CWE-288— Authentication Bypass Using an Alternate Path or Channel
The product requires authentication, but the product has an alternate path or channel that does not require authentication.— MITRE CWE catalog
785 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-288page 12 of 16
- CVE-2019-6551HIGHCVSS 7.5EG 7.52019-02-28
Pangea Communications Internet FAX ATA all Versions 3.1.8 and prior allow an attacker to bypass user authentication using a specially crafted URL to cause the device to reboot, which may be used to cause a continual denial-of-service condi…
- CVE-2018-12608HIGHCVSS 7.5EG 7.52018-09-10
An issue was discovered in Docker Moby before 17.06.0. The Docker engine validated a client TLS certificate using both the configured client CA root certificate and all system roots on non-Windows systems. This allowed a client with any do…
- CVE-2018-5386HIGHCVSS 7.5EG 7.52018-07-24
Some Navarino Infinity functions, up to version 2.2, placed in the URL can bypass any authentication mechanism leading to an information leak.
- CVE-2024-47010HIGHCVSS 7.3EG 7.52024-10-08
Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication.
- CVE-2025-3932HIGHCVSS 6.5EG 7.52025-05-14
It was possible to craft an email that showed a tracking link as an attachment. If the user attempted to open the attachment, Thunderbird automatically accessed the link. The configuration to block remote content did not prevent that. Thun…
- CVE-2025-13986HIGHCVSS 4.2EG 7.52026-01-28
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Disable Login Page allows Functionality Bypass.This issue affects Disable Login Page: from 0.0.0 before 1.1.3.
- CVE-2026-77799HIGHCVSS 7.4EG 7.42026-11-03
ManageEngine Key Manager Plus versions before 7150 are vulnerable to a Two-Factor Authentication bypass that allows attackers with valid credentials to log in without a verification code.
- CVE-2026-84777HIGHCVSS 7.4EG 7.42026-09-03
Unauthenticated Broken Authentication in Really Simple SSL <= 9.8.0 versions.
- CVE-2026-82225HIGHCVSS 7.4EG 7.42026-08-31
Unauthenticated Broken Authentication in RegistrationMagic <= 6.0.9.8 versions.
- CVE-2026-12579HIGHCVSS 7.4EG 7.42026-07-01
AS228T with Authentication Bypass Vulnerability
- CVE-2025-47710HIGHCVSS 7.4EG 7.42025-05-14
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.…
- CVE-2024-13181HIGHCVSS 7.3EG 7.42025-01-14
Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication. This CVE addresses incomplete fixes from CVE-2024-47010.
- CVE-2026-118582HIGHCVSS 7.3EG 7.32026-10-30
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA allows Functionality Bypass. This issue affects CAPTCHA versions: from 0.0.0 to 1.18.0, from 2.0.0 to 2.0.11.
- CVE-2026-62038HIGHCVSS 7.3EG 7.32026-10-10
Unauthenticated Broken Authentication in eRoom <= 1.7.1 versions.
- CVE-2026-93928HIGHCVSS 7.3EG 7.32026-09-22
Authentication Bypass Using an Alternate Path or Channel vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Authentication Bypass. This issue affects Taxi Booking Manager for WooCommerce: from n/a before 2.0.8.
- CVE-2026-81796HIGHCVSS 7.3EG 7.32026-09-10
Authentication Bypass Using an Alternate Path or Channel vulnerability in WEN Solutions WP Travel wp-travel allows Password Recovery Exploitation.This issue affects WP Travel: from n/a through 12.0.3.
- CVE-2026-78259HIGHCVSS 7.3EG 7.32026-08-24
Unauthenticated Broken Authentication in WPLegalPages <= 3.7.0 versions.
- CVE-2025-13475HIGHCVSS 7.3EG 7.32026-07-04
In multi-tenanted deployments, the application consent management mechanism fails to correctly isolate consent scopes between tenants. Consent granted by a user for a specific SaaS application within one tenant can be incorrectly applied t…
- CVE-2026-42745HIGHCVSS 7.3EG 7.32026-05-27
Authentication Bypass Using an Alternate Path or Channel vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Authentication Bypass.This issue affects Smart Online Order for Clover: from n/a through <= 1.6.0.
