CWE-306 · Authentication
Missing Authentication
3,466CVEs
46exploited
104with a public check
66likely (EPSS 10%+)
SortMost likely exploited
3,466 CVEs with CWE-306 as their weakness · the first 2,000 are paged here; the Atlas names every one
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2017-10271In CISA KEVExploitedOracle WebLogic Server - Remote Command ExecutionOracle Corporation · WebLogic Server · CVSS 7.5 · 2017-10-19 | 7.5 | 100% | 2017-10-19 |
| CVE-2025-3248In CISA KEVExploitedLangflow AI - Unauthenticated Remote Code Executionlangflow-ai · langflow · CVSS 9.8 · 2025-04-07 | 9.8 | 100% | 2025-04-07 |
| CVE-2022-1388In CISA KEVExploitedF5 BIG-IP iControl - REST Auth Bypass RCEF5 · BIG-IP · CVSS 9.8 · 2022-05-05 | 9.8 | 100% | 2022-05-05 |
| CVE-2023-21839In CISA KEVExploitedOracle WebLogic Server - Unauthorized AccessOracle Corporation · WebLogic Server · CVSS 7.5 · 2023-01-17 | 7.5 | 100% | 2023-01-17 |
| CVE-2021-37415In CISA KEVExploitedZoho ManageEngine ServiceDesk Plus - Authentication BypassZoho · ManageEngine ServiceDesk Plus (SDP) · CVSS 9.8 · 2021-09-01 | 9.8 | 100% | 2021-09-01 |
| CVE-2024-0012In CISA KEVExploitedPAN-OS Management Web Interface - Authentication BypassPalo Alto Networks · Cloud NGFW · CVSS 9.3 · 2024-11-18 | 9.3 | 100% | 2024-11-18 |
| CVE-2020-13927In CISA KEVExploitedAirflow Experimental <1.10.11 - REST API Auth BypassApache · Apache Airflow · CVSS 9.8 · 2020-11-10 | 9.8 | 100% | 2020-11-10 |
| CVE-2026-39987In CISA KEVExploitedMarimo <= 0.20.4 - Pre-Auth Terminal WebSocket RCEmarimo-team · marimo · CVSS 9.3 · 2026-04-09 | 9.3 | 100% | 2026-04-09 |
| CVE-2025-32433In CISA KEVExploitedErlang/OTP SSH Vulnerable to Pre-Authentication RCEerlang · otp · CVSS 10 · 2025-04-16 | 10.0 | 99% | 2025-04-16 |
| CVE-2026-41940In CISA KEVExploitedcPanel & WHM - Authentication Bypass via Session-File CRLF InjectionWebPros · cPanel · CVSS 9.8 · 2026-04-29 | 9.8 | 99% | 2026-04-29 |
| CVE-2025-0108In CISA KEVExploitedPAN-OS Management Interface - Path Confusion to Authentication BypassPalo Alto Networks · Cloud NGFW · CVSS 8.8 · 2025-02-12 | 8.8 | 98% | 2025-02-12 |
| CVE-2022-21587In CISA KEVExploitedOracle E-Business Suite 12.2.3 -12.2.11 - Remote Code ExecutionOracle Corporation · Web Applications Desktop Integrator · CVSS 9.8 · 2022-10-18 | 9.8 | 98% | 2022-10-18 |
| CVE-2020-6207In CISA KEVExploitedSAP Solution Manager 7.2 - Remote Command ExecutionSAP SE · SAP Solution Manager (User Experience Monitoring) · CVSS 10 · 2020-03-10 | 10.0 | 98% | 2020-03-10 |
| CVE-2019-9082In CISA KEVExploitedThinkPHP < 3.2.4 - Remote Code ExecutionThinkPHP · ThinkPHP · CVSS 8.8 · 2019-02-24 | 8.8 | 97% | 2019-02-24 |
| CVE-2026-20253In CISA KEVExploitedSplunk Enterprise & Cloud Platform - Unrestricted File UploadSplunk · Splunk Enterprise · CVSS 9.8 · 2026-06-10 | 9.8 | 97% | 2026-06-10 |
| CVE-2026-35273In CISA KEVExploitedOracle PeopleSoft PeopleTools PSEMHUB - Pre-Auth Java Deserialization RCEOracle Corporation · PeopleSoft Enterprise PeopleTools · CVSS 9.8 · 2026-06-11 | 9.8 | 97% | 2026-06-11 |
