CWE-304 · Authentication
Missing Critical Step in Authentication
54CVEs
SortMost likely exploited
54 CVEs with CWE-304 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-54391CheckProxmox VE - Default Credentials with TFA BypassProxmox Server Solutions GmbH · Proxmox Virtual Environment (VE) · CVSS 9.8 · 2026-09-01 | 9.8 | 3.0% | 2026-09-01 |
| CVE-2022-1065Multi Factor Authentication Bypass in various versions of Abacus ERPAbacus Research AG · Abacus ERP · CVSS 8.1 · 2022-04-19 | 8.1 | 2.9% | 2022-04-19 |
| CVE-2026-55957Apache Tomcat: Authentication bypass with JNDIRealm and GSSAPI authenticated bindApache Software Foundation · Apache Tomcat · CVSS 7.3 · 2026-06-29 | 7.3 | 2.9% | 2026-06-29 |
| CVE-2022-2302LENZE: Missing password verification in authorisation procedureLENZE · cabinet c520 · CVSS 9.8 · 2022-07-11 | 9.8 | 2.2% | 2022-07-11 |
| CVE-2024-2172Malware Scanner <= 4.7.2 and Web Application Firewall <= 2.1.1 - Unauthenticated Privilege Escalationcyberlord92 · Web Application Firewall – website security · CVSS 9.8 · 2024-03-13 | 9.8 | 1.7% | 2024-03-13 |
| CVE-2019-167662FA bypass in Wagtail through new device pathLab Digital · wagtail-2fa · CVSS 8.7 · 2019-11-29 | 8.7 | 1.5% | 2019-11-29 |
| CVE-2022-2821Missing Critical Step in Authentication in namelessmc/namelessnamelessmc · namelessmc/nameless · CVSS 9.8 · 2022-08-15 | 9.8 | 1.4% | 2022-08-15 |
| CVE-2021-41179Two-Factor Authentication not enforced for pages marked as publicnextcloud · security-advisories · CVSS 6.5 · 2021-10-25 | 6.5 | 1.2% | 2021-10-25 |
| CVE-2011-3172unix2_chkpwd do not check for a valid accountSUSE · SUSE Linux Enterprise · CVSS 5.4 · 2018-06-08 | 5.4 | 1.0% | 2018-06-08 |
| CVE-2026-77800Authentication bypass vulnerabilityZohocorp · ManageEngine Key Manager Plus · CVSS 7.7 · 2026-11-03 | 7.7 | 1.0% | 2026-11-03 |
| CVE-2026-74857A missing critical step in authentication vulnerability in the Auth API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated us…Synology · DiskStation Manager (DSM) · CVSS 8.8 · 2026-11-12 | 8.8 | 0.9% | 2026-11-12 |
| CVE-2024-8954Authentication Bypass in composiohq/composiocomposiohq · composiohq/composio · CVSS 9.8 · 2025-03-20 | 9.8 | 0.9% | 2025-03-20 |
| CVE-2023-3628Infispan: rest bulk ops don't check permissionsRed Hat · Red Hat Data Grid 8.4.4 · CVSS 6.5 · 2023-12-18 | 6.5 | 0.8% | 2023-12-18 |
| CVE-2024-12048IDOR Vulnerability in transformeroptimus/superagitransformeroptimus · transformeroptimus/superagi · CVSS 8.8 · 2025-03-20 | 8.8 | 0.7% | 2025-03-20 |
| CVE-2022-40622WAVLINK Quantum D4G (WN531G3) Session Management by IP AddressWAVLINK · WN531G3 · 2022-09-13 | – | 0.7% | 2022-09-13 |
| CVE-2023-3629Infinispan: non-admins should not be able to get cache config via rest apiRed Hat · Red Hat Data Grid 8.4.4 · CVSS 4.3 · 2023-12-18 | 4.3 | 0.7% | 2023-12-18 |
| CVE-2026-61466Apache CXF: OAuth2 Dynamic Client Registration Scope Self-EscalationApache Software Foundation · Apache CXF · CVSS 9.1 · 2026-08-06 | 9.1 | 0.7% | 2026-08-06 |
