CWE-288 · 656 kayıt
Authentication Bypass Using an Alternate Path or Channel
Bu sınıftaki CVE’ler
656 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
100Hemen | CVE-2024-1709Silahlaştırılmış | Authentication bypass using an alternate path or channelconnectwise · screenconnect · CWE-288 | Kritik10,0 | KEV | %100,0 | 21 Şub 2024 |
99Hemen | CVE-2023-42793Silahlaştırılmış | In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possiblejetbrains · teamcity · CWE-288 | Kritik9,8 | KEV | %100,0 | 19 Eyl 2023 |
99Hemen | CVE-2024-27198Silahlaştırılmış | In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possiblejetbrains · teamcity · CWE-288 | Kritik9,8 | KEV | %99,9 | 4 Mar 2024 |
98Hemen | CVE-2025-2747Silahlaştırılmış | Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication Bypasskentico · xperience · CWE-288 | Kritik9,8 | KEV | %97,2 | 24 Mar 2025 |
98Hemen | CVE-2023-46747Silahlaştırılmış | BIG-IP Configuration utility unauthenticated remote code execution vulnerabilityf5 · big-ip access policy manager · CWE-288 | Kritik9,8 | KEV | %96,5 | 26 Eki 2023 |
97Hemen | CVE-2024-55591Silahlaştırılmış | An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and Fortifortinet · fortiproxy · CWE-288 | Kritik9,8 | KEV | %94,1 | 14 Oca 2025 |
97Hemen | CVE-2020-10148Silahlaştırılmış | SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commandssolarwinds · orion platform · CWE-288 | Kritik9,8 | KEV | %92,0 | 29 Ara 2020 |
96Hemen | CVE-2026-23760Silahlaştırılmış | SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset APIsmartertools · smartermail · CWE-288 | Kritik9,3 | KEV | %96,5 | 22 Oca 2026 |
96Hemen | CVE-2026-20079Silahlaştırılmış | Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerabilitycisco · secure firewall management center · CWE-288 | Kritik10,0 | KEV | %88,2 | 4 Mar 2026 |
95Hemen | CVE-2026-24858Silahlaştırılmış | An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.fortinet · fortianalyzer · CWE-288 | Kritik9,8 | KEV | %85,8 | 27 Oca 2026 |
91Hemen | CVE-2025-34026Silahlaştırılmış | Versa Concerto Actuator Authentication Bypass Information Leakversa-networks · concerto · CWE-288 | Kritik9,2 | KEV | %81,9 | 21 May 2025 |
91Hemen | CVE-2025-2746Silahlaştırılmış | Kentico Xperience <= 13.0.172 Staging Sync Server Digest Password Authentication Bypasskentico · xperience · CWE-288 | Kritik9,8 | KEV | %73,0 | 24 Mar 2025 |
90Hemen | CVE-2025-4427Silahlaştırılmış | Authentication Bypassivanti · endpoint manager mobile · CWE-288 | Yüksek7,5 | KEV | %99,9 | 13 May 2025 |
86Hemen | CVE-2026-1603Silahlaştırılmış | An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific storedivanti · endpoint manager · CWE-288 | Yüksek7,5 | KEV | %87,9 | 10 Şub 2026 |
74Bu hafta | CVE-2023-20269Silahlaştırılmış | A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTDcisco · adaptive security appliance software · CWE-288 | Kritik9,1 | KEV | %25,5 | 6 Eyl 2023 |
69Bu hafta | CVE-2026-19490Silahlaştırılmış | NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490citrix · netscaler application delivery controller · CWE-288 | Kritik9,3 | KEV | %7,0 | 19 Ağu 2026 |
66Bu hafta | CVE-2026-18577Silahlaştırılmış | Incomplete patch leads to administrative account takeovern-able · n-central · CWE-288 | Yüksek8,2 | KEV | %14,6 | 2 Ağu 2026 |
64Bu hafta | CVE-2024-10924Silahlaştırılmış | Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypassreally-simple-plugins · really simple security · CWE-288 | Kritik9,8 | — | %82,2 | 15 Kas 2024 |
64Bu hafta | CVE-2026-18556Silahlaştırılmış | Unauthenticated administrative account takeovern-able · n-central · CWE-288 | Yüksek8,2 | KEV | %7,9 | 1 Ağu 2026 |
64Bu hafta | CVE-2025-24472Silahlaştırılmış | An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS 7.0.0 through 7.0.16 and FortiProxy 7.fortinet · fortiproxy · CWE-288 | Yüksek8,1 | KEV | %7,2 | 11 Şub 2025 |
63Bu hafta | CVE-2024-56325Kavram kanıtı | Apache Pinot: Authentication bypass issue. If the path does not contain / and contain . authentication is not requiredapache · pinot · CWE-288 | Kritik9,8 | — | %80,2 | 1 Nis 2025 |
59Planlayın | CVE-2023-2732Kavram kanıtı | MStore API <= 3.9.2 - Authentication Bypassinspireui · mstore api · CWE-288 | Kritik9,8 | — | %67,5 | 24 May 2023 |
57Planlayın | CVE-2022-35869İstismar yok | This vulnerability allows remote attackers to bypass authentication on affected installations of Inductive Automation Ignition 8.1.15 (b2022inductiveautomation · ignition · CWE-288 | Kritik9,8 | — | %60,3 | 25 Tem 2022 |
