cve.bz

OWASP A07:2025 Authentication Failures vulnerabilities, newest first, page 85

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A07:2025 at MITRE.

Its weaknesses: 36

CWE-258, CWE-259, CWE-287, CWE-288, CWE-289, CWE-290, CWE-291, CWE-293, CWE-294, CWE-295, CWE-297, CWE-298, CWE-299, CWE-300, CWE-302, CWE-303, CWE-304, CWE-305, CWE-306, CWE-307, CWE-308, CWE-309, CWE-346, CWE-350, CWE-384, CWE-521, CWE-613, CWE-620, CWE-640, CWE-798, CWE-940, CWE-941, CWE-1390, CWE-1391, CWE-1392, CWE-1393

  1. 9.1CVE-2026-12304EPSS 0.2%

    Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

  2. 8.7CVE-2026-12225EPSS 0.5%

    syracom AG Secure Login (2FA) for Atlassian Jira, Confluence, and Bitbucket 3.4.0.x contains an authentication bypass vulnerability. An attacker with valid credentials for a user account can bypass the two-factor authentication flow by sen…

  3. 5.5CVE-2026-12162EPSS 0.1%

    Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8 allows an attacker to disclose stored social login credentials via a crafted web entry pointing to a provider lookalike domain.

  4. 6.9CVE-2026-9260EPSS 0.2%

    Use of hard-coded cryptographic keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier

  5. 7.1CVE-2026-9259EPSS 0.2%

    Improper validation of server certificates in Canon EOS Network Setting Tool Version 1.5.0 or earlier

  6. 7.1CVE-2026-9258EPSS 0.3%

    Improper validation of SSH host keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier

  7. 9.8CVE-2026-49764EPSS 0.4%

    Unauthenticated Broken Authentication in RegistrationMagic <= 6.0.8.6 versions.

  8. 8.1CVE-2026-48970EPSS 0.4%

    Unauthenticated Broken Authentication in Really Simple SSL <= 9.5.10 versions.

  9. 8.6CVE-2026-47825EPSS 0.2%

    Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxies in certain configuration scenarios. This affects both the WebMVC and WebFlux Gateway Servers. Affected versions: Spring Cloud Gateway 3.…

  10. 7.5CVE-2026-42668EPSS 0.4%

    Unauthenticated Broken Authentication in Email Marketing for WooCommerce by Omnisend <= 1.18.0 versions.

  11. 6.5CVE-2026-42662EPSS 0.3%

    Unauthenticated Bypass Vulnerability in Event Tickets <= 5.27.5 versions.

  12. 8.1CVE-2026-42411EPSS 0.4%

    Unauthenticated Broken Authentication in CloudSecure WP Security <= 1.4.7 versions.

  13. 6.5CVE-2026-42378EPSS 0.4%

    Subscriber Broken Authentication in WP Full Stripe Free <= 8.4.1 versions.

  14. 5.3CVE-2026-40799EPSS 0.3%

    Unauthenticated Broken Authentication in Simple Cloudflare Turnstile <= 1.38.0 versions.

  15. 6.5CVE-2026-40790EPSS 0.3%

    Subscriber Sensitive Data Exposure in WP SMS <= 7.2.1 versions.

  16. 7.1CVE-2026-40785EPSS 0.4%

    Subscriber Broken Authentication in AutomatorWP <= 5.6.7 versions.

  17. 7.5CVE-2026-40781EPSS 0.3%

    Unauthenticated Broken Authentication in ReviewX <= 2.3.6 versions.

  18. 7.1CVE-2026-39450EPSS 0.4%

    Subscriber Broken Authentication in FunnelKit Automations <= 3.7.3 versions.

  19. 7.5CVE-2026-27089EPSS 0.3%

    Unauthenticated Bypass Vulnerability in WpTravelly <= 2.1.7 versions.

