cve.bz

OWASP A07:2025 Authentication Failures vulnerabilities, newest first, page 23

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A07:2025 at MITRE.

Its weaknesses: 36

CWE-258, CWE-259, CWE-287, CWE-288, CWE-289, CWE-290, CWE-291, CWE-293, CWE-294, CWE-295, CWE-297, CWE-298, CWE-299, CWE-300, CWE-302, CWE-303, CWE-304, CWE-305, CWE-306, CWE-307, CWE-308, CWE-309, CWE-346, CWE-350, CWE-384, CWE-521, CWE-613, CWE-620, CWE-640, CWE-798, CWE-940, CWE-941, CWE-1390, CWE-1391, CWE-1392, CWE-1393

  1. 7.1CVE-2026-107180EPSS 0.3%

    On MISP instances configured to require TOTP enrolment (Security.otp_required), the enforcement of the mandatory two-factor authentication setup applied only to standard browser requests. An authenticated user who had not yet enrolled in T…

  2. 7.6CVE-2026-107162EPSS 0.4%

    Express Gateway through 1.16.11 contains an authentication bypass vulnerability in the OAuth 2.0 refresh_token grant that fails to validate the token secret or issuing client. Attackers with any valid client credentials and the identifier …

  3. 5.9CVE-2026-107151EPSS 0.4%

    Missing authentication has been found in remote-execution task updates in the smart_proxy_dynflow package. The progress and completion callbacks accept a report when the one-time token is missing. A network attacker or user must already kn…

  4. 4.8CVE-2026-97146EPSS 0.3%

    Apache YuniKorn 1.9.0 and earlier allows bypassing the check for the user annotation by setting a secondary label on the pod. If the pod has the label 'app=yunikorn' the checks limiting the user annotation content are not run. The label is…

  5. 9.8CVE-2026-105192EPSS 1.0%

    LMCache multiprocess mode, also called distributed mode, opens an unauthenticated ZeroMQ ROUTER so worker processes can register and share KV cache blocks. Messages on that socket are msgpack. Extension code 1 is passed to DeviceIPCWrapper…

  6. 9.1CVE-2026-97720EPSS 0.3%

    Incorrect implementation of JWT/OAuth authentication in Impala executors in Apache Impala versions up to and including 4.5.2 which allows attacked to access resources served by the executor's webserver when that webserver is configured to …

  7. 9.3CVE-2026-19572EPSS 0.4%

    A security vulnerability has been identified in FlexNet Publisher lmadmin. The vulnerability exists in a SOAP handler, where a hardcoded authentication bypass could allow an unauthenticated user to obtain a privileged administrator session…

  8. 7.7CVE-2026-83540EPSS 0.6%

    When password or public key authentication is used with the Windows port of wolfSSHd, the Windows logon token acquired for one authenticated connection is not released before a token is acquired for a subsequent connection, resulting in us…

  9. 9.1CVE-2026-101023EPSS 0.4%

    Gitea's OAuth2 token endpoint verified the signature and grant of a token submitted with the `refresh_token` grant type, but not that the token was a refresh token. An unexpired access token for the same OAuth2 application and grant could …

  10. 8.1CVE-2026-106488EPSS 0.3%

    Backstage is an open framework for building developer portals. Prior to 0.4.20, the @backstage/plugin-auth-backend-module-oidc-provider package is affected by improper authentication in the oidc provider. Deployments using OIDC email-based…

  11. 6.8CVE-2026-106460EPSS 0.4%

    Backstage is an open framework for building developer portals. From 0.3.0 until 0.6.15 and 0.7.5, the @backstage/plugin-auth-node package did not consistently honor explicit negative email verification during shared OAuth profile normaliza…

  12. 8.1CVE-2026-106457EPSS 0.4%

    Backstage is an open framework for building developer portals. From 0.1.0 until 0.5.0, the @backstage/plugin-auth-backend-module-cloudflare-access-provider package is affected by insufficient audience validation in the cloudflare access au…

  13. 8.1CVE-2026-96404EPSS 0.6%

    When Gitea's web installer is reachable against a database that already contains users, such as after `INSTALL_LOCK` has been reset to `false`, submitting the install form with an administrator username matching an existing account issued …

  14. 5.3CVE-2026-79818EPSS 0.3%

    A vulnerability in an API interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to obtain sensitive information …

  15. 9.8CVE-2026-79796EPSS 0.5%

    Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow …

  16. 9.8CVE-2026-76752EPSS 0.5%

    Authentication bypass vulnerabilities exist in the web-based management and API interfaces of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to circumvent existing authentica…

  17. 9.8CVE-2026-76743EPSS 0.5%

    A vulnerability have been identified in the management interface of AOS-S that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's con…

  18. 9.8CVE-2026-73278EPSS 0.5%

    Gitea's OAuth2 and OpenID Connect sign-in paths do not require a WebAuthn challenge when WebAuthn is the account's only configured second factor. A party able to authenticate through the affected external identity flow can obtain a full se…

  19. 9.1CVE-2026-103059EPSS 0.4%

    When Gitea's built-in SSH server is enabled (`START_SSH_SERVER = true`), the presented public key was looked up with an SQL `LIKE` comparison of its encoded content, which is case-insensitive on some databases, including the default SQLite…

  20. 8.7CVE-2026-102161EPSS 0.2%

    An unauthenticated attacker located on an adjacent private network (or any attacker routed through a reverse proxy/load balancer that forwards client headers) can forge their source IP address and gain administrative session privileges on …

  21. 9.3CVE-2026-102159EPSS 0.4%

    An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality intended only for internal services. Successful exploitation may expose sensitive location information or disrupt affected s…

  22. 7.7CVE-2026-101027EPSS 0.2%

    When `[migrations] ALLOWED_DOMAINS` was configured, a hostname matching the allow list was accepted without checking its resolved address against the local-network restrictions. A user who can start repository migrations and control the DN…

  23. 6.8CVE-2026-9226EPSS 0.2%

    Authentication bypass in the Azure AD external login flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured login-session token exposed in a redirect URL.

