cve.bz

OWASP A07:2025 Authentication Failures vulnerabilities, newest first, page 58

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A07:2025 at MITRE.

Its weaknesses: 36

CWE-258, CWE-259, CWE-287, CWE-288, CWE-289, CWE-290, CWE-291, CWE-293, CWE-294, CWE-295, CWE-297, CWE-298, CWE-299, CWE-300, CWE-302, CWE-303, CWE-304, CWE-305, CWE-306, CWE-307, CWE-308, CWE-309, CWE-346, CWE-350, CWE-384, CWE-521, CWE-613, CWE-620, CWE-640, CWE-798, CWE-940, CWE-941, CWE-1390, CWE-1391, CWE-1392, CWE-1393

  1. 6.9CVE-2026-66409EPSS 0.3%

    DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords for their Wi-Fi hotspot networks. The password may be analyzed and obtained to connect to the access point of an affected robot.

  2. 5.1CVE-2026-66408EPSS 0.2%

    The root accounts of DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords. Physical access to an affected product may allow to obtain the password of the root account.

  3. 2.3CVE-2026-66406EPSS 0.2%

    DEEBOT PRO M1 and DEEBOT PRO K1VAC use wget command with server certificate validation disabled. A man-in-the-middle attack may allow to obtain and/or alter communications of the affected products. As a result, arbitrary code may be execu…

  4. 6.0CVE-2026-66404EPSS 0.2%

    DEEBOT PRO M1 and DEEBOT PRO K1VAC do not validate server certificates in MQTT communications. Operation logs and activity logs stored on the affected products may be retrieved.

  5. 5.4CVE-2026-18960EPSS 0.3%

    The Block User Account WordPress plugin before 2.0.1 does not enforce its account block on every authentication path, allowing a blocked user who holds an application password created before the block to retain their full role-level read a…

  6. 8.8CVE-2026-18786EPSS 0.5%

    The CheckView WordPress plugin before 2.3.2 does not restrict its REST API authentication filter to its own routes and unconditionally discards the authentication error raised for any request whose URI merely contains a CheckView WordPre…

  7. 8.1CVE-2026-18469EPSS 0.4%

    The Login & Register Forms WordPress plugin before 4.0.2 does not enforce its password reset attempt limit against a server-derived value, keying both the verification code and the per-source attempt counter on client-controlled data, all…

  8. 8.1CVE-2026-18468EPSS 0.4%

    The Login & Register Forms WordPress plugin before 4.0.2 does not bind the password reset verification state to the account being reset or to the party that completed the verification, keying it instead on a value the client controls, all…

  9. 9.8CVE-2026-16299EPSS 0.5%

    The Single Sign On For TNG WordPress plugin before 2.2.0 does not properly validate a password reset request, allowing unauthenticated attackers to reset the password of arbitrary users, including administrators, which could lead to a full…

  10. 8.2CVE-2026-16257EPSS 0.4%

    The Arvow AI SEO Writer WordPress plugin before 1.5.4 does not properly restrict access to one of its REST endpoints, whose only access control can be bypassed by unauthenticated users through type juggling when the Arvow AI SEO Writer Wor…

  11. 8.1CVE-2026-13600EPSS 0.5%

    The AutoNetTV Relay WordPress plugin before 3.0.14 does not perform any capability or authentication check before setting a WordPress administrator authentication cookie during its scheduled content-synchronization task. On server configur…

  12. 2.9CVE-2026-19361EPSS 0.4%

    A flaw has been found in macrozheng mall 0504e86. This vulnerability affects unknown code of the file /sso/getAuthCode of the component mall-portal Module. Executing a manipulation can lead to weak password recovery. The attack may be laun…

  13. 5.5CVE-2026-19342EPSS 0.7%

    A vulnerability was detected in code-projects Task Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument Password results in improper authentication.…

