CWE-290 · Authentication
Authentication Bypass by Spoofing
822CVEs
8exploited
7with a public check
11likely (EPSS 10%+)
SortMost likely exploited
822 CVEs with CWE-290 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-4358In CISA KEVExploitedProgress Telerik Report Server - Authentication BypassProgress Software Corporation · Telerik Report Server · CVSS 9.8 · 2024-05-29 | 9.8 | 97% | 2024-05-29 |
| CVE-2022-24112In CISA KEVExploitedApache APISIX - Remote Code ExecutionApache Software Foundation · Apache APISIX · CVSS 9.8 · 2022-02-11 | 9.8 | 96% | 2022-02-11 |
| CVE-2022-23131In CISA KEVExploitedZabbix - SAML SSO Authentication BypassZabbix · Frontend · CVSS 9.1 · 2022-01-13 | 9.1 | 96% | 2022-01-13 |
| CVE-2026-104935In CISA KEVExploitedIvanti Connect Secure <= 22.8R2.4 - Authentication Bypass via X-DSCGI-PATH HeaderIvanti · Connect Secure · CVSS 8.6 · 2026-10-13 | 8.6 | 89% | 2026-10-13 |
| CVE-2026-102764In CISA KEVExploitedBeyondTrust Remote Support <= 26.2.3 - Origin Validation File UploadBeyondTrust · Remote Support · CVSS 9.3 · 2026-10-15 | 9.3 | 79% | 2026-10-15 |
| CVE-2024-54085In CISA KEVExploitedRedfish Authentication BypassAMI · MegaRAC-SPx · CVSS 10 · 2025-03-11 | 10.0 | 61% | 2025-03-11 |
| CVE-2023-50224In CISA KEVExploitedTP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure VulnerabilityTP-Link · TL-WR841N · CVSS 6.5 · 2024-05-03 | 6.5 | 20% | 2024-05-03 |
| CVE-2026-102895In CISA KEVExploitedGPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admingpustack · gpustack · CVSS 9.8 · 2026-11-04 | 9.8 | 0.5% | 2026-11-04 |
| CVE-2021-29441CheckNacos <1.4.1 - Authentication Bypassalibaba · nacos · CVSS 8.6 · 2021-04-27 | 8.6 | 83% | 2021-04-27 |
| CVE-2021-31195CheckMicrosoft Exchange Server - Cross-Site ScriptingMicrosoft · Microsoft Exchange Server 2016 Cumulative Update 19 · CVSS 6.5 · 2021-05-11 | 6.5 | 74% | 2021-05-11 |
| CVE-2025-49002CheckDataEase - Remote Code Executiondataease · dataease · CVSS 8.2 · 2025-06-03 | 8.2 | 51% | 2025-06-03 |
| CVE-2024-41107CheckApache CloudStack - SAML Signature ExclusionApache Software Foundation · Apache CloudStack · CVSS 8.1 · 2024-07-19 | 8.1 | 18% | 2024-07-19 |
| CVE-2025-32966CheckDataEase 2.10.4-2.10.7 - Remote Code Executiondataease · dataease · CVSS 8.2 · 2025-04-23 | 8.2 | 4.5% | 2025-04-23 |
| CVE-2026-49468CheckLiteLLM Proxy < 1.84.0 - Host Header Authentication BypassBerriAI · litellm · CVSS 8.1 · 2026-06-22 | 8.1 | 3.0% | 2026-06-22 |
| CVE-2025-5605CheckWSO2 Management Console - Authentication BypassWSO2 · WSO2 Identity Server · CVSS 4.3 · 2025-10-24 | 4.3 | 0.9% | 2025-10-24 |
| CVE-2019-1234A spoofing vulnerability exists when Azure Stack fails to validate certain requests, aka 'Azure Stack Spoofing Vulnerability'.Microsoft · Azure Stack · 2019-11-12 | – | 75% | 2019-11-12 |
| CVE-2020-7388Sage X3 AdxAdmin Unauthenticated Command Execution Bypass by SpoofingSage · X3 · CVSS 10 · 2021-07-22 | 10.0 | 69% | 2021-07-22 |
| CVE-2021-34646Booster for WooCommerce <= 5.4.3 Authentication BypassPluggabl LLC · Booster for WooCommcerce · CVSS 9.8 · 2021-08-30 | 9.8 | 51% | 2021-08-30 |
