CWE-287

25 published stories · 7 KEV

CVE-2026-105133 — Ahsay AhsayCBS Improper Authentication Vulnerability (60/100)
CVE-2026-101077 — CVE-2026-101077 — A flaw has been found in Netcore NR289-GE 1.4.5102. (36/100)
CVE-2026-97063 — CVE-2026-97063 — X-SpringBoot through 6.0 returns login verification codes in HTTP responses from unauthenticated endpoints GE… (36/100)
CVE-2025-43936 — CVE-2025-43936 — Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication vulnerability. (35/100)
CVE-2026-42018 — JFrog Artifactory Improper Authentication Vulnerability (62/100)
CVE-2026-88007 — CVE-2026-88007 — Traefik is an open source HTTP reverse proxy and load balancer. (35/100)
CVE-2026-86426 — CVE-2026-86426 — LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenti… (35/100)
CVE-2026-18221 — CVE-2026-18221 — IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to gain unauthorized access due to improper valida… (38/100)
CVE-2026-85595 — CVE-2026-85595 — Traefik versions before v2.11.55 and versions v3.0.0 through v3.7.10 contain an authentication bypass vulnera… (36/100)
CVE-2026-82329 — JFrog Artifactory Improper Authentication Vulnerability (74/100)
CVE-2026-59822 — BerriAI LiteLLM Improper Authentication Vulnerability (65/100)
CVE-2023-49105 — ownCloud Improper Authentication Vulnerability (87/100)
CVE-2026-79787 — CVE-2026-79787 — Alluxio's S3 REST proxy fails to verify AWS Signature Version 4 signatures in its default configuration, allo… (36/100)
CVE-2026-17000 — CVE-2026-17000 — IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to… (38/100)
CVE-2026-65400 — Apple macOS Improper Authentication Vulnerability (68/100)
CVE-2026-17197 — CVE-2026-17197 — IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to bypass security restrictions due to improper va… (38/100)
CVE-2026-16867 — CVE-2026-16867 — IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to access server resources with the privileges of… (38/100)
CVE-2026-17101 — CVE-2026-17101 — IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code or obtain sensitive info… (37/100)
CVE-2026-56793 — CVE-2026-56793 — Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnera… (38/100)
CVE-2026-62825 — microsoft azure key vault: Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a netwo… (31/100)
CVE-2026-10697 — CVE-2026-10697 — Improper Authentication vulnerability in Progress MOVEit Transfer. (38/100)
CVE-2026-16232 — Check Point SmartConsole Improper Authentication Vulnerability (84/100)
CVE-2026-12341 — sailpoint identityiq: This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated attacker unauthorized acc… (38/100)
CVE-2026-57216 — broadcom rabbitmq server: RabbitMQ is a messaging and streaming broker. (39/100)
CVE-2026-40139 — CVE-2026-40139 — A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Supp… (35/100)