#cwe-287

共收录 1077 条相关情报。

← 返回所有主题
漏洞预警2026-10-12 发布INFO

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authentication validation weakness that could allow an attacker to use a token t...

CVE-2026-85958

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authentication validati

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

ZITADEL 4.x before 4.19.2 and 3.x through 3.4.15 contains an authentication bypass in the SAML identity-provider intent callback, which verifies the assertion signature using th...

CVE-2026-109372

ZITADEL 4.x before 4.19.2 and 3.x through 3.4.15 contains an authentication bypass in the SAML identity-provider intent

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass vulnerability that allows attackers with a valid password to skip two-factor authentication through rememb...

CVE-2026-109313

Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass vulnerability that allows attackers with a valid

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass in processUserProfile(), which checks that the session user exists but not that a pending front-end 2FA se...

CVE-2026-109312

Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass in processUserProfile(), which checks that the se

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A vulnerability was determined in Netcore NR268 1.7.121109. Affected is the function user_ok of the component CGI Execution. This manipulation causes improper authentication. Th...

CVE-2026-108907

A vulnerability was determined in Netcore NR268 1.7.121109. Affected is the function user_ok of the component CGI Execut

历史摘要 · 未重新核验 · NVD

安全公告2026-10-12 发布INFO

ZITADEL 3.0.0 before 4.19.2 Account Takeover via SAML Identity-Provider Confusion

CVE-2026-109372

ZITADEL 4.x before 4.19.2 and 3.x through 3.4.15 contains an authentication bypass in the SAML identity-provider intent

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-12 发布INFO

Grav Login Plugin 2.7.0 before 3.9.9 2FA Bypass via Remember-Me Cookie

CVE-2026-109313

Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass vulnerability that allows attackers with a valid

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-12 发布INFO

Grav Login Plugin 2.7.0 before 3.9.9 2FA Bypass via Profile Update Form

CVE-2026-109312

Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass in processUserProfile(), which checks that the se

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-12 发布INFO

A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6. This affects the function get_authentication_dependency of the file auth.py. Such manipulation of the argument...

CVE-2026-108818

A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6. This affects the function get_authentication_dependen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A flaw was found in the Client-Initiated Backchannel Authentication CIBA implementation within the keycloak-services component of Keycloak. This component handles advanced authe...

CVE-2026-109082

A flaw was found in the Client-Initiated Backchannel Authentication CIBA implementation within the keycloak-services com

历史摘要 · 未重新核验 · NVD

安全公告2026-10-11 发布INFO

AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that allows...

CVE-2026-108865

AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obt

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-11 发布INFO

AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid access tokens because the OAuth2 server never a...

CVE-2026-108865

AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obt

历史摘要 · 未重新核验 · NVD

安全公告2026-10-11 发布INFO

AmoyLab Unla through 0.10.0 OAuth2 Authentication Bypass via /authorize

CVE-2026-108865

AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obt

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-11 发布INFO

The Disable Users WordPress plugin through 1.0.5 does not enforce its account-disabling control on all authentication paths, allowing the holder of an account an administrator h...

CVE-2026-88827

The Disable Users WordPress plugin through 1.0.5 does not enforce its account-disabling control on all authentication pa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

The Freeton WP WordPress plugin through 1.0.0 does not correctly validate the activation code when authenticating a user, allowing unauthenticated attackers to log in as any use...

CVE-2026-84737

The Freeton WP WordPress plugin through 1.0.0 does not correctly validate the activation code when authenticating a user

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

The Mindstien Quick Login WordPress plugin through 1.0 does not correctly validate a value supplied in the request against the visitor's own session before authenticating them, ...

CVE-2026-84734

The Mindstien Quick Login WordPress plugin through 1.0 does not correctly validate a value supplied in the request again

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

A vulnerability was found in Studio-Saelix Sencho up to 0.94.1. This affects an unknown part of the file /api/auth/login of the component Login Endpoint. Performing a manipulati...

CVE-2026-108522

A vulnerability was found in Studio-Saelix Sencho up to 0.94.1. This affects an unknown part of the file /api/auth/login

历史摘要 · 未重新核验 · NVD

安全公告2026-10-11 发布INFO

Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect...

CVE-2026-108707

Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthentic

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-11 发布INFO

Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting...

CVE-2026-108707

Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthentic

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

AstronRPA through 1.1.6 contains an authentication bypass vulnerability in the OpenResty gateway's auth_handler.lua that accepts any Bearer token without validation. Unauthentic...

CVE-2026-108548

AstronRPA through 1.1.6 contains an authentication bypass vulnerability in the OpenResty gateway's auth_handler.lua that

历史摘要 · 未重新核验 · NVD