  14. 9.8CVE-2026-15038EPSS 0.8%

    The InfiniteWP Client WordPress plugin before 1.13.6 does not properly verify the site-connection state and the authenticity of requests to its remote-management endpoint on WordPress Multisite installations, allowing unauthenticated attac…

  15. 5.3CVE-2026-16282EPSS 0.3%

    The Appointment Hour Booking WordPress plugin before 1.5.88 does not validate a client-supplied booking price against the server-side configured service price, allowing unauthenticated users to submit an arbitrary final price (including z…

  16. 4.8CVE-2026-16269EPSS 0.4%

    The Newsletters WordPress plugin before 4.16 does not strictly compare its API authentication key, allowing unauthenticated attackers to bypass the API authentication via type juggling and perform privileged actions such as modifying subsc…

  17. 9.6CVE-2026-46409EPSS 0.3%

    OpenYak is a local-first agent runtime for reliable tool-using models, with a desktop workspace built on top. Prior to version 1.1.3, the OpenYak desktop backend binds an HTTP API to `127.0.0.1:<random port>` (commonly 19141) without serve…

  18. 9.8CVE-2026-61808ExploitEPSS 2.5%

    LightRAG provides simple and fast retrieval-augmented generation. Through version 1.5.4, the LightRAG API server binds to all network interfaces with authentication disabled by default, allowing an unauthenticated network attacker to read …

  19. 9.1CVE-2026-48039EPSS 0.6%

    Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.109, `AuthInjectionMiddleware.dispatch()` at `http_auth_integration.py:272` unconditionally forwards unauthenticated Streamabl…

  20. 6.9CVE-2026-11430EPSS 1.0%

    Grav CMS's scheduler-webhook plugin contains an authentication bypass in the webhook token check. When the webhook feature is enabled but no webhookToken is configured, a compound conditional short-circuits and skips token validation, so a…

  21. 7.1CVE-2025-71409EPSS 0.3%

    Lack of authentication for Very High Frequency Data Link messages allows rogue ground stations to inject CPDLC messages leading to unexpected or misleading clearances and potential pilot confusion. This type of attack can be carried out re…

  22. 8.7CVE-2026-17600EPSS 0.4%

    Sonatype Nexus Repository 3 did not immediately terminate a user's active login session or revoke their cached permissions when that user's account was deleted, deactivated, or had its password changed. A user whose account was already log…

  23. 6.9CVE-2026-17599EPSS 0.5%

    Nexus Repository 3 contained an endpoint used to change the administrator account password during initial onboarding. This endpoint did not verify that onboarding was still in progress before allowing the password change, relying instead o…

  24. 9.8CVE-2026-56793EPSS 0.5%

    Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized acces…

  25. 7.5CVE-2026-49007EPSS 0.4%

    By accessing unencrypted information in the device firmware, an attacker can obtain the initial login credentials for the device's web interface.

  26. 8.1CVE-2026-16030EPSS 0.4%

    The MStore API WordPress plugin before 4.21.0 does not correctly verify the cryptographic signature of the token used to authenticate its phone-based login, allowing unauthenticated attackers who know a registered user's phone number to f…

  27. 9.8CVE-2026-14205EPSS 0.5%

    The WP Events Manager WordPress plugin before 2.2.5 does not validate the requested quantity when registering for a paid event and computes the price from the attacker-controlled quantity, allowing any authenticated user to create a comple…

  28. 9.8CVE-2026-14364EPSS 0.5%

    The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to account takeover via improper password reset validation in all versions up to, and including, 1.2.3. This is due to the plugin not properly val…

  29. 10.0CVE-2026-63508EPSS 0.8%

    Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network.

  30. 9.6CVE-2026-62896EPSS 0.7%

    Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.

  31. 10.0CVE-2026-56162EPSS 0.9%

    Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.

