cve.bz

CWE-288: Authentication Bypass Using an Alternate Path or Channel, page 4

Filter

The product requires authentication, but the product has an alternate path or channel that does not require authentication.

What the weakness is: CWE-288 at MITRE

Ask an AI about CWE-288

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-288: Authentication Bypass Using an Alternate Path or Channel and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/288.html and https://cve.bz/cve/cwe/288?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2026-48491EPSS 0.4%

    Traefik is an HTTP reverse proxy and load balancer. From 3.7.0 until 3.7.3, there is a high severity vulnerability in Traefik's domain-fronting protection (SNICheck) that allows an unauthenticated client to bypass mutual TLS enforced throu…

  2. 7.8CVE-2026-48020EPSS 0.8%

    Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.48, 3.6.19, and 3.7.3, there is a high severity vulnerability in Traefik's StripPrefix middleware that allows an unauthenticated attacker to bypass route-level authenticatio…

  3. 8.6CVE-2026-56243EPSS 0.3%

    Capgo before 12.128.2 contains a security control bypass vulnerability where the PostgREST/RLS plane accepts plaintext API keys through the capgkey header despite enforce_hashed_api_keys being enabled. Attackers can bypass org-level hashed…

  4. 8.7CVE-2020-37255EPSS 0.6%

    WordPress Time Capsule Plugin 1.21.16 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain administrative access by sending a crafted POST request with the IWP_JSON_PREFIX header. Attackers can expl…

  5. 9.3CVE-2019-25763EPSS 0.8%

    WordPress Ultimate Addons for Beaver Builder 1.2.4.1 contains an authentication bypass vulnerability that allows attackers to gain unauthorized access by exploiting the social media login form functionality. Attackers can submit a POST req…

  6. 8.2CVE-2026-50194EPSS 0.2%

    Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. When Steeltoe management endpoints versions 3.2.2 through 3.3.0 and 4.1.0 are configured to listen on an alternate…

  7. 6.5CVE-2026-54817EPSS 0.3%

    Authentication Bypass Using an Alternate Path or Channel vulnerability in FluxBuilder MStore API allows Password Recovery Exploitation. This issue affects MStore API: from n/a through 4.18.4.

  8. 7.6CVE-2026-54804EPSS 0.3%

    Subscriber Broken Authentication in Melhor Envio <= 2.16.3 versions.

  9. 9.8CVE-2026-49767EPSS 0.5%

    Unauthenticated Broken Authentication in wpForo Forum <= 3.1.0 versions.

  10. 6.5CVE-2026-49071EPSS 0.3%

    Unauthenticated Broken Authentication in WooCommerce Dropshipping <= 5.2.4 versions.

  11. 8.8CVE-2026-42629EPSS 0.3%

    Unauthenticated Broken Authentication in PowerPack Pro for Elementor < v2.13.0 versions.

  12. 8.1CVE-2026-25439EPSS 0.3%

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Booknetic Booknetic booknetic allows Authentication Abuse.This issue affects Booknetic: from n/a before 5.10.3.

  13. 8.7CVE-2026-12225EPSS 0.5%

    syracom AG Secure Login (2FA) for Atlassian Jira, Confluence, and Bitbucket 3.4.0.x contains an authentication bypass vulnerability. An attacker with valid credentials for a user account can bypass the two-factor authentication flow by sen…

  14. 9.8CVE-2026-49764EPSS 0.4%

    Unauthenticated Broken Authentication in RegistrationMagic <= 6.0.8.6 versions.

  15. 8.1CVE-2026-48970EPSS 0.4%

    Unauthenticated Broken Authentication in Really Simple SSL <= 9.5.10 versions.

  16. 7.5CVE-2026-42668EPSS 0.4%

    Unauthenticated Broken Authentication in Email Marketing for WooCommerce by Omnisend <= 1.18.0 versions.

  17. 8.1CVE-2026-42411EPSS 0.4%

    Unauthenticated Broken Authentication in CloudSecure WP Security <= 1.4.7 versions.

  18. 6.5CVE-2026-42378EPSS 0.4%

    Subscriber Broken Authentication in WP Full Stripe Free <= 8.4.1 versions.

  19. 5.3CVE-2026-40799EPSS 0.3%

    Unauthenticated Broken Authentication in Simple Cloudflare Turnstile <= 1.38.0 versions.

  20. 6.5CVE-2026-40790EPSS 0.3%

    Subscriber Sensitive Data Exposure in WP SMS <= 7.2.1 versions.

  21. 7.1CVE-2026-40785EPSS 0.4%

    Subscriber Broken Authentication in AutomatorWP <= 5.6.7 versions.

  22. 7.5CVE-2026-40781EPSS 0.3%

    Unauthenticated Broken Authentication in ReviewX <= 2.3.6 versions.

  23. 7.1CVE-2026-39450EPSS 0.4%

    Subscriber Broken Authentication in FunnelKit Automations <= 3.7.3 versions.

  24. 8.8CVE-2026-49062EPSS 0.3%

    Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Engine Faust.Js allows Password Recovery Exploitation. This issue affects Faust.Js: from n/a through 1.8.7.