- CVE-2026-8321HIGHCVSS 7.3EG 7.32026-05-11
A vulnerability was detected in inkeep agents 0.58.14. This vulnerability affects the function createDevContext of the file agents-api/src/middleware/runAuth.ts of the component runAuth Middleware. Performing a manipulation results in auth…
- CVE-2025-31512HIGHCVSS 7.3EG 7.32025-07-22
An issue was discovered in AlertEnterprise Guardian 4.1.14.2.2.1. One can bypass manager approval via isAddedByApprover in a Request%20Building%20Access requestSubmit API call. The vendor has stated that the system is protected by updating…
- CVE-2025-47244HIGHCVSS 7.3EG 7.32025-05-03
Inedo ProGet through 2024.22 allows remote attackers to reach restricted functionality through the C# reflection layer, as demonstrated by causing a denial of service (when an attacker executes a loop calling RestartWeb) or obtaining poten…
- CVE-2024-47009HIGHCVSS 7.3EG 7.32024-10-08
Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication.
- CVE-2024-7027HIGHCVSS 7.3EG 7.32024-07-24
The WooCommerce - PDF Vouchers plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 4.9.3. This is due to insufficient verification on the user being supplied during a QR code login through the plug…
- CVE-2024-6635HIGHCVSS 7.3EG 7.32024-07-20
The WooCommerce - Social Login plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.7.3. This is due to insufficient controls in the 'woo_slg_login_email' function. This makes it possible for unau…
- CVE-2023-39231HIGHCVSS 7.3EG 7.32023-10-25
PingFederate using the PingOne MFA adapter allows a new MFA device to be paired without requiring second factor authentication from an existing registered device. A threat actor may be able to exploit this vulnerability to register their o…
- CVE-2022-40725HIGHCVSS 7.3EG 7.32023-04-25
PingID Desktop prior to the latest released version 1.7.4 contains a vulnerability that can be exploited to bypass the maximum PIN attempts permitted before the time-based lockout is activated.
- CVE-2021-27453HIGHCVSS 7.3EG 7.32021-12-21
Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an attacker to gain access.
- CVE-2026-1917HIGHCVSS 4.3EG 7.32026-03-25
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Login Disable allows Functionality Bypass.This issue affects Login Disable: from 0.0.0 before 2.1.3.
- CVE-2026-91143HIGHCVSS 7.2EG 7.22026-09-14
goproxy through 15.3 fails to apply HTTP proxy basic authentication to CONNECT tunnel requests, allowing unauthenticated clients to bypass credential requirements. Attackers can issue CONNECT requests to establish tunnels through the authe…
- CVE-2026-22572HIGHCVSS 7.2EG 7.22026-03-10
An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.2 through 7.2.12, FortiManager 7.6.0 through 7.6.3, FortiManager …
- CVE-2025-66238HIGHCVSS 7.2EG 7.22025-12-04
DCIM dcTrack allows an attacker to misuse certain remote access features. An authenticated user with access to the appliance's virtual console could exploit these features to redirect network traffic, potentially accessing restricted servi…
- CVE-2025-4687HIGHCVSS 7.2EG 7.22025-05-29
In Teltonika Networks Remote Management System (RMS), it is possible to perform account pre-hijacking by misusing the invite functionality. If a victim has a pending invite and registers to the platform directly, they are added to the atta…
- CVE-2025-47941HIGHCVSS 7.2EG 7.22025-05-20
TYPO3 is an open source, PHP based web content management system. In versions on the 12.x branch prior to 12.4.31 LTS and the 13.x branch prior to 13.4.2 LTS, the multifactor authentication (MFA) dialog presented during backend login can b…
- CVE-2025-39535HIGHCVSS 7.2EG 7.22025-04-17
Authentication Bypass Using an Alternate Path or Channel vulnerability in appsbd Vitepos vitepos-lite allows Authentication Abuse.This issue affects Vitepos: from n/a through <= 3.1.7.