55Planlayın | CVE-2024-23917Kavram kanıtı | In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possiblejetbrains · teamcity · CWE-288 | Kritik9,8 | — | %54,0 | 6 Şub 2024 |
55Planlayın | CVE-2026-10523Kavram kanıtı | An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthentivanti · standalone sentry · CWE-288 | Kritik9,8 | — | %53,1 | 9 Haz 2026 |
- CVE-2024-1709100Hemen
Authentication bypass using an alternate path or channel
KritikCVSS 10,0KEVSilahlaştırılmışEPSS %100connectwise · screenconnect21 Şub 2024
- CVE-2023-4279399Hemen
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100jetbrains · teamcity19 Eyl 2023
- CVE-2024-2719899Hemen
In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100jetbrains · teamcity4 Mar 2024
- CVE-2025-274798Hemen
Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication Bypass
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %97kentico · xperience24 Mar 2025
- CVE-2023-4674798Hemen
BIG-IP Configuration utility unauthenticated remote code execution vulnerability
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %97f5 · big-ip access policy manager26 Eki 2023
- CVE-2024-5559197Hemen
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and Forti
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %94fortinet · fortiproxy14 Oca 2025
- CVE-2020-1014897Hemen
SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %92solarwinds · orion platform29 Ara 2020
- CVE-2026-2376096Hemen
SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API
KritikCVSS 9,3KEVSilahlaştırılmışEPSS %97smartertools · smartermail22 Oca 2026
- CVE-2026-2007996Hemen
Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability
KritikCVSS 10,0KEVSilahlaştırılmışEPSS %88cisco · secure firewall management center4 Mar 2026
- CVE-2026-2485895Hemen
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %86fortinet · fortianalyzer27 Oca 2026
- CVE-2025-3402691Hemen
Versa Concerto Actuator Authentication Bypass Information Leak
KritikCVSS 9,2KEVSilahlaştırılmışEPSS %82versa-networks · concerto21 May 2025
- CVE-2025-274691Hemen
Kentico Xperience <= 13.0.172 Staging Sync Server Digest Password Authentication Bypass
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %73kentico · xperience24 Mar 2025
- CVE-2025-442790Hemen
Authentication Bypass
YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %100ivanti · endpoint manager mobile13 May 2025
- CVE-2026-160386Hemen
An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored
YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %88ivanti · endpoint manager10 Şub 2026
- CVE-2023-2026974Bu hafta
A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD
KritikCVSS 9,1KEVSilahlaştırılmışEPSS %25cisco · adaptive security appliance software6 Eyl 2023
- CVE-2026-1949069Bu hafta
NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490
KritikCVSS 9,3KEVSilahlaştırılmışEPSS %7citrix · netscaler application delivery controller19 Ağu 2026
- CVE-2026-1857766Bu hafta
Incomplete patch leads to administrative account takeover
YüksekCVSS 8,2KEVSilahlaştırılmışEPSS %15n-able · n-central2 Ağu 2026
- CVE-2024-1092464Bu hafta
Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass
KritikCVSS 9,8SilahlaştırılmışEPSS %82really-simple-plugins · really simple security15 Kas 2024
- CVE-2026-1855664Bu hafta
Unauthenticated administrative account takeover
YüksekCVSS 8,2KEVSilahlaştırılmışEPSS %8n-able · n-central1 Ağu 2026
- CVE-2025-2447264Bu hafta
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS 7.0.0 through 7.0.16 and FortiProxy 7.
YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %7fortinet · fortiproxy11 Şub 2025
- CVE-2024-5632563Bu hafta
Apache Pinot: Authentication bypass issue. If the path does not contain / and contain . authentication is not required
KritikCVSS 9,8Kavram kanıtıEPSS %80apache · pinot1 Nis 2025
- CVE-2023-273259Planlayın
MStore API <= 3.9.2 - Authentication Bypass
KritikCVSS 9,8Kavram kanıtıEPSS %68inspireui · mstore api24 May 2023
- CVE-2022-3586957Planlayın
This vulnerability allows remote attackers to bypass authentication on affected installations of Inductive Automation Ignition 8.1.15 (b2022
KritikCVSS 9,8İstismar yokEPSS %60inductiveautomation · ignition25 Tem 2022
- CVE-2024-2391755Planlayın
In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible
KritikCVSS 9,8Kavram kanıtıEPSS %54jetbrains · teamcity6 Şub 2024
- CVE-2026-1052355Planlayın
An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthent
KritikCVSS 9,8Kavram kanıtıEPSS %53ivanti · standalone sentry9 Haz 2026