CWE-287 · Authentication
Improper Authentication
4,507CVEs
40exploited
93with a public check
163likely (EPSS 10%+)
SortMost likely exploited
4,507 CVEs with CWE-287 as their weakness · the first 2,000 are paged here; the Atlas names every one
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-35082In CISA KEVExploitedMobileIron Core - Remote Unauthenticated API AccessIvanti · EPMM · CVSS 10 · 2023-08-15 | 10.0 | 100% | 2023-08-15 |
| CVE-2023-35078In CISA KEVExploitedIvanti Endpoint Manager Mobile (EPMM) - Authentication BypassIvanti · Endpoint Manager Mobile · CVSS 10 · 2023-07-25 | 10.0 | 100% | 2023-07-25 |
| CVE-2017-7921In CISA KEVExploitedHikvision - Authentication BypassHikvision · Hikvision Cameras · CVSS 9.8 · 2017-05-06 | 9.8 | 100% | 2017-05-06 |
| CVE-2021-33044In CISA KEVExploitedDahua IPC/VTH/VTO - Authentication BypassDahua · Some Dahua IP Camera, Video Intercom, PTZ Dome Camera, Thermal Camera devices · CVSS 9.8 · 2021-09-15 | 9.8 | 100% | 2021-09-15 |
| CVE-2023-46805In CISA KEVExploitedIvanti ICS - Authentication BypassIvanti · ICS · CVSS 8.2 · 2024-01-12 | 8.2 | 100% | 2024-01-12 |
| CVE-2022-40684In CISA KEVExploitedFortinet - Authentication BypassFortinet · Fortinet FortiOS, FortiProxy, FortiSwitchManager · CVSS 9.8 · 2022-10-18 | 9.8 | 100% | 2022-10-18 |
| CVE-2020-0688In CISA KEVExploitedA remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption…Microsoft · Microsoft Exchange Server 2013 · CVSS 8.8 · 2020-02-11 | 8.8 | 100% | 2020-02-11 |
| CVE-2021-39226In CISA KEVExploitedGrafana Snapshot - Authentication Bypassgrafana · grafana · CVSS 9.8 · 2021-10-05 | 9.8 | 100% | 2021-10-05 |
| CVE-2025-49706In CISA KEVExploitedMicrosoft SharePoint Server - Authentication BypassMicrosoft · Microsoft SharePoint Enterprise Server 2016 · CVSS 6.5 · 2025-07-08 | 6.5 | 100% | 2025-07-08 |
| CVE-2025-61882In CISA KEVExploitedOracle E-Business Suite 12.2.3–12.2.14 – Remote Code ExecutionOracle Corporation · Oracle Concurrent Processing · CVSS 9.8 · 2025-10-05 | 9.8 | 100% | 2025-10-05 |
| CVE-2021-33045In CISA KEVExploitedDahua IPC/VTH/VTO - Authentication BypassDahua · Some Dahua IP Camera, Video Intercom, NVR, XVR devices · CVSS 9.8 · 2021-09-15 | 9.8 | 100% | 2021-09-15 |
| CVE-2021-32030In CISA KEVExploitedASUS GT-AC2900 - Authentication BypassASUS · Routers · CVSS 9.8 · 2021-05-06 | 9.8 | 99% | 2021-05-06 |
| CVE-2024-53704In CISA KEVExploitedSSL VPN Session HijackingSonicWall · SonicOS · CVSS 8.2 · 2025-01-09 | 8.2 | 95% | 2025-01-09 |
| CVE-2013-0625In CISA KEVExploitedAdobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vec…Adobe · ColdFusion · CVSS 9.8 · 2013-01-09 | 9.8 | 94% | 2013-01-09 |
| CVE-2018-10561In CISA KEVExploitedAn issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending "?images" to any URL of the device that requires authentication, as…Dasan · Gigabit Passive Optical Network (GPON) Routers · CVSS 9.8 · 2018-05-04 | 9.8 | 93% | 2018-05-04 |
| CVE-2021-32648In CISA KEVExploitedOctoberCMS - Account Takeoveroctobercms · october · CVSS 8.2 · 2021-08-26 | 8.2 | 91% | 2021-08-26 |
| CVE-2026-20182In CISA KEVExploitedCisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityCisco · Cisco Catalyst SD-WAN Controller · CVSS 10 · 2026-05-14 | 10.0 | 91% | 2026-05-14 |
| CVE-2026-20127In CISA KEVExploitedCisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityCisco · Cisco Catalyst SD-WAN Manager · CVSS 10 · 2026-02-25 | 10.0 | 88% | 2026-02-25 |
| CVE-2026-50751In CISA KEVExploitedCheck Point IKEv1 Remote-Access VPN - Certificate Authentication Bypasscheckpoint · Quantum Security Gateway · CVSS 9.3 · 2026-06-08 | 9.3 | 85% | 2026-06-08 |
| CVE-2026-105133In CISA KEVExploitedAhsayCBS - JSON API Authentication BypassAhsay · AhsayCBS · CVSS 7.3 · 2026-10-04 | 7.3 | 84% | 2026-10-04 |
| CVE-2015-1187In CISA KEVExploitedThe ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.D-Link and TRENDnet · Multiple Devices · CVSS 9.8 · 2017-09-21 | 9.8 | 83% | 2017-09-21 |
| CVE-2023-27351In CISA KEVExploitedPaperCut NG - Authentication BypassPaperCut · NG · CVSS 8.2 · 2023-04-20 | 8.2 | 78% | 2023-04-20 |
| CVE-2020-4427In CISA KEVExploitedIBM Data Risk Manager - Authentication Bypass via SAMLIBM · Data Risk Manager · CVSS 9 · 2020-05-07 | 9.0 | 70% | 2020-05-07 |
| CVE-2015-7755In CISA KEVExploitedJuniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before 6.3.0r15b, 6.3.0r16 before 6.3.0r16b,…Juniper · ScreenOS · CVSS 9.8 · 2015-12-19 | 9.8 | 61% | 2015-12-19 |
| CVE-2019-19006In CISA KEVExploitedSangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and below have Incorrect Access Control.Sangoma · FreePBX · CVSS 9.8 · 2019-11-21 | 9.8 | 55% | 2019-11-21 |
| CVE-2021-22893In CISA KEVExploitedPulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browser and Pulse Secure Collaboration featur…Ivanti · Pulse Connect Secure · CVSS 10 · 2021-04-23 | 10.0 | 48% | 2021-04-23 |
| CVE-2020-12812In CISA KEVExploitedAn improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a user being able to log in successfully without being prompted…Fortinet · Fortinet FortiOS · CVSS 7.5 · 2020-07-24 | 7.5 | 45% | 2020-07-24 |
| CVE-2023-49105In CISA KEVExploitedAn issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file without authentication if the username of a victim is known, a…ownCloud · ownCloud · CVSS 9.8 · 2023-11-21 | 9.8 | 43% | 2023-11-21 |
| CVE-2016-7836In CISA KEVExploitedSKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on the TCP connection with the management console program.Sky Co., LTD. · SKYSEA Client View · CVSS 9.8 · 2017-06-09 | 9.8 | 19% | 2017-06-09 |
| CVE-2026-65400In CISA KEVExploitedAn authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, m…Apple · macOS · CVSS 9.8 · 2026-08-06 | 9.8 | 18% | 2026-08-06 |
| CVE-2026-82329In CISA KEVExploitedJFrog Artifactory Access Blank Join Key Authentication Bypassjfrog · artifactory · CVSS 9.8 · 2026-08-28 | 9.8 | 14% | 2026-08-28 |
| CVE-2024-49039In CISA KEVExploitedWindows Task Scheduler Elevation of Privilege VulnerabilityMicrosoft · Windows Server 2025 · CVSS 8.8 · 2024-11-12 | 8.8 | 14% | 2024-11-12 |