| CVE-2021-35587In CISA KEVExploitedOracle Access Manager - Remote Code ExecutionOracle Corporation · Access Manager · CVSS 9.8 · 2022-01-19 | 9.8 | 96% | 2022-01-19 |
| CVE-2024-47575In CISA KEVExploitedA missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiM…Fortinet · FortiManager · CVSS 9.8 · 2024-10-23 | 9.8 | 95% | 2024-10-23 |
| CVE-2020-6287In CISA KEVExploitedSAP NetWeaver AS JAVA 7.30-7.50 - Remote Admin AdditionSAP SE · SAP NetWeaver AS JAVA (LM Configuration Wizard) · CVSS 10 · 2020-07-14 | 10.0 | 95% | 2020-07-14 |
| CVE-2021-44077In CISA KEVExploitedZoho ManageEngine ServiceDesk Plus - Remote Code ExecutionZoho · ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus · CVSS 9.8 · 2021-11-29 | 9.8 | 94% | 2021-11-29 |
| CVE-2023-36846In CISA KEVExploitedJunos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary filesJuniper Networks · Junos OS · CVSS 5.3 · 2023-08-17 | 5.3 | 93% | 2023-08-17 |
| CVE-2024-11680In CISA KEVExploitedProjectSend <= r1605 - Improper AuthorizationProjectSend · ProjectSend · CVSS 9.8 · 2024-11-26 | 9.8 | 92% | 2024-11-26 |
| CVE-2024-5910In CISA KEVExploitedPalo Alto Expedition - Admin Account TakeoverPalo Alto Networks · Expedition · CVSS 9.3 · 2024-07-10 | 9.3 | 92% | 2024-07-10 |
| CVE-2020-3952In CISA KEVExploitedVMware vCenter Server LDAP Broken Access ControlVMware · VMware vCenter Server · CVSS 9.8 · 2020-04-10 | 9.8 | 90% | 2020-04-10 |
| CVE-2025-61757In CISA KEVExploitedOracle Identity Manager REST WebServices - Authentication BypassOracle Corporation · Identity Manager · CVSS 9.8 · 2025-10-21 | 9.8 | 89% | 2025-10-21 |
| CVE-2026-24423In CISA KEVExploitedSmarterMail - Remote Code ExecutionSmarterTools · SmarterMail · CVSS 9.3 · 2026-01-23 | 9.3 | 88% | 2026-01-23 |
| CVE-2022-26143In CISA KEVExploitedMitel MiCollab - Information Disclosure & Denial of ServiceMitel · MiCollab, MiVoice Business Express · CVSS 9.8 · 2022-03-09 | 9.8 | 87% | 2022-03-09 |
| CVE-2024-51567In CISA KEVExploitedCyberPanel v2.3.6 Pre-Auth Remote Code ExecutionCyberPersons · CyberPanel · CVSS 10 · 2024-10-29 | 10.0 | 84% | 2024-10-29 |
| CVE-2023-36847In CISA KEVExploitedJunos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary filesJuniper Networks · Junos OS · CVSS 5.3 · 2023-08-17 | 5.3 | 83% | 2023-08-17 |
| CVE-2022-24990In CISA KEVExploitedTerraMaster TOS < 4.2.30 Server Information DisclosureTerraMaster · TerraMaster OS · CVSS 9.8 · 2023-02-07 | 9.8 | 83% | 2023-02-07 |
| CVE-2023-27532In CISA KEVExploitedVulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the back…Veeam · Veeam Backup & Replication · CVSS 7.5 · 2023-03-10 | 7.5 | 81% | 2023-03-10 |
| CVE-2023-28461In CISA KEVExploitedArray Networks Array AG Series and vxAG (9.4.0.481 and earlier) allow remote code execution. An attacker can browse the filesystem on the SSL VPN gateway using a flags attribute i…Array Networks · AG/vxAG ArrayOS · CVSS 9.8 · 2023-03-15 | 9.8 | 68% | 2023-03-15 |
| CVE-2024-8956In CISA KEVExploitedPTZOptics NDI and SDI Cameras /cgi-bin/param.cgi Insufficient AuthenticationPTZOptics · PT30X-SDI · CVSS 9.1 · 2024-09-17 | 9.1 | 59% | 2024-09-17 |
