CWE-309 · Authentication
Use of Password System for Primary Authentication
2CVEs
SortMost likely exploited
2 CVEs with CWE-309 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-44300OpenCost ServiceKey Endpoint Unauthorized Credential Overwrite/Injectionopencost · opencost · CVSS 8.8 · 2026-09-15 | 8.8 | 0.8% | 2026-09-15 |
| CVE-2024-45675IBM Informix Dynamic Server Authentication BypassIBM · Informix Dynamic Server · CVSS 8.4 · 2025-12-02 | 8.4 | 0.1% | 2025-12-02 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.