CWE-288 · Authentication Bypass Using an Alternate Path or Channel

628 CVEs classified under CWE-288 (Authentication Bypass Using an Alternate Path or Channel). Browse by severity and year.

Top CVEs for CWE-288
CVESeverityScorePublishedSummary
CVE-2026-53576Critical10.02026-06-26Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, the authentication filter for the REST API (@Filter("/api/v1/**")) t…
CVE-2026-53622Critical10.02026-06-23Traefik is an HTTP reverse proxy and load balancer. Prior to 3.7.3, there is a critical vulnerability in Traefik's HTTP/3 (QUIC) TLS configuration selection th…
CVE-2026-48491Critical10.02026-06-23Traefik is an HTTP reverse proxy and load balancer. From 3.7.0 until 3.7.3, there is a high severity vulnerability in Traefik's domain-fronting protection (SNI…
CVE-2026-48020Critical10.02026-06-23Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.48, 3.6.19, and 3.7.3, there is a high severity vulnerability in Traefik's StripPrefix middle…
CVE-2026-20079Critical10.02026-03-04A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authen…
CVE-2024-11639Critical10.02024-12-10An authentication bypass in the admin web console of Ivanti CSA before 5.0.3 allows a remote unauthenticated attacker to gain administrative access
CVE-2024-10081Critical10.02024-11-06CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication bypass occurs when the A…
CVE-2024-2973Critical10.02024-06-27An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router or conductor running with a redundant peer a…
CVE-2024-2013Critical10.02024-06-11An authentication bypass vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway component that if exploited allows attackers without any access to in…
CVE-2024-1709Critical10.02024-02-21ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel vulnerability, which may allow an atta…
CVE-2023-42770Critical10.02023-11-21 Red Lion SixTRAK and VersaTRAK Series RTUs with authenticated users enabled (UDR-A) any Sixnet UDR message will meet an authentication challenge over UDP/IP…
CVE-2026-10523Critical9.92026-06-09An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to…
CVE-2026-66465Critical9.82026-08-13Unauthenticated Broken Authentication in Cartify <= 1.3.0.1 versions.
CVE-2026-66453Critical9.82026-08-13Unauthenticated Broken Authentication in Salon booking system <= 10.30.26 versions.
CVE-2026-24254Critical9.82026-08-04NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could cause an out-of-bounds write. A successful exploit…
CVE-2026-15014Critical9.82026-07-28The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to Authentication Bypass leading to…
CVE-2026-61884Critical9.82026-07-24The web management interface of Tycon Systems TPDIN-Monitor-WEB2  does not perform server-side validation of credentials during the login process. By submitti…
CVE-2026-57807Critical9.82026-07-10Authentication Bypass Using an Alternate Path or Channel vulnerability in miniOrange Security Software Pvt Ltd. OAuth Single Sign On - SSO (OAuth Client) allow…
CVE-2019-25763Critical9.82026-06-20WordPress Ultimate Addons for Beaver Builder 1.2.4.1 contains an authentication bypass vulnerability that allows attackers to gain unauthorized access by explo…
CVE-2026-49767Critical9.82026-06-17Unauthenticated Broken Authentication in wpForo Forum <= 3.1.0 versions.
All CVEs classified under CWE-288 — newest first (page 1 of 7)
CVESeverityScorePublishedSummary
CVE-2026-66465Critical9.82026-08-13Unauthenticated Broken Authentication in Cartify <= 1.3.0.1 versions.
CVE-2026-66453Critical9.82026-08-13Unauthenticated Broken Authentication in Salon booking system <= 10.30.26 versions.
CVE-2026-70468High8.12026-08-12A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 t…
CVE-2026-18636Medium6.82026-08-11The Velociraptor gRPC API has a VFSGetBuffer endpoint which allows reading files from the datastore. To prevent users from reading sensitive files or accessing…
CVE-2026-72691High7.52026-08-10An authentication bypass vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to mint MASTER_KEY-signed file a…
CVE-2026-66451Medium6.52026-08-06Unauthenticated Broken Authentication in WP Event SOlution <= 4.1.9 versions.
CVE-2026-66425Medium6.52026-08-06Unauthenticated Broken Authentication in Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder <= 1.9.0 versions.
CVE-2026-65542High8.82026-08-06Unauthenticated Broken Authentication in Super Socializer <= 7.14.5 versions.
CVE-2026-24254Critical9.82026-08-04NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could cause an out-of-bounds write. A successful exploit…
CVE-2026-580732026-08-04A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent andobtain that agent's credentials.
