cve.bz

CWE-288: Authentication Bypass Using an Alternate Path or Channel, page 3

Filter

The product requires authentication, but the product has an alternate path or channel that does not require authentication.

What the weakness is: CWE-288 at MITRE

Ask an AI about CWE-288

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-288: Authentication Bypass Using an Alternate Path or Channel and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/288.html and https://cve.bz/cve/cwe/288?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.5CVE-2026-73379EPSS 0.3%

    Unauthenticated Bypass Vulnerability in Contact Form by Supsystic < 1.10.0 versions.

  2. 7.5CVE-2026-32481EPSS 0.5%

    Unauthenticated Broken Authentication in Ezoic <= 2.22.11 versions.

  3. 9.3CVE-2026-75627EPSS 0.8%

    Bastillion fails to properly validate request URI paths in its controller dispatcher, allowing unauthenticated attackers to bypass authentication filters by prefixing requests with arbitrary path segments. Attackers can access administrati…

  4. 9.1CVE-2026-75045EPSS 0.5%

    In JetBrains YouTrack before 2025.3.156085, 2026.1.13913, 2026.2.18112 an unauthenticated attacker could download database backups via shared draft signature

  5. 9.8CVE-2026-66465EPSS 0.6%

    Unauthenticated Broken Authentication in Cartify <= 1.3.0.1 versions.

  6. 9.8CVE-2026-66453EPSS 0.6%

    Unauthenticated Broken Authentication in Salon booking system <= 10.30.26 versions.

  7. 8.1CVE-2026-70468EPSS 0.5%

    A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, …

  8. 6.8CVE-2026-18636EPSS 0.4%

    The Velociraptor gRPC API has a VFSGetBuffer endpoint which allows reading files from the datastore. To prevent users from reading sensitive files or accessing other orgs, the requested path is prefix checked against a list of denied prefi…

  9. 7.5CVE-2026-72691EPSS 0.6%

    An authentication bypass vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to mint MASTER_KEY-signed file access tokens for arbitrary stored files via the getsignedurl Parse cloud functio…

  10. 6.5CVE-2026-66451EPSS 0.3%

    Unauthenticated Broken Authentication in WP Event SOlution <= 4.1.9 versions.

  11. 6.5CVE-2026-66425EPSS 0.4%

    Unauthenticated Broken Authentication in Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder <= 1.9.0 versions.

  12. 8.8CVE-2026-65542EPSS 0.5%

    Unauthenticated Broken Authentication in Super Socializer <= 7.14.5 versions.

  13. 9.8CVE-2026-24254EPSS 0.9%

    NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, d…

  14. 9.5CVE-2026-58073EPSS 0.3%

    A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent andobtain that agent's credentials.

  15. 9.2CVE-2026-68584EPSS 0.5%

    SiYuan versions before v3.7.3 contain an authentication bypass vulnerability in publish mode where content-returning endpoints getHeadingChildrenDOM, getHeading*Transaction, and getBacklinkDoc perform no password check despite protecting t…

  16. 9.3CVE-2026-18574EPSS 0.9%

    An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) could allow an unauthenticated remote attacker with network access to Management services to execute arbitra…

  17. 10.0CVE-2026-33591EPSS 0.7%

    A vulnerability in Wapt Server before version 2.6.1.17813 allows a  remote unauthenticated attacker to bypass security restriction using a specially crafted packet and retrieve a valid session token for the targeted account.

  18. 8.2CVE-2026-18577KEVExploitEPSS 15%

    An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1

  19. 8.2CVE-2026-18556KEVEPSS 7.9%

    Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

  20. 7.1CVE-2026-67337EPSS 0.5%

    better-auth versions before 1.4.9 contain a two-factor authentication bypass vulnerability when session.cookieCache is enabled. Attackers with valid primary credentials can access authenticated routes without completing second-factor verif…

  21. 9.2CVE-2026-8338EPSS 0.5%

    A Spring Security authentication and authorization bypass exists in Coverity Connect versions between 2023.6.0 and 2026.3.0. An unauthenticated malicious threat actor that can send a specially crafted HTTP request is able to bypass authent…

  22. 8.0CVE-2026-12703EPSS 0.4%

    TeamViewer Full Client and Host for macOS before version 15.80 contain a business logic error that can allow an authenticated attacker to bypass a configured 2FA for Connections approval flow via Unattended Access and establish a remote co…

  23. 6.5CVE-2026-18047EPSS 0.5%

    A flaw was found in Dogtag PKI's ACME responder where the web.xml security constraints use exact URL pattern matching for admin-only enable/disable endpoints. By appending a trailing slash to the URL, an unauthenticated attacker can bypass…

  24. 9.8CVE-2026-15014EPSS 0.9%

    The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 3.9.7 via the `billing_p…

  25. 8.1CVE-2026-59545EPSS 0.5%

    Unauthenticated Broken Authentication in miniOrange Discord Integration <= 2.2.4 versions.

  26. 6.5CVE-2026-59524EPSS 0.4%

    Unauthenticated Broken Authentication in Easy Digital Downloads <= 3.6.7 versions.