  20. 9.8CVE-2026-48114EPSS 0.4%

    Metacat is data repository software that helps researchers preserve, share, and discover data. Versions 2.0.0 and and above contain an unauthenticated SQL injection in the /harvesterRegistration endpoint. HarvesterRegistration.dbInsert() b…

  21. 7.4CVE-2026-45389EPSS 0.2%

    In OCaml-TLS before 2.1.0, the server implementation does insufficient checks of the certificate provided by the client (when doing client authentication), which allows impersonation with certificates that are not meant for client authenti…

  22. 9.1CVE-2026-45388EPSS 0.2%

    In OCaml-TLS before 2.1.0, the client implementation does insufficient checks of the certificate provided by the server, which allows impersonation with certificates that are not meant for server authentication (because of KeyUsage and Ext…

  23. 9.8CVE-2026-36537EPSS 0.5%

    ThingsBoard v4.3.0.1 is vulnerable to an authentication bypass during the OAuth authorization code exchange. The application improperly trusts user-supplied identity data within the user parameter of the /login/oauth2/code/ endpoint. By ma…

  24. 4.3CVE-2026-9595EPSS 0.2%

    Impact: When a user-configured proxy on webpack-dev-server has a broad context (e.g. /) and ws: true, it also intercepts the dev server's own HMR WebSocket and forwards it to the proxy target. This leaks the browser's cookies and Origin he…

  25. 8.8CVE-2026-49062EPSS 0.3%

    Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Engine Faust.Js allows Password Recovery Exploitation. This issue affects Faust.Js: from n/a through 1.8.7.

  26. 8.7CVE-2018-25437EPSS 0.3%

    WordPress CherryFramework Themes 3.1.4 contains an information disclosure vulnerability that allows unauthenticated attackers to download sensitive backup files by accessing the download_backup.php endpoint. Attackers can directly access t…

  27. 9.2CVE-2026-49757EPSS 0.6%

    Authentication Bypass by Spoofing vulnerability in team-alembic AshAuthentication allows account takeover of local users via OAuth2/OIDC sign-in. AshAuthentication's OAuth2 and OIDC family strategies matched the local user by email addres…

  28. 5.3CVE-2026-34025EPSS 0.3%

    The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains an IP restriction bypass vulnerability in the login process. The application restricts user logins based on the IP address associated with a branch location, b…

  29. 8.6CVE-2026-34021EPSS 0.2%

    The Wertheim SafeController 5400, Controller 5400 - AssemblyVersion 6.11.8130.22320, uses RS-485 communication between the server and the microcontroller without cryptographic protection. An attacker with access to the communication path b…

  30. 5.3CVE-2026-44188EPSS 0.3%

    A flaw was found in Ansible Lightspeed. This vulnerability, related to insufficient session expiration, allows a remote attacker to maintain persistent access to the Ansible Lightspeed instance. If an attacker exfiltrates a valid OAuth (Op…

  31. 9.3CVE-2026-12183EPSS 0.4%

    Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentication vulnerability (CWE-287) in the system configuration module.

  32. 9.4CVE-2026-11624EPSS 0.2%

    The Model Context Protocol has a security warning advising servers to validate the "Origin" header on all incoming connections to prevent DNS rebinding attacks. Prior to the v0.25.0 release, users had no way to validate the origin's host. …

  33. 8.7CVE-2026-53868EPSS 0.3%

    Capgo before 12.128.2 contains a denial of service vulnerability allowing attackers to register accounts using arbitrary email addresses without verification, then initiate deletion to lock emails in pending deletion state. Attackers can p…

  34. 7.4CVE-2026-53833EPSS 0.2%

    OpenClaw before 2026.4.29 contains an authorization bypass vulnerability in the QQBot streaming command that allows authenticated senders to mutate configuration without explicit allowFrom restrictions. Attackers can modify QQBot streaming…

  35. 7.4CVE-2026-53832EPSS 0.1%

    OpenClaw before 2026.5.18 contains an identity header validation vulnerability allowing local same-host callers to forge trusted-proxy identity headers. Attackers with access to the proxy-facing Gateway port can supply forged identity head…

