CWE-285

High likelihood

Improper Authorization

Parent: CWE-284 - Improper Access Control

The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

1,077 vulnerabilities with CWE-285
CVE-2026-3817 MEDIUM
Patients Waiting Area Queue 1.0 - Auth Bypass
CVSS 5.3
CVE-2026-3764 HIGH
SourceCodester Client DBMS 1.0 - Auth Bypass
CVSS 7.3
CVE-2026-3762 HIGH
SourceCodester CDMS 1.0/3.1 - Auth Bypass
CVSS 7.3
CVE-2026-3761 MEDIUM
SourceCodester Client DBMS 1.0 - Auth Bypass
CVSS 5.4
CVE-2026-3738 MEDIUM
SourceCodester Pet Grooming 1.0 - Auth Bypass
CVSS 6.3
CVE-2026-3737 MEDIUM
SourceCodester Pet Grooming 1.0 - Auth Bypass
CVSS 6.3
CVE-2026-3734 HIGH
SourceCodester Client DBMS 1.0 - Auth Bypass
CVSS 7.3
CVE-2026-3724 MEDIUM
Patients Waiting Area Queue 1.0 - Auth Bypass
CVSS 6.3
CVE-2026-3675 MEDIUM
Freedom Factory dGEN1 <20260221 - Auth Bypass
CVSS 5.3
CVE-2026-3674 MEDIUM
Freedom Factory dGEN1 <20260221 - Auth Bypass
CVSS 5.3
CVE-2026-3671 LOW
Freedom Factory dGEN1 <20260221 - Auth Bypass
CVSS 3.3
CVE-2026-3670 MEDIUM
Freedom Factory dGEN1 <=20260221 - Privilege Escalation
CVSS 5.3
CVE-2026-3669 MEDIUM
Freedom Factory dGEN1 <20260221 - Privilege Escalation
CVSS 5.3
CVE-2026-3667 MEDIUM
Freedom Factory dGEN1 <20260221 - Privilege Escalation
CVSS 5.3
CVE-2026-30847
Wekan 8.31.0-8.33 - Info Disclosure
CVE-2026-28685 MEDIUM
Kimai <2.51.0 - Privilege Escalation
CVSS 6.5
CVE-2026-28448 HIGH
OpenClaw 2026.1.29-2026.2.1 - Auth Bypass
CVSS 7.3
CVE-2026-3009 HIGH
Keycloak - Auth Bypass
CVSS 8.1
CVE-2026-30793
RustDesk Client <=1.4.5 - CSRF to Privilege Escalation
CVE-2026-27803 HIGH
Vaultwarden <1.35.4 - Privilege Escalation
CVSS 8.3
CVE-2026-0017 HIGH
BiometricService.java - Privilege Escalation
CVSS 7.7
CVE-2026-3265 MEDIUM
go2ismail Free-CRM - Auth Bypass
CVSS 6.3
CVE-2026-3263 MEDIUM
Asp.Net-Core-Inventory-Order-Management-System <9.20250118 - Auth B...
CVSS 6.3
CVE-2026-2694 MEDIUM
The Events Calendar <6.15.16 - Privilege Escalation
CVSS 5.4
CVE-2026-24890 HIGH
OpenEMR <8.0.0 - Auth Bypass
CVSS 8.1
Details
Vulnerabilities 1,077
Exploit Likelihood High