| CVE-2023-52424The IEEE 802.11 standard sometimes enables an adversary to trick a victim into connecting to an unintended or untrusted network with Home WEP, Home WPA3 SAE-loop. Enterprise 802.1…No vendor recorded · CVSS 7.4 · 2024-05-17 | 7.4 | 0.7% | 2024-05-17 |
| CVE-2024-9216Authentication Bypass in gaizhenbiao/ChuanhuChatGPTgaizhenbiao · gaizhenbiao/chuanhuchatgpt · CVSS 8.1 · 2025-03-20 | 8.1 | 0.6% | 2025-03-20 |
| CVE-2022-39360Metabase SSO users able to circumvent IdP login by doing password resetmetabase · metabase · CVSS 6.5 · 2022-10-26 | 6.5 | 0.6% | 2022-10-26 |
| CVE-2025-24322An unsafe default authentication vulnerability exists in the Initial Setup Authentication functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted network request can le…Tenda · AC6 V5.0 · CVSS 8.1 · 2025-08-20 | 8.1 | 0.6% | 2025-08-20 |
| CVE-2026-49467TOTP enrollment hijack: password gate skipped due to unawaited promisesmp46 · pingvin-share-x · CVSS 8.8 · 2026-08-12 | 8.8 | 0.6% | 2026-08-12 |
| CVE-2026-101296Apache Tomcat: JNDIRealm bind credential validation fails open for non-GSSAPI SASL mechanismsApache Software Foundation · Apache Tomcat · CVSS 8.1 · 2026-10-20 | 8.1 | 0.6% | 2026-10-20 |
| CVE-2026-67351Serendipity < 2.6.1 Authentication Bypass via Username Collisions9y · Serendipity · CVSS 8.8 · 2026-07-30 | 8.8 | 0.6% | 2026-07-30 |
| CVE-2026-89068MOVEit Transfer Authentication bypass in LDAP sign-onProgress · MOVEit Transfer · CVSS 8.1 · 2026-10-14 | 8.1 | 0.5% | 2026-10-14 |
| CVE-2026-40542Apache HttpClient: SCRAM-SHA-256 mutual authentication bypass may cause the client to accept authentication without proper mutual authentication verificationApache Software Foundation · Apache HttpClient · CVSS 7.3 · 2026-04-22 | 7.3 | 0.5% | 2026-04-22 |
| CVE-2026-59564Authentication bypass between ZCC and client connector portalZscaler · Client Connector · CVSS 9.1 · 2026-08-24 | 9.1 | 0.5% | 2026-08-24 |
| CVE-2026-57915Apache Kerby: Kerberos Pre-Authentication BypassApache Software Foundation · Apache Kerby · CVSS 7.3 · 2026-06-26 | 7.3 | 0.5% | 2026-06-26 |
| CVE-2024-45764Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) a Missing Critical Step in Authentication vulnerability. An unauthenticated attacker with remote access could potenti…Dell · Enterprise SONiC OS · CVSS 9 · 2024-11-08 | 9.0 | 0.5% | 2024-11-08 |
| CVE-2026-108071Improper Multi-Factor Authentication Validation Allows Authentication BypassTSplus · TSplus Remote Access · CVSS 8.7 · 2026-10-14 | 8.7 | 0.5% | 2026-10-14 |
| CVE-2026-76207phpMyFAQ before 4.1.7 2FA Bypass via Remember-Me Cookiethorsten · phpMyFAQ · CVSS 8.1 · 2026-08-19 | 8.1 | 0.5% | 2026-08-19 |
| CVE-2026-73535Gitea second-factor bypass through OpenID identity linkingGitea · Gitea · CVSS 8.8 · 2026-10-14 | 8.8 | 0.4% | 2026-10-14 |
| CVE-2026-54723devpi: Database contents leakdevpi · devpi · CVSS 6.5 · 2026-09-14 | 6.5 | 0.4% | 2026-09-14 |
| CVE-2026-128333listmonk 6.0.0 before 7.0.0-beta.2 2FA Bypass via Password Reset Flowknadh · listmonk · CVSS 7.4 · 2026-11-13 | 7.4 | 0.4% | 2026-11-13 |
| CVE-2023-22833Mandatory control bypass in Lime2Palantir · com.palantir.lime:lime2 · CVSS 7.6 · 2023-06-06 | 7.6 | 0.4% | 2023-06-06 |
