Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1390: Weak Authentication

Class Incomplete

The product uses an authentication mechanism to restrict access to specific users or identities, but the mechanism does not sufficiently prove that the claimed identity is correct.

Source: MITRE CWE-1390

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2026-83681 Public exploit

    Microsoft PowerToys Tampering Vulnerability

    Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally.

    Microsoft Microsoft PowerToys