| CVE-2022-34689Windows CryptoAPI Spoofing VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.5 · 2022-10-11 | 7.5 | 38% | 2022-10-11 |
| CVE-2018-7842A CWE-290: Authentication Bypass by Spoofing vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause an elev…Schneider-Electric · Modicon M580 Modicon M340 Modicon Quantum Modicon Premium · 2019-05-22 | – | 35% | 2019-05-22 |
| CVE-2021-21215Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted HTML page.Google · Chrome · 2021-04-26 | – | 34% | 2021-04-26 |
| CVE-2020-10136IP-in-IP protocol allows a remote, unauthenticated attacker to route arbitrary network trafficIETF · RFC2003 - IP Encapsulation within IP · 2020-06-02 | – | 29% | 2020-06-02 |
| CVE-2021-21216Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted HTML page.Google · Chrome · 2021-04-26 | – | 22% | 2021-04-26 |
| CVE-2023-30803Sangfor Next-Gen Application Firewall Authentication BypassSangfor · Net-Gen Application Firewall · CVSS 9.8 · 2023-10-10 | 9.8 | 21% | 2023-10-10 |
| CVE-1999-0012Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names.Microsoft · Frontpage · CVSS 7 · 1999-09-29 | 7.0 | 19% | 1999-09-29 |
| CVE-2018-5353The custom GINA/CP module in Zoho ManageEngine ADSelfService Plus before 5.5 build 5517 allows remote attackers to execute code and escalate privileges via spoofing. It does not a…Zohocorp · Manageengine Adselfservice Plus · 2020-09-29 | – | 11% | 2020-09-29 |
| CVE-2022-3180WPGateway <= 3.5 - Unauthenticated Privilege EscalationJack Hopman · WPGateway · CVSS 9.8 · 2025-02-11 | 9.8 | 9.2% | 2025-02-11 |
| CVE-2023-27964An authentication issue was addressed with improved state management. This issue is fixed in AirPods Firmware Update 5E133. When your headphones are seeking a connection request t…Apple · AirPods Firmware Update E · 2023-06-23 | – | 8.2% | 2023-06-23 |
| CVE-2024-12108WhatsUp Gold - Public API signing key rotation issueProgress Software Corporation · WhatsUp Gold · CVSS 9.6 · 2024-12-31 | 9.6 | 7.8% | 2024-12-31 |
| CVE-2018-8383A spoofing vulnerability exists when Microsoft Edge does not properly parse HTTP content, aka "Microsoft Edge Spoofing Vulnerability." This affects Microsoft Edge. This CVE ID is…Microsoft · Microsoft Edge · 2018-08-15 | – | 7.6% | 2018-08-15 |
| CVE-2018-8278A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability." This affects Microsoft Edge.Microsoft · Microsoft Edge · 2018-07-11 | – | 7.1% | 2018-07-11 |
| CVE-2009-1048The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820 with firmware 6.5 before 6.5.20, 7.1 before 7.1.39, and 7.3 before 7.3.14 allows rem…Snom · Snom 300 Firmware · 2009-08-14 | – | 6.4% | 2009-08-14 |
| CVE-2021-21134Incorrect security UI in Page Info in Google Chrome on iOS prior to 88.0.4324.96 allowed a remote attacker to spoof security UI via a crafted HTML page.Google · Chrome · 2021-02-09 | – | 5.4% | 2021-02-09 |
| CVE-2022-39227Python-jwt subject to Authentication Bypass by Spoofingdavedoesdev · python-jwt · CVSS 9.1 · 2022-09-23 | 9.1 | 5.3% | 2022-09-23 |
| CVE-2019-16871Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows Engineering stations, allow an attacker to achieve Remote Code Execution (as SYSTEM) via the Bec…Beckhoff · Twincat · 2019-12-19 | – | 5.3% | 2019-12-19 |
