CVEs classified under CWE-303, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (50)
CVE-2025-13390 — CVSS 10.0 (critical): The WP Directory Kit plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.4.4 due to…
CVE-2025-12421 — CVSS 9.9 (critical): Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to to verify that the token used…
CVE-2026-59309 — CVSS 9.8 (critical): VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to…
CVE-2025-66489 — CVSS 9.8 (critical): Cal.com is open-source scheduling software. Prior to 5.9.8, A flaw in the login credentials provider allows an attacker to bypass password…
CVE-2024-10127 — CVSS 9.8 (critical): Authentication bypass condition in LDAP authentication in M-Files server versions before 24.11 supported usage of OpenLDAP configurations…
CVE-2024-4985 — CVSS 9.8 (critical): An authentication bypass vulnerability was present in the GitHub Enterprise Server (GHES) when utilizing SAML single sign-on authentication…
CVE-2023-4860 — CVSS 9.6 (critical): Inappropriate implementation in Skia in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromised the renderer…
CVE-2026-28446 — CVSS 9.4 (critical): OpenClaw versions prior to 2026.2.1 with the voice-call extension installed and enabled contain an authentication bypass vulnerability in…
CVE-2024-4332: An authentication bypass vulnerability has been identified in the REST and SOAP API components of Tripwire Enterprise (TE) 9.1.0 when TE is…
CVE-2026-15688: Incorrect Implementation of Authentication Algorithm Vulnerability in Mitsubishi Electric GX Works3 and Motion Control Setting allows a…
CVE-2026-3869: CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and…
CVE-2026-97720 — CVSS 9.1 (critical): Incorrect implementation of JWT/OAuth authentication in Impala executors in Apache Impala versions up to and including 4.5.2 which allows…
CVE-2026-41103 — CVSS 9.1 (critical): Incorrect implementation of authentication algorithm in Microsoft SSO Plugin for Jira & Confluence allows an unauthorized attacker to…
CVE-2026-107279: The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. In…
CVE-2026-49467 — CVSS 8.8 (high): Pingvin Share X is a secure and easy self-hosted file sharing platform. A vulnerability in versions 1.5.0 through 1.18.0 allow an attacker…
CVE-2026-47300 — CVSS 8.8 (high): Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
CVE-2026-50360 — CVSS 8.8 (high): Incorrect implementation of authentication algorithm in Windows SMB Server allows an authorized attacker to elevate privileges over a…
CVE-2026-41053 — CVSS 8.8 (high): Incorrect authentication caching in the team member ship expansion of the Rancher Github authentication provider caused it granting…
CVE-2026-0073 — CVSS 8.8 (high): In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code…
CVE-2024-34722 — CVSS 8.8 (high): In smp_proc_rand of smp_act.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a…
CVE-2023-44420 — CVSS 8.8 (high): D-Link DIR-X3260 prog.cgi Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability. This vulnerability…
CVE-2023-34282 — CVSS 8.8 (high): D-Link DIR-2150 HNAP Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability. This vulnerability allows…
CVE-2023-34274 — CVSS 8.8 (high): D-Link DIR-2150 LoginPassword Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability. This vulnerability…
CVE-2020-15632 — CVSS 8.8 (high): This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-842 3.13B05 routers…
CVE-2025-53782 — CVSS 8.4 (high): Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges…
CVE-2026-73458 — CVSS 8.2 (high): On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially…
CVE-2026-43640 — CVSS 8.1 (high): Bitwarden Server prior to v2026.4.1 does not require master-password re-authentication when retrieving or rotating an organization's SCIM…
CVE-2020-37094 — CVSS 8.1 (high): EspoCRM 5.7.0 prior to 5.9.0 contains an authentication token reuse vulnerability that allows authenticated attackers to bypass two-factor…
CVE-2025-57808 — CVSS 8.1 (high): ESPHome is a system to control microcontrollers remotely through Home Automation systems. In version 2025.8.0 in the ESP-IDF platform…
CVE-2025-44557 — CVSS 8.1 (high): A state machine transition flaw in the Bluetooth Low Energy (BLE) stack of Cypress PSoC4 v3.66 allows attackers to bypass the pairing…
CVE-2026-9854 — CVSS 7.8 (high): A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to…
CVE-2026-9853 — CVSS 7.8 (high): A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read…
CVE-2026-89077 — CVSS 7.5 (high): Incorrect implementation of authentication algorithm vulnerability in Progress MOVEit Transfer (SFTP module). This issue affects MOVEit…
CVE-2026-104939 — CVSS 7.5 (high): Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may…
CVE-2026-101878 — CVSS 7.5 (high): Bitwarden Server 2025.6.0 before 2026.5.0 declares the @ExternalId parameter of the User_ReadBySsoUserOrganizationIdExternalId stored…
CVE-2026-33190 — CVSS 7.5 (high): CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the tsig plugin can be bypassed on non-plain-DNS transports (DoT…
CVE-2025-43727 — CVSS 7.5 (high): Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024…
CVE-2025-23046 — CVSS 7.5 (high): GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.18, if a "Mail servers"…
CVE-2024-3046 — CVSS 7.5 (high): In Eclipse Kura LogServlet component included in versions 5.0.0 to 5.4.1, a specifically crafted request to the servlet can allow an…
CVE-2026-85972 — CVSS 7.4 (high): Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently verify the identity of a Kerberos…
CVE-2026-92873 — CVSS 7.3 (high): Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an…
CVE-2026-11430 — CVSS 7.3 (high): Grav CMS's scheduler-webhook plugin contains an authentication bypass in the webhook token check. When the webhook feature is enabled but…
CVE-2025-43856: immich is a high performance self-hosted photo and video management solution. Prior to 1.132.0, immich is vulnerable to account hijacking…
CVE-2025-14273 — CVSS 7.2 (high): Mattermost versions 11.1.x <= 11.1.0, 11.0.x <= 11.0.5, 10.12.x <= 10.12.3, 10.11.x <= 10.11.7 with the Jira plugin enabled and Mattermost…