CWE-262 · Authentication
Not Using Password Aging
6CVEs
SortMost likely exploited
6 CVEs with CWE-262 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-2022Missing Authorization in GitLabGitLab · GitLab · CVSS 4.3 · 2023-08-02 | 4.3 | 0.5% | 2023-08-02 |
| CVE-2023-1555Missing Authorization in GitLabGitLab · GitLab · CVSS 2.7 · 2023-09-01 | 2.7 | 0.5% | 2023-09-01 |
| CVE-2022-22767BD Pyxis™ Products – Default CredentialsBecton Dickinson (BD) · BD Pyxis™ Anesthesia ES Station · CVSS 8.8 · 2022-06-01 | 8.8 | 0.4% | 2022-06-01 |
| CVE-2026-50101Naxclow IoT Platform Not using password agingNaxclow · Smart Doorbell X3 · CVSS 8.1 · 2026-06-12 | 8.1 | 0.3% | 2026-06-12 |
| CVE-2025-58435Open OnDemand didn't rotate password for VNC batch_connectOSC · ondemand · CVSS 4.1 · 2025-09-09 | 4.1 | 0.3% | 2025-09-09 |
| CVE-2025-60010Junos OS and Junos OS Evolved: Device allows login for user with expired passwordJuniper Networks · Junos OS · CVSS 5.4 · 2025-10-09 | 5.4 | 0.2% | 2025-10-09 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.