| CVE-2017-14375EMC Unisphere for VMAX Virtual Appliance (vApp) versions prior to 8.4.0.15, EMC Solutions Enabler Virtual Appliance versions prior to 8.4.0.15, EMC VASA Virtual Appliance versions…Emc · EMC VMAX Virtual Appliance (vApp) EMC Unisphere for VMAX Virtual Appliance vers… · 2017-11-01 | – | 4.8% | 2017-11-01 |
| CVE-2023-3128Grafana is validating Azure AD accounts based on the email claim. On Azure AD, the profile email field is not unique and can be easily modified. This leads to account takeover and…Grafana · Grafana · CVSS 9.4 · 2023-06-22 | 9.4 | 4.0% | 2023-06-22 |
| CVE-2018-8388A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability." This affects Microsoft Edge. This CVE ID…Microsoft · Microsoft Edge · 2018-08-15 | – | 3.9% | 2018-08-15 |
| CVE-2025-69258A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executable, leading to execu…Trend Micro, Inc. · Trend Micro Apex Central · CVSS 9.8 · 2026-01-08 | 9.8 | 3.6% | 2026-01-08 |
| CVE-2023-24892Microsoft Edge (Chromium-based) Webview2 Spoofing VulnerabilityMicrosoft · Microsoft Edge (Chromium-based) · CVSS 8.2 · 2023-03-14 | 8.2 | 3.5% | 2023-03-14 |
| CVE-2019-1318A spoofing vulnerability exists when Transport Layer Security (TLS) accesses non- Extended Master Secret (EMS) sessions, aka 'Microsoft Windows Transport Layer Security Spoofing V…Microsoft · Windows · 2019-10-10 | – | 3.5% | 2019-10-10 |
| CVE-2018-8425A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability." This affects Microsoft Edge.Microsoft · Microsoft Edge · 2018-09-13 | – | 3.5% | 2018-09-13 |
| CVE-2018-15715Zoom clients on Windows (before version 4.1.34814.1119), Mac OS (before version 4.1.34801.1116), and Linux (2.4.129780.0915 and below) are vulnerable to unauthorized message proce…Zoom · Zoom · 2018-11-30 | – | 3.5% | 2018-11-30 |
| CVE-2021-30621Chromium: CVE-2021-30621 UI Spoofing in AutofillMicrosoft · Microsoft Edge (Chromium-based) · 2021-09-03 | – | 3.5% | 2021-09-03 |
| CVE-2021-30619Chromium: CVE-2021-30619 UI Spoofing in AutofillMicrosoft · Microsoft Edge (Chromium-based) · 2021-09-03 | – | 3.5% | 2021-09-03 |
| CVE-2013-5661Cache Poisoning issue exists in DNS Response Rate Limiting.Isc · Bind · 2019-11-05 | – | 3.5% | 2019-11-05 |
| CVE-2018-8153A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange Spoofing Vulnerability."…Microsoft · Microsoft Exchange Server · 2018-05-09 | – | 3.4% | 2018-05-09 |
| CVE-2020-22001HomeAutomation 3.3.2 suffers from an authentication bypass vulnerability when spoofing client IP address using the X-Forwarded-For header with the local (loopback) IP address valu…Homeautomation Project · Homeautomation · 2021-04-27 | – | 3.4% | 2021-04-27 |
| CVE-2025-59501Microsoft Configuration Manager Spoofing VulnerabilityMicrosoft · Microsoft Configuration Manager · CVSS 4.8 · 2025-10-31 | 4.8 | 3.3% | 2025-10-31 |
| CVE-2025-1104D-Link DHP-W310AV authentication spoofingD-Link · DHP-W310AV · CVSS 7.3 · 2025-02-07 | 7.3 | 3.0% | 2025-02-07 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.