| CVE-2022-23227In CISA KEVExploitedNUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users because of the lack of handle_import_u…NUUO · NVRmini2 Devices · CVSS 9.8 · 2022-01-14 | 9.8 | 48% | 2022-01-14 |
| CVE-2026-56164In CISA KEVExploitedMicrosoft SharePoint Server Elevation of Privilege VulnerabilityMicrosoft · Microsoft SharePoint Enterprise Server 2016 · CVSS 5.3 · 2026-07-14 | 5.3 | 27% | 2026-07-14 |
| CVE-2020-24363In CISA KEVExploitedTP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot. The att…TP-Link · TL-WA855RE · CVSS 8.8 · 2020-08-31 | 8.8 | 22% | 2020-08-31 |
| CVE-2019-5591In CISA KEVExploitedFortiOS - Insecure LDAP Configuration DetectionFortinet · Fortinet FortiOS · CVSS 6.5 · 2020-08-14 | 6.5 | 19% | 2020-08-14 |
| CVE-2010-5326In CISA KEVExploitedThe Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly before 7.3, does not require authentication, which allows remote attackers to execute arbitrary co…SAP · NetWeaver · CVSS 10 · 2016-05-13 | 10.0 | 18% | 2016-05-13 |
| CVE-2026-46817In CISA KEVExploitedVulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable…Oracle Corporation · Oracle Payments · CVSS 9.8 · 2026-05-28 | 9.8 | 12% | 2026-05-28 |
| CVE-2022-26925In CISA KEVExploitedWindows LSA Spoofing VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 8.1 · 2022-05-10 | 8.1 | 10% | 2022-05-10 |
| CVE-2022-26501In CISA KEVExploitedVeeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2).Veeam · Backup & Replication · CVSS 9.8 · 2022-03-17 | 9.8 | 4.1% | 2022-03-17 |
| CVE-2026-67277In CISA KEVExploitedKernel memory disclosure and denial of service in MikroTik RouterOS btest serviceMikrotik · RouterOS · CVSS 8.8 · 2026-09-05 | 8.8 | 1.6% | 2026-09-05 |
| CVE-2026-72529In CISA KEVExploitedA remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an a…TrueConf · TrueConf Server · CVSS 9.8 · 2026-08-19 | 9.8 | 1.5% | 2026-08-19 |
| CVE-2023-36851In CISA KEVExploitedJunos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary filesJuniper Networks · Junos OS · CVSS 5.3 · 2023-09-26 | 5.3 | 1.1% | 2023-09-26 |
| CVE-2026-59822In CISA KEVExploitedLiteLLM: MCP Authentication Bypass via OAuth2 Passthrough FallbackBerriAI · litellm · CVSS 8.8 · 2026-07-08 | 8.8 | 0.8% | 2026-07-08 |
| CVE-2025-48572In CISA KEVExploitedIn multiple locations, there is a possible way to launch activities from the background due to a permissions bypass. This could lead to local escalation of privilege with no addit…Google · Android · CVSS 7.8 · 2025-12-08 | 7.8 | 0.3% | 2025-12-08 |
| CVE-2016-2004CheckHP Data Protector - Arbitrary Command ExecutionHp · Data Protector · 2016-04-21 | – | 94% | 2016-04-21 |
| CVE-2021-45232CheckApache APISIX Dashboard <2.10.1 - API Unauthorized AccessApache Software Foundation · Apache APISIX Dashboard · 2021-12-27 | – | 86% | 2021-12-27 |
| CVE-2019-8449CheckJira <8.4.0 - Information DisclosureAtlassian · Jira · 2019-09-11 | – | 86% | 2019-09-11 |
| CVE-2025-58434CheckFlowise <= 3.0.5 - Account TakeoverFlowiseAI · Flowise · CVSS 9.8 · 2025-09-12 | 9.8 | 84% | 2025-09-12 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.