  25. 6.3CVE-2026-47200EPSS 0.2%

    Nuxt is an open-source web development framework for Vue.js. In Nuxt versions 3.11.0 to before 3.21.6 and 4.0.0-alpha.1 to before 4.4.6 and @nuxt/nitro-server versions 3.20.0 to before 3.21.6 and 4.0.0-alpha.1 to before 4.4.6, when experim…

  26. 9.8CVE-2026-10523EPSS 53%

    An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to create arbitrary administrative accounts and obtain full administrative access

  27. 8.8CVE-2026-5415EPSS 0.5%

    The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the same slug) plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.38. This is due to the ajax_run_t…

  28. 6.8CVE-2026-36175EPSS 0.2%

    An issue in the U-Boot component of GNCC GP5 v7.1.76 allows physically-proximate attackers to bypass authentication and gain root access via interrupting the boot sequence and injecting a crafted string into the kernel boot arguments.

  29. 7.1CVE-2026-42654EPSS 0.2%

    Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Swings Wallet System for WooCommerce allows Password Recovery Exploitation. This issue affects Wallet System for WooCommerce: from n/a through 2.7.5.

  30. 7.5CVE-2026-40780EPSS 0.3%

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP BookIt allows Password Recovery Exploitation. This issue affects BookIt: from n/a before 2.5.4.1.

  31. 6.9CVE-2026-45577EPSS 0.2%

    Neotoma provides versioned records that persist across agent runs. From 0.6.0 to before 0.11.1, Neotoma can treat public reverse-proxied requests as local when the app receives them over a loopback socket and no Bearer token is present. In…

  32. 9.3CVE-2025-41273EPSS 0.4%

    Nozomi Networks Labs identified a CWE-288: Authentication Bypass Using an Alternate Path or Channel in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to byp…

  33. 8.7CVE-2026-8697EPSS 0.5%

    Due to improper enforcement of authentication rate-limiting on a debug SSH service in Archer C64 v1, the SSH service allows unlimited authentication attempts and uses the same credentials as the web interface. This enables an attacker to …

  34. 5.3CVE-2026-8990EPSS 0.2%

    A user with physical access to a smartphone can bypass authentication mechanism of Kidsview mobile application and grant himself full access to the device owner's account by interacting with application's push notification. This issue was…

  35. 9.3CVE-2026-35090EPSS 0.6%

    In Slican telephone exchanges it is possible to manage the control panel remotely. An unauthenticated attacker can connect to the modem via a telephone with a specific caller ID. This allows them to bypass admin authentication and gain ful…

  36. 9.3CVE-2026-35087EPSS 0.7%

    Slican telephone exchanges allow administrative protocol authentication bypass. An attacker can bypass the need to enter login credentials by executing the appropriate command. This issue was fixed in versions below: - NCP: version 1.24.…

  37. 7.5CVE-2026-42760EPSS 0.3%

    Authentication Bypass Using an Alternate Path or Channel vulnerability in revmakx Backup and Staging by WP Time Capsule wp-time-capsule allows Password Recovery Exploitation.This issue affects Backup and Staging by WP Time Capsule: from n/…

  38. 7.1CVE-2026-42749EPSS 0.3%

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Themeisle Disable Comments for Any Post Types (Remove comments) comments-plus allows Password Recovery Exploitation.This issue affects Disable Comments for Any Post …

  39. 7.3CVE-2026-42745EPSS 0.2%

    Authentication Bypass Using an Alternate Path or Channel vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Authentication Bypass.This issue affects Smart Online Order for Clover: from n/a through <= 1.6.0.

  40. 8.2CVE-2026-42735EPSS 0.3%

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows Password Recovery Exploitation.This issue affects KiviCare: from n/a through <= 4.3.0.

  41. 2.4CVE-2025-68711EPSS 0.2%

    AppLockZ App Lock and Fingerprint Lock (applock.passwordfingerprint.applockz) 4.2.11 for Android allows a local attacker with physical access to bypass the PIN lock. The lock is implemented as an overlay rather than by using Android's secu…

  42. 2.4CVE-2025-68708EPSS 0.2%

    SailingLab AppLock (aka com.alpha.applock) 4.3.8 for Android allows a local attacker with physical access to bypass the PIN lock. The lock is implemented as an overlay rather than by using Android's secure authentication APIs. By navigatin…

  43. 2.4CVE-2025-68710EPSS 0.2%

    Easyelife App lock (aka Fingerprint,Applock or locker.app.safe.applocker) 1.9.2 for Android allows a local attacker with physical access to bypass the PIN lock. The lock is implemented as an overlay rather than by using Android's secure au…

  44. 6.5CVE-2026-45217EPSS 0.4%

    Authentication Bypass Using an Alternate Path or Channel vulnerability in ThemeHigh Stripe Payment Gateway for WooCommerce allows Password Recovery Exploitation. This issue affects Stripe Payment Gateway for WooCommerce: from n/a through …

  45. 9.8CVE-2026-33843EPSS 0.5%

    Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.

  46. 9.1CVE-2026-8598EPSS 0.5%

    An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras. This port does not require authentication and exposes critical information about the camera such as open services and camera account credenti…

  47. 9.8CVE-2026-24207ExploitEPSS 2.6%

    NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of se…

  48. 9.8CVE-2026-24206EPSS 0.6%

    NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of this vulnerability might lead to escalation of privileges, denial of service, or information disclosure.

  49. 9.3CVE-2026-4320EPSS 0.3%

    Authorization Bypass vulnerability in Creartia's ICMS software could allow an attacker to gain unauthorized access to protected features by manipulating the HTTP redirect headers of the login process, causing the script to continue running…

  50. 6.5CVE-2026-4524EPSS 0.3%

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9.1 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user to access confidential issue content in public pr…