CVE-2026-68584High8.62026-08-03SiYuan versions before v3.7.3 contain an authentication bypass vulnerability in publish mode where content-returning endpoints getHeadingChildrenDOM, getHeadin…
CVE-2026-185742026-08-03An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) could allow an unauthenticat…
CVE-2026-335912026-08-03A vulnerability in Wapt Server before version 2.6.1.17813 allows a  remote unauthenticated attacker to bypass security restriction using a specially crafted pa…
CVE-2026-18577High8.12026-08-02An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1
CVE-2026-18556High7.42026-08-01Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through…
CVE-2026-67337Medium6.52026-08-01better-auth versions before 1.4.9 contain a two-factor authentication bypass vulnerability when session.cookieCache is enabled. Attackers with valid primary cr…
CVE-2026-83382026-07-29A Spring Security authentication and authorization bypass exists in Coverity Connect versions between 2023.6.0 and 2026.3.0. An unauthenticated malicious threa…
CVE-2026-12703High8.02026-07-29TeamViewer Full Client and Host for macOS before version 15.80 contain a business logic error that can allow an authenticated attacker to bypass a configured 2…
CVE-2026-18047Medium6.52026-07-28A flaw was found in Dogtag PKI's ACME responder where the web.xml security constraints use exact URL pattern matching for admin-only enable/disable endpoints…
CVE-2026-15014Critical9.82026-07-28The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to Authentication Bypass leading to…
CVE-2026-61884Critical9.82026-07-24The web management interface of Tycon Systems TPDIN-Monitor-WEB2  does not perform server-side validation of credentials during the login process. By submitti…
CVE-2026-59545High8.12026-07-23Unauthenticated Broken Authentication in miniOrange Discord Integration <= 2.2.4 versions.
CVE-2026-59524Medium6.52026-07-23Unauthenticated Broken Authentication in Easy Digital Downloads <= 3.6.7 versions.
CVE-2026-220492026-07-22ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulnerability related to the Relying Party ID…
CVE-2026-439452026-07-21FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Versions 1.2.11 until 1.3.1 allow an unauthenticated remote attacker to achieve Full…
CVE-2026-614252026-07-20Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0 - The Joomla extension Gridbox is vulnerable an authenticated bypass, potentially lea…
CVE-2026-393852026-07-20Frappe LMS is an open source learning management system. In version 2.51.0 and earlier, a user could bypass payment validation for courses by using unrelated b…
CVE-2026-16198Medium5.62026-07-19A vulnerability was detected in Sipeed PicoClaw up to 0.2.9. The impacted element is an unknown function of the file web/backend/middleware/access_control.go o…
CVE-2026-57980Medium5.42026-07-17Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a network.
CVE-2026-47481Medium6.52026-07-14NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an authentication bypass through an alternative path or channel…
CVE-2026-57698Medium6.52026-07-13Authentication Bypass Using an Alternate Path or Channel vulnerability in VillaTheme Abandoned Cart Recovery for WooCommerce woo-abandoned-cart-recovery allows…
CVE-2026-57697High7.52026-07-13Authentication Bypass Using an Alternate Path or Channel vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Passwo…
CVE-2026-57807Critical9.82026-07-10Authentication Bypass Using an Alternate Path or Channel vulnerability in miniOrange Security Software Pvt Ltd. OAuth Single Sign On - SSO (OAuth Client) allow…
CVE-2026-36028Medium6.82026-07-08A protection mechanism failure in the Code 27 Companion Hub allows an attacker with physical access to completely bypass kiosk restrictions via a factory reset
CVE-2026-578672026-07-07MicroRealEstate allows adversaries to bypass authentication due to a lack of token state management. This would permit adversaries targeting MicroRealEstate de…
CVE-2026-5268Critical9.12026-07-06An authentication bypass vulnerability exists in the default SFTP server component utilized across the Ciena products listed. This vulnerability allows a remot…
CVE-2025-13475Low3.52026-07-04In multi-tenanted deployments, the application consent management mechanism fails to correctly isolate consent scopes between tenants. Consent granted by a use…
CVE-2026-58517Medium4.32026-07-01Improper neutralization of input terminators vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension allows Authentication Bypass. This iss…
CVE-2026-12579High7.42026-07-01AS228T with Authentication Bypass Vulnerability
CVE-2026-20460Medium5.32026-07-01In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure, if a UE has connected…
CVE-2026-20459Medium5.32026-07-01In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base…
CVE-2026-58172Critical9.12026-06-30Ocelot through 24.1.0, fixed in commit f156fd4, contains a security control bypass vulnerability that allows denied clients to circumvent IP-based access restr…
CVE-2026-53576Critical10.02026-06-26Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, the authentication filter for the REST API (@Filter("/api/v1/**")) t…
CVE-2026-56029High7.52026-06-26Unauthenticated Broken Authentication in CorvusPay WooCommerce Payment Gateway <= 2.7.4 versions.