| CVE-2026-119776frr: ospf6d fails to enforce all OSPFv3 packets use IPv6 link-local addressesfrrouting · frrouting · CVSS 6.1 · 2026-11-04 | 6.1 | 0.4% | 2026-11-04 |
| CVE-2026-30831Rocket.Chat: 2FA bypass and login of deactivated users via EE ddp-streamerRocketChat · Rocket.Chat · CVSS 8 · 2026-03-06 | 8.0 | 0.4% | 2026-03-06 |
| CVE-2026-94052Apache MINA SSHD: LDAP password authentication ineffectiveApache Software Foundation · Apache MINA SSHD · CVSS 9.1 · 2026-09-30 | 9.1 | 0.4% | 2026-09-30 |
| CVE-2024-7745Multi-Factor Authentication Bypass in Progress WS_FTP ServerProgress Software Corporation · WS_FTP Server · CVSS 6.5 · 2024-08-28 | 6.5 | 0.4% | 2024-08-28 |
| CVE-2025-55138LinkJoin through 882f196 mishandles token ownership in password reset.Latkecrszy · LinkJoin · CVSS 7.4 · 2025-08-07 | 7.4 | 0.4% | 2025-08-07 |
| CVE-2026-123297In JetBrains Hub before 2026.2.52519 two-factor authentication bypass was possible via the password reset flowJetBrains · Hub · CVSS 6.8 · 2026-11-06 | 6.8 | 0.3% | 2026-11-06 |
| CVE-2024-20153In wlan STA, there is a possible way to trick a client to connect to an AP with spoofed SSID. This could lead to remote information disclosure with no additional execution privile…MediaTek, Inc. · MT2737, MT6989, MT6991, MT7925, MT8365, MT8518S, MT8532, MT8666, MT8667, MT8673… · CVSS 7.5 · 2025-01-06 | 7.5 | 0.3% | 2025-01-06 |
| CVE-2025-5715Signal App Biometric Authentication missing critical step in authenticationSignal · App · CVSS 3.8 · 2025-06-06 | 3.8 | 0.3% | 2025-06-06 |
| CVE-2026-61887Missing critical step in authentication in the MigTD SPDM rebind implementation for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalati…Intel(R) TDX Migration Trust Domain (MigTD) · CVSS 9.4 · 2026-11-10 | 9.4 | 0.3% | 2026-11-10 |
| CVE-2026-100667grav-plugin-login 3.8.7 through 3.9.6 Two-Factor Authentication Bypassgetgrav · grav · CVSS 5.3 · 2026-09-26 | 5.3 | 0.3% | 2026-09-26 |
| CVE-2026-42452Termix: Pending-TOTP temporary token can regenerate backup codes and neutralize TOTPTermix-SSH · Termix · CVSS 8.1 · 2026-05-08 | 8.1 | 0.3% | 2026-05-08 |
| CVE-2026-93994Apache MINA SSHD: Repeated-publickey policy bypass on serverApache Software Foundation · Apache MINA SSHD · CVSS 8.1 · 2026-09-30 | 8.1 | 0.3% | 2026-09-30 |
| CVE-2024-52965A missing critical step in authentication vulnerability [CWE-304] in Fortinet FortiOS version 7.6.0 through 7.6.1, 7.4.0 through 7.4.5, 7.2.0 through 7.2.10, and before 7.0.16 & F…Fortinet · FortiOS · CVSS 6.8 · 2025-07-08 | 6.8 | 0.3% | 2025-07-08 |
| CVE-2026-44547ChurchCRM: Incomplete fix for CVE-2026-40582: public API login still bypasses 2FA and account lockout in ChurchCRM 7.2.2ChurchCRM · CRM · CVSS 9.6 · 2026-05-12 | 9.6 | 0.3% | 2026-05-12 |
| CVE-2026-113438Pleasanter provided fails to properly verify passwords in LDAP authentication when processing specially crafted requests under certain configurations. If exploited, an attacker ma…Implem Inc. · Pleasanter · CVSS 6.9 · 2026-10-26 | 6.9 | 0.2% | 2026-10-26 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.