  32. 2.1CVE-2026-71326EPSS 0.3%

    Traefik is an open source HTTP reverse proxy and load balancer. From 3.6.11 until 3.6.25 and 3.7.10, Traefik's BasicAuth middleware in pkg/middlewares/auth/basic_auth.go deduplicates concurrent password checks with a singleflight key built…

  33. 8.7CVE-2026-70559EPSS 0.5%

    Dinky's SysConfigController.getAll() handler for GET /api/sysConfig/getAll carries a method-level @SaIgnore annotation that short-circuits the class-level @SaCheckLogin, so the Sa-Token interceptor lets the request through with no session …

  34. 9.8CVE-2026-65400KEVEPSS 1.7%

    An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. An attacker on the network may be able to a…

  35. 8.1CVE-2026-64665EPSS 0.5%

    Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.1 and 6.24.0, when OAuth login was enabled with a provider that does not guarantee verified email addresses, an unauthenticated attacker could sign in as …

  36. 8.8CVE-2026-53984EPSS 0.7%

    Ground Station prior to 0.6.0 contains an unauthenticated database-destruction and arbitrary-data-injection vulnerability in the Socket.IO server's database_backup event handler that allows any unauthenticated network peer to wipe or repla…

  37. 9.8CVE-2026-48087EPSS 0.6%

    OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, the registration handler at `POST /api/auth/register/{userId}` validates the relationship between the WebAu…

  38. 7.4CVE-2026-48084EPSS 0.4%

    OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Versions prior to 1.0.2 don't throttle failed passphrase login attempts. An attacker can submit unlimited wrong passphrase guesses …

  39. 7.4CVE-2026-48079EPSS 0.5%

    OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, when a user navigates to the `/logout` page, the page's server-side load handler deletes the `access_token`…

  40. 5.8CVE-2026-48071EPSS 0.4%

    OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.4, the PIN-type challenge throttle uses `emailHash` as the only key. The throttle rows live in the central `ch…

  41. 8.6CVE-2026-47194EPSS 0.3%

    Frappe is a full-stack web application framework. Prior to 15.108.0 and 16.18.3, temporary magic login link generation can use an attacker-controlled request Host header, allowing a remote attacker to cause emailed login links to point to …

  42. 7.5CVE-2026-16619EPSS 0.3%

    The miniOrange 2FA WordPress plugin before 6.2.8 does not correctly limit the number of second-factor verification attempts, tracking them against a client-supplied identifier that is reissued on every login, allowing an attacker who alrea…

  43. 5.0CVE-2025-12317EPSS 0.3%

    When internal roles are removed from a user within the WSO2 product, the system fails to invalidate any previously issued authentication tokens associated with that user. This vulnerability could allow users to retain their previous acces…

  44. 8.2CVE-2026-5423EPSS 0.6%

    @neo4j/graphql library versions prior to 7.5.6 fail to verify the authenticity of a client-supplied, pre-decoded JWT object passed through GraphQL subscription connectionParams. As a result, any unauthenticated remote client that can open …

  45. 8.7CVE-2026-53985EPSS 0.7%

    Ground Station prior to 0.6.0 contains an unauthenticated denial-of-service vulnerability in the Socket.IO server's service_control event handler that allows any unauthenticated network peer to forcibly terminate the ground-station process…

  46. 8.7CVE-2026-53977EPSS 1.0%

    OpenChamber 1.11.7 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to terminate the server process by sending a POST request to the /api/system/shutdown endpoint, which is registered before the …

  47. 6.5CVE-2026-66451EPSS 0.3%

    Unauthenticated Broken Authentication in WP Event SOlution <= 4.1.9 versions.

  48. 6.5CVE-2026-66425EPSS 0.4%

    Unauthenticated Broken Authentication in Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder <= 1.9.0 versions.

  49. 8.1CVE-2026-65570EPSS 0.4%

    Unauthenticated Bypass Vulnerability in Login with phone number <= 1.8.70 versions.

  50. 8.8CVE-2026-65542EPSS 0.5%

    Unauthenticated Broken Authentication in Super Socializer <= 7.14.5 versions.