CVE-2026-556662026-06-24Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7, and 7.10.13, in apps/mete…
CVE-2026-335432026-06-24FOSSBilling is a free, open-source billing and client management system. Versions 0.7.2 and prior expose a guest API endpoint, /api/guest/staff/create, intende…
CVE-2026-53622Critical10.02026-06-23Traefik is an HTTP reverse proxy and load balancer. Prior to 3.7.3, there is a critical vulnerability in Traefik's HTTP/3 (QUIC) TLS configuration selection th…
CVE-2026-48491Critical10.02026-06-23Traefik is an HTTP reverse proxy and load balancer. From 3.7.0 until 3.7.3, there is a high severity vulnerability in Traefik's domain-fronting protection (SNI…
CVE-2026-48020Critical10.02026-06-23Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.48, 3.6.19, and 3.7.3, there is a high severity vulnerability in Traefik's StripPrefix middle…
CVE-2026-56243High8.12026-06-23Capgo before 12.128.2 contains a security control bypass vulnerability where the PostgREST/RLS plane accepts plaintext API keys through the capgkey header desp…
CVE-2020-37255High7.52026-06-20WordPress Time Capsule Plugin 1.21.16 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain administrative access by se…
CVE-2019-25763Critical9.82026-06-20WordPress Ultimate Addons for Beaver Builder 1.2.4.1 contains an authentication bypass vulnerability that allows attackers to gain unauthorized access by explo…
CVE-2026-50194High8.22026-06-17Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. When Steeltoe management endpoints…
CVE-2026-54817Medium6.52026-06-17Authentication Bypass Using an Alternate Path or Channel vulnerability in FluxBuilder MStore API allows Password Recovery Exploitation. This issue affects MSt…
CVE-2026-54804High7.62026-06-17Subscriber Broken Authentication in Melhor Envio <= 2.16.3 versions.
CVE-2026-49767Critical9.82026-06-17Unauthenticated Broken Authentication in wpForo Forum <= 3.1.0 versions.
CVE-2026-49071Medium6.52026-06-17Unauthenticated Broken Authentication in WooCommerce Dropshipping <= 5.2.4 versions.
CVE-2026-42629High8.82026-06-17Unauthenticated Broken Authentication in PowerPack Pro for Elementor < v2.13.0 versions.
CVE-2026-25439High8.12026-06-17Unauthenticated Broken Authentication in Booknetic <= 4.8.5 versions.
CVE-2026-122252026-06-16syracom AG Secure Login (2FA) for Atlassian Jira, Confluence, and Bitbucket 3.4.0.x contains an authentication bypass vulnerability. An attacker with valid cre…
CVE-2026-49764Critical9.82026-06-15Unauthenticated Broken Authentication in RegistrationMagic <= 6.0.8.6 versions.
CVE-2026-48970High8.12026-06-15Unauthenticated Broken Authentication in Really Simple SSL <= 9.5.10 versions.
CVE-2026-42668High7.52026-06-15Unauthenticated Broken Authentication in Email Marketing for WooCommerce by Omnisend <= 1.18.0 versions.
CVE-2026-42411High8.12026-06-15Unauthenticated Broken Authentication in CloudSecure WP Security <= 1.4.7 versions.
CVE-2026-42378Medium6.52026-06-15Subscriber Broken Authentication in WP Full Stripe Free <= 8.4.1 versions.
CVE-2026-40799Medium5.32026-06-15Unauthenticated Broken Authentication in Simple Cloudflare Turnstile <= 1.38.0 versions.
CVE-2026-40790Medium6.52026-06-15Subscriber Sensitive Data Exposure in WP SMS <= 7.2.1 versions.
CVE-2026-40785High7.12026-06-15Subscriber Broken Authentication in AutomatorWP <= 5.6.7 versions.
CVE-2026-40781High7.52026-06-15Unauthenticated Broken Authentication in ReviewX <= 2.3.6 versions.
CVE-2026-39450High7.12026-06-15Subscriber Broken Authentication in FunnelKit Automations <= 3.7.3 versions.
