Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1390: Weak Authentication

Class Incomplete

The product uses an authentication mechanism to restrict access to specific users or identities, but the mechanism does not sufficiently prove that the claimed identity is correct.

Source: MITRE CWE-1390

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-55040 Exploited Public exploit Scanner template EPSS 70%

    Microsoft SharePoint Server Security Feature Bypass Vulnerability

    Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.

    Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
    KEV Aug 18, 2026
  • Critical 9.8
    CVE-2026-6274 Public exploit

    Authentication Bypass in DTS Electronics' Redline WR3200

    Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Redline …

    DTS Electronics Industry and Trade Ltd. Co. Redline WR3200
  • Critical 9.8
    CVE-2025-40554 Public exploit Scanner template EPSS 61%

    SolarWinds Web Help Desk Authentication Bypass Vulnerability

    SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker to invoke specific actions within Web Help Desk.

    SolarWinds Web Help Desk
  • Critical 9.8
    CVE-2025-40552 Public exploit Scanner template EPSS 52%

    SolarWinds Web Help Desk Authentication Bypass Vulnerability

    SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that if exploited, would allow a malicious actor to execute actions and methods that should be protected by authentication.

    SolarWinds Web Help Desk
  • Critical 9.8
    CVE-2025-39596 Public exploit

    WordPress Quentn WP plugin <= 1.2.8 - Privilege Escalation Vulnerability

    Weak Authentication vulnerability in Quentn.com GmbH Quentn WP quentn-wp allows Privilege Escalation.This issue affects Quentn WP: from n/a through <= 1.2.8.

    Quentn.com Quentn WP