Skip to content
Noroxi

CWE-305 · 158 records

Authentication Bypass by Primary Weakness

CVEs in this class

158 records

  • CVE-2025-31161
    99Now

    CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unless a DMZ proxy insta

    CriticalCVSS 9.8KEVWeaponizedEPSS 100%

    crushftp · crushftpApr 3, 2025

  • CVE-2026-81578
    91Now

    PaperCut MF/NG: Authentication Bypass

    HighCVSS 8.8KEVWeaponizedEPSS 86%

    papercut · papercut mfAug 28, 2026

  • CVE-2020-10923
    60This week

    This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 r

    HighCVSS 8.8WeaponizedEPSS 85%

    netgear · r6700 firmwareJul 28, 2020

  • CVE-2023-34124
    54Plan

    The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass.

    CriticalCVSS 9.8WeaponizedEPSS 50%

    sonicwall · analyticsJul 12, 2023

  • CVE-2025-32011
    46Plan

    KUNBUS Revolution Pi Authentication Bypass by Primary Weakness

    CriticalCVSS 9.3No exploitEPSS 29%

    kunbus gmbh · revolution pi pictoryMay 1, 2025

  • CVE-2022-2651
    44Plan

    Authentication Bypass by Primary Weakness in bookwyrm-social/bookwyrm

    CriticalCVSS 9.8Proof of conceptEPSS 16%

    joinbookwyrm · bookwyrmAug 4, 2022

  • CVE-2023-0777
    44Plan

    Authentication Bypass by Primary Weakness in modoboa/modoboa

    CriticalCVSS 9.8Proof of conceptEPSS 15%

    modoboa · modoboaFeb 10, 2023

  • CVE-2023-28126
    43Plan

    An authentication bypass vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to gain access by exploitin

    MediumCVSS 5.9No exploitEPSS 67%

    ivanti · avalancheMay 9, 2023

  • CVE-2021-26102
    42Plan

    A relative path traversal vulnerability (CWE-23) in FortiWAN version 4.5.7 and below, 4.4 all versions may allow a remote non-authenticated

    CriticalCVSS 9.1Proof of conceptEPSS 20%

    fortinet · fortiwanDec 19, 2024

  • CVE-2025-13915
    42Plan

    Authentication bypass in IBM API Connect

    CriticalCVSS 9.8No exploitEPSS 9%

    ibm · api connectDec 26, 2025

  • CVE-2024-20674
    40Plan

    Windows Kerberos Security Feature Bypass Vulnerability

    HighCVSS 8.8Proof of conceptEPSS 17%

    microsoft · windows 10 1507Jan 9, 2024

  • CVE-2022-0547
    40Plan

    OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes u

    CriticalCVSS 9.8No exploitEPSS 4%

    openvpn · openvpnMar 18, 2022

  • CVE-2024-1403
    40Plan

    Authentication Bypass in OpenEdge Authentication Gateway and AdminServer

    CriticalCVSS 9.8Proof of conceptEPSS 3%

    progress · openedgeFeb 27, 2024

  • CVE-2025-4320
    40Plan

    Information Disclosure in Birebirsoft's Sufirmam

    CriticalCVSS 10.0No exploitEPSS 1%

    birebirsoft software and technology solutions · sufirmamJan 23, 2026

  • CVE-2020-24683
    39Monitor

    Authentication Bypass in Symphony Plus

    CriticalCVSS 9.8No exploitEPSS 1%

    abb · symphony \+ historianDec 22, 2020

  • CVE-2020-15787
    39Monitor

    A vulnerability has been identified in SIMATIC HMI Unified Comfort Panels (All versions <= V16).

    CriticalCVSS 9.8No exploitEPSS 1%

    siemens · simatic hmi united comfort panels firmwareSep 9, 2020

  • CVE-2021-21403
    39Monitor

    Authentication Bypass by Primary Weakness in github.com/kongchuanhujiao/server

    CriticalCVSS 9.8No exploitEPSS 1%

    kongchuanhujiao project · kongchuanhujiaoMar 26, 2021

  • CVE-2024-50478
    39Monitor

    WordPress 1-Click Login: Passwordless Authentication plugin 1.4.5 - Broken Authentication vulnerability

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    swoopnow · 1-click login\Oct 28, 2024

  • CVE-2023-1307
    39Monitor

    Authentication Bypass by Primary Weakness in froxlor/froxlor

    CriticalCVSS 9.8No exploitEPSS 1%

    froxlor · froxlorMar 9, 2023

  • CVE-2023-34137
    39Monitor

    SonicWall GMS and Analytics CAS Web Services application use static values for authentication without proper checks leading to authenticatio

    CriticalCVSS 9.8No exploitEPSS 1%

    sonicwall · analyticsJul 12, 2023

  • CVE-2024-1202
    39Monitor

    Authentication Bypass in XPodas' Octopod

    CriticalCVSS 9.8No exploitEPSS 1%

    xpodas · octopodMar 20, 2024

  • CVE-2026-19349
    39Monitor

    Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2

    CriticalCVSS 9.8No exploitEPSS 1%

    Aug 16, 2026

  • CVE-2023-1833
    39Monitor

    Authentication Bypass in Redline Router

    CriticalCVSS 9.8No exploitEPSS 1%

    redline · router firmwareApr 14, 2023

  • CVE-2021-28503
    39Monitor

    In Arista's EOS software affected releases, eAPI might skip re-evaluating user credentials when certificate based authentication is used, which allows remote at

    CriticalCVSS 9.8No exploitEPSS 1%

    arista · eosFeb 4, 2022

  • CVE-2023-6153
    39Monitor

    Authentication Bypass in TeoSOFT Software TeoBASE

    CriticalCVSS 9.8No exploitEPSS 1%

    teosoft software · teobaseMar 27, 2024

All vulnerability classes