator could inadvertently enable an alternative authentication path. If bes…

  45. 5.3CVE-2021-43718EPSS 0.5%

    An Authentication Bypass vulnerability exists in EPSON EH-TW5350 EPSON 150075647YWWV110, which could let a remote malicious user cause a Denial of Service via specially crafted series of HTTP..

  46. 9.1CVE-2026-71879EPSS 0.9%

    Missing authentication in initial setup functionality left exposed until first reboot in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to gain administrative control via authentication bypass

  47. 6.5CVE-2026-73399EPSS 0.4%

    Unauthenticated Broken Authentication in Flutterwave WooCommerce <= 3.3.0 versions.

  48. 6.5CVE-2026-73398EPSS 0.4%

    Unauthenticated Broken Authentication in Piraeus Bank WooCommerce Payment Gateway 3.2.0 versions.

  49. 7.1CVE-2026-73396EPSS 0.4%

    Subscriber Broken Authentication in MWB HubSpot for WooCommerce <= 1.6.7 versions.

  50. 9.1CVE-2026-73381EPSS 0.5%

    Unauthenticated Broken Authentication in Popup by Supsystic <= 1.13.0 versions.