  24. 7.2CVE-2026-63697EPSS 0.3%

    Dell System Update, versions prior to 2.3.0.0, contains an Improper Certificate Validation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

  25. 9.8CVE-2026-106511EPSS 0.5%

    MultiversX's multisig-improved (repository: mx-multisig-and-modules) reference implementation of their on-chain multisig smart contract system contains a vulnerability where a missing independent authorization check allows any account with…

  26. 6.8CVE-2026-105485EPSS 0.4%

    Authentication bypass OAuth device authorization flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured device verification link by an authenticated victim.

  27. 5.5CVE-2026-103778EPSS 0.1%

    Dell Command | Configure (DCC), versions prior to 5.2.3.35 contain a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information disc…

  28. 6.9CVE-2026-105866EPSS 0.4%

    Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an unauthenticated attacker who knows an account email address or username can abuse the account lo…

  29. 9.2CVE-2026-105863EPSS 0.4%

    Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, a custom field option that maps a field to a reserved authentication claim name can place unintended values in the authenticat…

  30. 7.2CVE-2026-105861EPSS 0.1%

    Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, authenticated external URL-based upload retrieval can forward authentication data to a redirected destination that was not ver…

  31. 6.5CVE-2026-70411EPSS 0.2%

    Dell Container Storage Modules (CSM), versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-tenant gRPC service (TenantService). An unauthenticated adjacent network attacke…

  32. 7.4CVE-2026-67270EPSS 0.08%

    Dell Container Storage Modules (CSM) versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component. An unauthenticated adjacent network attacker could potentially exploit this vulnerabili…

  33. 7.4CVE-2026-63690EPSS 0.2%

    Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability in the csi-powerflex; csi-powermax; csi-powerstore. An unauthenticated attacker with adjacent network access …

  34. 10.0CVE-2026-63692EPSS 0.4%

    Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elev…

  35. 10.0CVE-2026-63688EPSS 0.5%

    Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially explo…

  36. 9.8CVE-2026-61421EPSS 0.3%

    Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remote access could potentially exploit this vulnerability, lead…

  37. 7.5CVE-2026-54472EPSS 0.3%

    Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the csm-docs. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to In…

  38. 9.1CVE-2026-105794EPSS 1.0%

    MsQuic is a cross-platform C implementation of the IETF QUIC protocol exposed to C, C++, C#, and Rust. Prior to 2.4.20, 2.5.11, and 2.6.1, MsQuic clients using the OpenSSL or QuicTLS TLS backend do not properly verify that a server certifi…

  39. 8.8CVE-2026-106038EPSS 0.5%

    Mooncake Store master through 0.3.13.post1 contains a missing authentication vulnerability that allows unauthenticated attackers to force-delete any object via Remove, RemoveByRegex, RemoveAll and BatchRemove on the coro_rpc port. Attacker…

  40. 9.3CVE-2026-106037EPSS 0.7%

    Mooncake through 0.3.13.post1 contains a missing authentication vulnerability in the Store REST service, which binds to 0.0.0.0 without authentication on any route. Unauthenticated attackers can call routes such as /api/get, /api/put, /api…

  41. 9.1CVE-2026-105835EPSS 0.3%

    PLANKA 2.2.0 through 2.2.1 fails to limit incorrect TOTP codes submitted to POST /api/access-tokens/verify-totp, allowing attackers to brute force two-factor authentication codes. Attackers who know a user's password can reuse the ten-minu…

  42. 4.8CVE-2026-97308EPSS 0.2%

    Unauthenticated Bypass Vulnerability in Login Lockdown <= 2.17 versions.

  43. 8.8CVE-2026-39793EPSS 0.4%

    Subscriber Broken Authentication in Simple JWT Login 4.0.0 versions.

  44. 5.3CVE-2026-39772EPSS 0.3%

    Unauthenticated Bypass Vulnerability in Captcha by BestWebSoft <= 5.2.8 versions.

  45. 7.5CVE-2026-39769EPSS 0.5%

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Designs Graphina – Charts and Graphs For Elementor graphina-elementor-charts-and-graphs allows Password Recovery Exploitation.This issue affects Graphina – Ch…

  46. 5.3CVE-2026-105057EPSS 0.3%

    Unauthenticated Bypass Vulnerability in Zero Spam <= 5.7.11 versions.

  47. 5.3CVE-2026-100518EPSS 0.3%

    Unauthenticated Broken Authentication in Advanced Google reCAPTCHA <= 5.40 versions.

  48. 5.4CVE-2026-105305EPSS 0.2%

    A flaw was found in the OIDC implementation of Keycloak, specifically within the Device Authorization Grant flow. This component allows devices with limited input capabilities to obtain security tokens. The issue occurs because the flow fa…

  49. 9.3CVE-2026-94293EPSS 0.4%

    An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints.

  50. 5.3CVE-2026-94271EPSS 0.2%

    The Deema Payment Gateway WordPress plugin through 1.1.2 does not verify the payment with the payment provider when handling the return from the hosted checkout, and does not check the payment status or amount, allowing unauthenticated use…