CVE-2026-49062High8.82026-06-15Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Engine Faust.Js allows Password Recovery Exploitation. This issue affects Faust.J…
CVE-2026-47200Medium5.32026-06-12Nuxt is an open-source web development framework for Vue.js. In Nuxt versions 3.11.0 to before 3.21.6 and 4.0.0-alpha.1 to before 4.4.6 and @nuxt/nitro-server…
CVE-2026-10523Critical9.92026-06-09An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to…
CVE-2026-5415High8.82026-06-05The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the same slug) plugin for WordPress is vulnerable to Authentication…
CVE-2026-36175Medium6.82026-06-04An issue in the U-Boot component of GNCC GP5 v7.1.76 allows physically-proximate attackers to bypass authentication and gain root access via interrupting the b…
CVE-2026-42654High7.12026-06-02Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Swings Wallet System for WooCommerce allows Password Recovery Exploitation. This…
CVE-2026-40780High7.52026-06-02Authentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP BookIt allows Password Recovery Exploitation. This issue affe…
CVE-2026-455772026-05-29Neotoma provides versioned records that persist across agent runs. From 0.6.0 to before 0.11.1, Neotoma can treat public reverse-proxied requests as local when…
CVE-2025-41273Critical9.82026-05-29Nozomi Networks Labs identified a CWE-288: Authentication Bypass Using an Alternate Path or Channel in the Console WebUI in Waterfall WF-500 TX and RX Hosts in…
CVE-2026-8697High8.82026-05-28Due to improper enforcement of authentication rate-limiting on a debug SSH service in Archer C64 v1, the SSH service allows unlimited authentication attempts a…
CVE-2026-89902026-05-28A user with physical access to a smartphone can bypass authentication mechanism of Kidsview mobile application and grant himself full access to the device owne…
CVE-2026-350902026-05-27In Slican telephone exchanges it is possible to manage the control panel remotely. An unauthenticated attacker can connect to the modem via a telephone with a…
CVE-2026-350872026-05-27Slican telephone exchanges allow administrative protocol authentication bypass. An attacker can bypass the need to enter login credentials by executing the app…
CVE-2026-42760High7.52026-05-27Authentication Bypass Using an Alternate Path or Channel vulnerability in revmakx Backup and Staging by WP Time Capsule wp-time-capsule allows Password Recover…
CVE-2026-42749High7.12026-05-27Authentication Bypass Using an Alternate Path or Channel vulnerability in Themeisle Disable Comments for Any Post Types (Remove comments) comments-plus allows…
CVE-2026-42745High7.32026-05-27Authentication Bypass Using an Alternate Path or Channel vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Authentication Bypa…
CVE-2026-42735High8.22026-05-27Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows Password Recovery Exp…
CVE-2025-68711Low2.42026-05-26AppLockZ App Lock and Fingerprint Lock (applock.passwordfingerprint.applockz) 4.2.11 for Android allows a local attacker with physical access to bypass the PIN…
CVE-2025-68708Low2.42026-05-26SailingLab AppLock (aka com.alpha.applock) 4.3.8 for Android allows a local attacker with physical access to bypass the PIN lock. The lock is implemented as an…
CVE-2025-68710Low2.42026-05-26Easyelife App lock (aka Fingerprint,Applock or locker.app.safe.applocker) 1.9.2 for Android allows a local attacker with physical access to bypass the PIN lock…
CVE-2026-45217Medium6.52026-05-25Authentication Bypass Using an Alternate Path or Channel vulnerability in ThemeHigh Stripe Payment Gateway for WooCommerce allows Password Recovery Exploitatio…
CVE-2026-33843Critical9.12026-05-22Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a n…
CVE-2026-8598Critical9.12026-05-20An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras. This port does not require authentication and exposes critical…
CVE-2026-24207Critical9.82026-05-20NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of this vulnerability migh…
CVE-2026-24206High7.32026-05-20NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of this vulnerability migh…
CVE-2026-43202026-05-18Authorization Bypass vulnerability in Creartia's ICMS software could allow an attacker to gain unauthorized access to protected features by manipulating the HT…
CVE-2026-4524Medium6.52026-05-14GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9.1 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have…
CVE-2026-45109High7.52026-05-13Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.18 and 16.2.6, it was found that the fix addressing CVE-2026-…
CVE-2026-44575High7.52026-05-13Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.16 and 16.2.5, App Router applications that rely on middlewar…
CVE-2026-44574High8.12026-05-13Next.js is a React framework for building full-stack web applications. From 15.4.0 to before 15.5.16 and 16.2.5, applications that rely on middleware to protec…