CWE-291 · Authentication
Reliance on IP Address for Authentication
12CVEs
SortMost likely exploited
12 CVEs with CWE-291 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-4252Tenda AC8 IPv6 check_is_ipv6 ip address for authenticationTenda · AC8 · CVSS 9.8 · 2026-03-16 | 9.8 | 1.4% | 2026-03-16 |
| CVE-2025-34202Vasion Print (formerly PrinterLogic) Insecure Access to Docker Instances WANVasion · Print Virtual Appliance Host · CVSS 8.7 · 2025-09-19 | 8.7 | 1.0% | 2025-09-19 |
| CVE-2023-7211Uniway Router Administrative Web Interface reliance on ip address for authenticationUniway · Router · CVSS 5.6 · 2024-01-07 | 5.6 | 0.9% | 2024-01-07 |
| CVE-2024-23309The LevelOne WBR-6012 router with firmware R0.40e6 has an authentication bypass vulnerability in its web application due to reliance on client IP addresses for authentication. Att…LevelOne · WBR-6012 · CVSS 9 · 2024-10-30 | 9.0 | 0.9% | 2024-10-30 |
| CVE-2022-46415DJI Spark 01.00.0900 allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address pool. To accomplish this, the attacker would first need t…Dji · Spark Firmware · CVSS 9.1 · 2023-03-27 | 9.1 | 0.9% | 2023-03-27 |
| CVE-2026-3690OpenClaw Canvas Authentication Bypass VulnerabilityOpenClaw · OpenClaw · CVSS 7.4 · 2026-04-11 | 7.4 | 0.8% | 2026-04-11 |
| CVE-2025-59101Insufficient Session Management in dormakaba access managerdormakaba · Access Manager 92xx-k5 · CVSS 7.7 · 2026-01-26 | 7.7 | 0.8% | 2026-01-26 |
| CVE-2026-107154A session validation vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a remote unauthenticated attacker…SonicWall · SonicOS · CVSS 8.8 · 2026-11-06 | 8.8 | 0.7% | 2026-11-06 |
| CVE-2023-35906IBM Aspera Faspex security bypassIBM · Aspera Faspex · CVSS 5.3 · 2023-09-05 | 5.3 | 0.4% | 2023-09-05 |
| CVE-2025-66602A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The web server accepts access by IP address. When a worm that randomly searches for IP addr…Yokogawa Electric Corporation · FAST/TOOLS · CVSS 6.9 · 2026-02-09 | 6.9 | 0.4% | 2026-02-09 |
| CVE-2024-32765QTS, QuTS heroQNAP Systems Inc. · QTS · CVSS 4.2 · 2024-08-09 | 4.2 | 0.2% | 2024-08-09 |
| CVE-2026-86485In JetBrains YouTrack before 2026.2.18634 iP spoofing via HTTP headers allowed forged Bitbucket webhooksJetBrains · YouTrack · CVSS 3.5 · 2026-09-07 | 3.5 | 0.2% | 2026-09-07 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.