  36. 6.0CVE-2026-53830EPSS 0.2%

    OpenClaw before 2026.4.22 contains a webhook secret revocation bypass vulnerability allowing callers with old Slack and Zalo webhook secrets to remain active after secrets.reload. Attackers can exploit the stale-secret window to deliver we…

  37. 6.0CVE-2026-53824EPSS 0.2%

    OpenClaw before 2026.4.24 contains a token revocation vulnerability allowing callers with revoked slash tokens to continue executing commands during monitor refresh windows. Attackers can exploit stale token acceptance to invoke slash comm…

  38. 8.6CVE-2026-53823EPSS 0.2%

    OpenClaw before 2026.5.3 contains a privilege escalation vulnerability in the allowFrom feature that binds to mutable Slack display names. Attackers with Slack account access can change display name metadata to match policy entries, potent…

  39. 8.1CVE-2026-45013EPSS 0.3%

    ApostropheCMS is an open-source Node.js content management system. Versions up to and including 4.29.0 have a password reset flow that constructs the reset URL using `req.hostname`, which is derived directly from the attacker-controlled HT…

  40. 8.7CVE-2026-50287EPSS 0.4%

    AgenticMail gives AI agents real email addresses and phone numbers. Prior to version 0.9.27, @agenticmail/mcp exposes a Streamable HTTP transport when started with --http or MCP_HTTP=1. In that mode, the /mcp endpoint accepts requests with…

  41. 7.2CVE-2026-53981EPSS 0.3%

    Cap-go prior to 12.128.2 contains an account takeover vulnerability in its email change mechanism that allows an attacker with temporary authenticated session access to change the registered email address without re-authentication such as …

  42. 6.5CVE-2026-5792EPSS 0.2%

    Authentication bypass by spoofing vulnerability in Hedef Media Promotion Interactive Media Marketing Inc. Related Marketing Cloud (RMC) allows Brute Force. This issue affects Related Marketing Cloud (RMC): through 12052026.

  43. 7.4CVE-2026-50091EPSS 0.3%

    Aqara Home Android (com.lumiunited.aqarahome) 6.0.0 (and white-label clients embedding the same liblumidevsdk.so) uses hard-coded cryptographic keys, which is an instance of "CWE-321: Use of Hard-coded Cryptographic Key" and has an estimat…

  44. 9.8CVE-2026-50085EPSS 0.4%

    The Aqara Board service (op-test.aqara.com) accepts arbitrary MQTT command payloads, and forwards them to the platfom's HiveMQ broker without authentication. This is an instance of "CWE-306: Missing Authentication for Critical Function" an…

  45. 9.8CVE-2026-50083EPSS 0.4%

    The Aqara IAM/SSO Gateway (gw-builder.aqara.com) used a hardcoded OAuth client credential, which is an instance of "CWE-798: Use of Hard-coded Credentials." This issue has an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N (…

  46. 5.3CVE-2026-50082EPSS 0.3%

    The Aqara Cloud Developer Portal (developer.aqara.com) issued a developer token to any email address supplied by the attacker. This is an instance of "CWE-306: Missing Authentication for Critical Function" with an estimated CVSS of CVSS:3.…

  47. 10.0CVE-2026-47691EPSS 0.4%

    Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's `DnsResolveContext` insufficiently validates the bailiwick of NS records, enabling DNS Cach…

  48. 5.3CVE-2026-8694EPSS 0.2%

    Improper access control in Devolutions PowerShell Universal 2026.1.7 and earlier allows an unauthenticated remote attacker to obtain the OpenAPI specification of user-defined REST endpoints.

  49. 9.8CVE-2026-6853EPSS 0.3%

    Improper restriction of excessive authentication attempts vulnerability in Başbelen Group Food Cafe Businesses Industry and Trade Ltd. Co. Pause+ Mobile App allows Authentication Bypass. This issue affects Pause+ Mobile App: from v1.0.6 b…

  50. 10.0CVE-2026-45674EPSS 0.3%

    Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS response…