  27. 8.7CVE-2026-22049EPSS 0.5%

    ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulnerability related to the Relying Party ID which when successfully exploited could allow an attacker with valid credentials…

  28. 8.9CVE-2026-43945EPSS 0.8%

    FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Versions 1.2.11 until 1.3.1 allow an unauthenticated remote attacker to achieve Full Remote Code Execution (RCE) as root. The exploit succeeds even when the platform…

  29. 9.4CVE-2026-61425EPSS 0.6%

    Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0 - The Joomla extension Gridbox is vulnerable an authenticated bypass, potentially leading to full admin access.

  30. 7.1CVE-2026-39385EPSS 0.4%

    Frappe LMS is an open source learning management system. In version 2.51.0 and earlier, a user could bypass payment validation for courses by using unrelated batch. This has been patched in 2.52.0 with enrollment now validating that the ba…

  31. 2.9CVE-2026-16198EPSS 0.6%

    A vulnerability was detected in Sipeed PicoClaw up to 0.2.9. The impacted element is an unknown function of the file web/backend/middleware/access_control.go of the component First Run Setup. Performing a manipulation of the argument allow…

  32. 5.4CVE-2026-57980EPSS 0.4%

    Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a network.

  33. 6.5CVE-2026-47481EPSS 0.4%

    NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an authentication bypass through an alternative path or channel. A successful exploit of this vulnerability might lead to code execution, escalat…

  34. 6.5CVE-2026-57698EPSS 0.4%

    Authentication Bypass Using an Alternate Path or Channel vulnerability in VillaTheme Abandoned Cart Recovery for WooCommerce woo-abandoned-cart-recovery allows Authentication Abuse.This issue affects Abandoned Cart Recovery for WooCommerce…

  35. 7.5CVE-2026-57697EPSS 0.5%

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Password Recovery Exploitation.This issue affects ProfileGrid : from n/a through <= 5.…

  36. 9.8CVE-2026-57807EPSS 0.7%

    Authentication Bypass Using an Alternate Path or Channel vulnerability in miniOrange Security Software Pvt Ltd. OAuth Single Sign On - SSO (OAuth Client) allows Password Recovery Exploitation. This issue affects OAuth Single Sign On - SSO…

  37. 6.8CVE-2026-36028EPSS 0.3%

    A protection mechanism failure in the Code 27 Companion Hub allows an attacker with physical access to completely bypass kiosk restrictions via a factory reset

  38. 8.8CVE-2026-57867EPSS 0.6%

    MicroRealEstate allows adversaries to bypass authentication due to a lack of token state management. This would permit adversaries targeting MicroRealEstate deployments to brute-force One-Time Passwords (OTP) to log in as any user. This is…

  39. 9.1CVE-2026-5268EPSS 0.7%

    An authentication bypass vulnerability exists in the default SFTP server component utilized across the Ciena products listed. This vulnerability allows a remote, unauthenticated attacker to bypass security controls and gain unauthorized ac…

  40. 7.3CVE-2025-13475EPSS 0.3%

    In multi-tenanted deployments, the application consent management mechanism fails to correctly isolate consent scopes between tenants. Consent granted by a user for a specific SaaS application within one tenant can be incorrectly applied t…

  41. 6.9CVE-2026-58517EPSS 0.3%

    Improper neutralization of input terminators vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension allows Authentication Bypass. This issue affects Mediawiki - WikiLambda Extension: from * before 1.43.9,1.44.6,1.45.4.

  42. 7.4CVE-2026-12579EPSS 0.5%

    AS228T with Authentication Bypass Vulnerability

  43. 5.3CVE-2026-20460EPSS 0.3%

    In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution…

  44. 5.3CVE-2026-20459EPSS 0.3%

    In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges nee…

  45. 9.3CVE-2026-58172EPSS 0.6%

    Ocelot through 24.1.0, fixed in commit f156fd4, contains a security control bypass vulnerability that allows denied clients to circumvent IP-based access restrictions by sending WebSocket upgrade requests. The WebSocket upgrade pipeline br…

  46. 10.0CVE-2026-53576ExploitEPSS 3.3%

    Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, the authentication filter for the REST API (@Filter("/api/v1/**")) treats any request whose path ends in /configs as the public instance-config endp…

  47. 7.5CVE-2026-56029EPSS 0.4%

    Unauthenticated Broken Authentication in CorvusPay WooCommerce Payment Gateway <= 2.7.4 versions.

  48. 9.3CVE-2026-55666EPSS 0.4%

    Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7, and 7.10.13, in apps/meteor/app/apple/server/loginHandler.ts, handleIdentityToken parses a JWT issued by …

  49. 9.3CVE-2026-33543EPSS 0.4%

    FOSSBilling is a free, open-source billing and client management system. Versions 0.7.2 and prior expose a guest API endpoint, /api/guest/staff/create, intended for initial administrator bootstrap. Due to a flawed admin-existence check, th…

  50. 7.8CVE-2026-53622EPSS 0.6%

    Traefik is an HTTP reverse proxy and load balancer. Versions prior to 3.7.3, 3.6.18, and 2.11.51 have a critical vulnerability in Traefik's HTTP/3 (QUIC) TLS configuration selection that allows unauthenticated clients to bypass router-spec…