Skip to content
OpenAdvisories

Weakness (CWE)

CWE-303: Incorrect Implementation of Authentication Algorithm

Base Draft

The requirements for the product dictate the use of an established authentication algorithm, but the implementation of the algorithm is incorrect.

Source: MITRE CWE-303

5 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-46595 Public exploit

    Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

    Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped.

  • High 8.8
    CVE-2026-0073 Public exploit

    In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic er…

  • Critical 10.0
    CVE-2025-13390 Public exploit

    WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover

    The WP Directory Kit plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.4.4 due to incorrect implementation of the authentication algorithm in the "wdk_generate_auto_login_link" function. This is due to the fea…

  • Critical 9.8
    CVE-2024-7593 Exploited Public exploit EPSS 100%

    Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a rem…

    KEV Sep 24, 2024
  • Critical 9.8
    CVE-2023-29357 Exploited · Ransomware Public exploit EPSS 100%

    Microsoft SharePoint Server Elevation of Privilege Vulnerability

    Microsoft SharePoint Server Elevation of Privilege Vulnerability

    KEV Jan 10, 2024