Skip to content
OpenAdvisories

Weakness (CWE)

CWE-290: Authentication Bypass by Spoofing

Base Incomplete

This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

Source: MITRE CWE-290

All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 8.6
    CVE-2026-104935 Exploited Public exploit EPSS 89%

    Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute ar…

    ivanti Connect Secure Network devices
    KEV Oct 13, 2026
  • High 7.5
    CVE-2026-62367 Public exploit

    Vikunja: OIDC email-fallback account linking ignores email_verified, enabling local-account takeover

    Vikunja is an open-source self-hosted task management platform. In versions 1.0.0 through 2.3.0, when an administrator enables the per-provider `emailfallback` option on an OpenID Connect provider, Vikunja links an SSO login to a pre-existing local (username+…

    go-vikunja vikunja code.vikunja.io/api Go
  • High 7.5
    CVE-2026-55584 Public exploit

    phpSysInfo: IP allowlist (PSI_ALLOWED) bypass via spoofed X-Forwarded-For / Client-IP headers

    phpSysInfo is a customizable PHP script that displays system information. Prior to 3.4.6, the PSI_ALLOWED access-control check in read_config.php trusts attacker-controlled X-Forwarded-For and Client-IP HTTP headers before REMOTE_ADDR. A remote unauthenticate…

    phpsysinfo phpsysinfo phpsysinfo phpsysinfo/phpsysinfo Debian Ubuntu Packagist
  • High 7.0
    CVE-2026-75037 Public exploit

    Polkit authentication bypass in LACT

    Polkit Authentication Based on UnixProcessSubject / Peer PID in LACT on Linux allows an Authentication Bypass. This issue affects LACT through 0.10.0. Fixed by commit d0478fe42c2219454e272f96b1cbd29ab37ee566.

    ilya-zlobintsev LACT
  • High 7.2
    CVE-2026-0834 Public exploit

    Logic Vulnerability on TP-Link Archer C20, Archer AX53 and TL-WR841N v13

    Logic vulnerability in TP-Link Archer C20 v5, 6.0, Archer AX53 v1.0 and TL-WR841N v13 (TDDP module) allows unauthenticated adjacent attackers to execute administrative commands including factory reset and device reboot without credentials. Attackers on the ad…

    TP-Link Systems Archer C20 v5 Archer C20 v6.0, Archer AX53 v1.0 TL-WR841N v13 Network devices
  • High 8.2
    CVE-2025-49002 Public exploit EPSS 51%

    Dataease H2 Database Remote Code Execution (RCE) Bypass Vulnerability

    DataEase is an open source business intelligence and data visualization tool. Versions prior to version 2.10.10 have a flaw in the patch for CVE-2025-32966 that allow the patch to be bypassed through case insensitivity because INIT and RUNSCRIPT are prohibite…

    dataease dataease
  • High 8.1
    CVE-2024-41107 Public exploit EPSS 18%

    Apache CloudStack: SAML Signature Exclusion

    The CloudStack SAML authentication (disabled by default) does not enforce signature check. In CloudStack environments where SAML authentication is enabled, an attacker that initiates CloudStack SAML single sign-on authentication can bypass SAML authentication…

    Apache Software Foundation Apache CloudStack
  • High 7.5
    CVE-2022-47522 Public exploit

    The IEEE 802.11 specifications through 802.11ax allow physically proximate attackers to intercept (possibly cleartext) …

  • High 8.2
    CVE-2023-24892 Public exploit

    Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability

    Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability

    Microsoft Microsoft Edge (Chromium-based) Browsers
  • High 8.6
    CVE-2021-29441 Public exploit EPSS 83%

    Authentication bypass

    Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, when configured to use authentication (-Dnacos.core.auth.enabled=true) Nacos uses the AuthFilter servlet filter to enforce auth…

    Alibaba nacos com.alibaba.nacos:nacos-common Maven