| CVE-2023-20867In CISA KEVExploitedVMware Tools Authentication Bypass VulnerabilityVMware · VMware Tools · CVSS 3.9 · 2023-06-13 | 3.9 | 14% | 2023-06-13 |
| CVE-2024-21410In CISA KEVExploitedMicrosoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft · Microsoft Exchange Server 2016 Cumulative Update 23 · CVSS 9.8 · 2024-02-13 | 9.8 | 13% | 2024-02-13 |
| CVE-2026-42018In CISA KEVExploitedJFrog Artifactory - Anonymous Token Disclosure via Trailing Slash Auth Bypassjfrog · artifactory · CVSS 7.5 · 2026-08-12 | 7.5 | 10.0% | 2026-08-12 |
| CVE-2022-0492In CISA KEVExploitedA vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the…Linux · kernel · CVSS 7.8 · 2022-03-03 | 7.8 | 5.5% | 2022-03-03 |
| CVE-2019-0543In CISA KEVExploitedAn elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft Windows Elevation of Privilege Vulnerability." This affects…Microsoft · Windows · CVSS 7.8 · 2019-01-08 | 7.8 | 4.7% | 2019-01-08 |
| CVE-2026-16232In CISA KEVExploitedCheck Point Security Management Server - SmartConsole Authentication Bypasscheckpoint · Quantum Security Management · CVSS 9.3 · 2026-07-22 | 9.3 | 3.5% | 2026-07-22 |
| CVE-2025-32975In CISA KEVExploitedQuest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 (Patch 5), and 14.1.x before 14.1.101 (…Quest · KACE Systems Management Appliance (SMA) · CVSS 10 · 2025-06-24 | 10.0 | 2.5% | 2025-06-24 |
| CVE-2024-27834In CISA KEVExploitedThe issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, watchOS 10.…Apple · Safari · CVSS 5.5 · 2024-05-13 | 5.5 | 1.5% | 2024-05-13 |
| CVE-2025-53771CheckMicrosoft SharePoint Server - Authentication Bypass (ToolShell)Microsoft · Microsoft SharePoint Enterprise Server 2016 · CVSS 6.5 · 2025-07-20 | 6.5 | 100% | 2025-07-20 |
| CVE-2018-12613CheckPhpMyAdmin <4.8.2 - Local File InclusionPhpmyadmin · Phpmyadmin · 2018-06-21 | – | 98% | 2018-06-21 |
| CVE-2012-2122CheckMySQL - Authentication BypassOracle · Mysql · 2012-06-26 | – | 97% | 2012-06-26 |
| CVE-2022-0342CheckZyxel - Authentication BypassZyxel · USG/ZyWALL series firmware · CVSS 9.8 · 2022-03-28 | 9.8 | 95% | 2022-03-28 |
| CVE-2024-45216CheckApache Solr - Authentication BypassApache Software Foundation · Apache Solr · CVSS 9.8 · 2024-10-16 | 9.8 | 93% | 2024-10-16 |
| CVE-2018-3810CheckOturia WordPress Smart Google Code Inserter <3.5 - Authentication BypassOturia · Smart Google Code Inserter · 2018-01-01 | – | 91% | 2018-01-01 |
| CVE-2022-0540CheckAtlassian Jira Seraph - Authentication BypassAtlassian · Jira Core Server · CVSS 9.8 · 2022-04-20 | 9.8 | 88% | 2022-04-20 |
| CVE-2023-28121CheckWooCommerce Payments - Unauthorized Admin AccessAutomattic · WooCommerce Payments WordPress Plugin · 2023-04-12 | – | 87% | 2023-04-12 |
| CVE-2018-17153CheckWestern Digital MyCloud NAS - Authentication BypassWestern Digital · My Cloud Wdbctl0020hwt Firmware · 2018-09-18 | – | 87% | 2018-09-18 |
| CVE-2022-41678CheckApache ActiveMQ < 5.16.5/5.17.3 - Remote Code ExecutionApache Software Foundation · Apache ActiveMQ · 2023-11-28 | – | 86% | 2023-11-28 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.