- CVE-2022-23719HIGHCVSS 7.2EG 7.22022-06-30
PingID Windows Login prior to 2.8 does not authenticate communication with a local Java service used to capture security key requests. An attacker with the ability to execute code on the target machine maybe able to exploit and spoof the l…
- CVE-2022-1681HIGHCVSS 7.2EG 7.22022-05-12
Authentication Bypass Using an Alternate Path or Channel in GitHub repository requarks/wiki prior to 2.5.281. User can get root user permissions
- CVE-2020-1637HIGHCVSS 7.2EG 7.22020-04-08
A vulnerability in Juniper Networks SRX Series device configured as a Junos OS Enforcer device may allow a user to access network resources that are not permitted by a UAC policy. This issue might occur when the IP address range configured…
- CVE-2019-5165HIGHCVSS 7.2EG 7.22020-02-25
An exploitable authentication bypass vulnerability exists in the hostname processing of the Moxa AWK-3131A firmware version 1.13. A specially configured device hostname can cause the device to interpret select remote traffic as local traff…
- CVE-2019-5473HIGHCVSS 7.2EG 7.22019-09-09
An authentication issue was discovered in GitLab that allowed a bypass of email verification. This was addressed in GitLab 12.1.2 and 12.0.4.
- CVE-2026-93949HIGHCVSS 7.1EG 7.12026-10-10
Authentication Bypass Using an Alternate Path or Channel vulnerability in Omegathemes Grocery Shopping Store grocery-shopping-store allows Password Recovery Exploitation.This issue affects Grocery Shopping Store: from n/a through 1.3.3.
- CVE-2026-81783HIGHCVSS 7.1EG 7.12026-09-10
Subscriber Broken Authentication in MailMunch – Grow your Email List <= 3.2.5 versions.
- CVE-2026-24185HIGHCVSS 7.1EG 7.12026-08-18
NVIDIA NVOS for network switches contains a vulnerability in the secure shell (SSH) server configuration component while PKA-only mode is enabled, where an administrator could inadvertently enable an alternative authentication path. If bes…
- CVE-2026-73396HIGHCVSS 7.1EG 7.12026-08-18
Subscriber Broken Authentication in MWB HubSpot for WooCommerce <= 1.6.7 versions.
- CVE-2026-39385HIGHCVSS 7.1EG 7.12026-07-20
Frappe LMS is an open source learning management system. In version 2.51.0 and earlier, a user could bypass payment validation for courses by using unrelated batch. This has been patched in 2.52.0 with enrollment now validating that the ba…
- CVE-2026-40785HIGHCVSS 7.1EG 7.12026-06-15
Subscriber Broken Authentication in AutomatorWP <= 5.6.7 versions.
- CVE-2026-39450HIGHCVSS 7.1EG 7.12026-06-15
Subscriber Broken Authentication in FunnelKit Automations <= 3.7.3 versions.
- CVE-2026-42654HIGHCVSS 7.1EG 7.12026-06-02
Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Swings Wallet System for WooCommerce allows Password Recovery Exploitation. This issue affects Wallet System for WooCommerce: from n/a through 2.7.5.
- CVE-2026-42749HIGHCVSS 7.1EG 7.12026-05-27
Authentication Bypass Using an Alternate Path or Channel vulnerability in Themeisle Disable Comments for Any Post Types (Remove comments) comments-plus allows Password Recovery Exploitation.This issue affects Disable Comments for Any Post …
- CVE-2025-24332HIGHCVSS 7.1EG 7.12025-07-02
Nokia Single RAN AirScale baseband allows an authenticated administrative user access to all physical boards after performing a single login to the baseband system board. The baseband does not re-authenticate the user when they connect fro…
Map vulnerabilities like CWE-288 to your infrastructure
EchelonGraph correlates every CVE — across CWE-288 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →