CWE-288

612 vulnerabilities with CWE-288

CVE-2025-51452 CRITICAL

TOTOLINK A7000R <9.1.0u.6115_B20201022 - Auth Bypass

CVSS 9.8

CVE-2025-40761 HIGH

Siemens RUGGEDCOM ROX - Authentication Bypass via Built-In-Self-Test Mode

CVSS 7.6

CVE-2025-40743 HIGH

SINUMERIK 828D/840D/ONE/MC Authentication Bypass via VNC Access Service

CVSS 8.3

CVE-2025-55012 HIGH

Zed < 0.197.3 Agent Panel - Permission Bypass Code Execution

CVE-2025-53187 CRITICAL

ABB ASPECT < 3.08.04-s01 - Unauthenticated Authentication Bypass via Debug Code

CVSS 9.8

CVE-2025-24000 HIGH

WPExperts Post SMTP <3.2.0 - Auth Bypass

CVSS 8.8

CVE-2025-44957 HIGH

Ruckus SmartZone < 6.1.2 - Authentication Bypass via Crafted HTTP Headers

CVSS 8.5

CVE-2025-7710 CRITICAL

Brave Conversion Engine (PRO) - Auth Bypass

CVSS 9.8

CVE-2025-6895 CRITICAL

Melapress Login Security <2.1.1 - Auth Bypass

CVSS 9.8

CVE-2025-7742 HIGH

LG Innotek camera model LNV5110R - RCE

CVE-2025-31512 HIGH

AlertEnterprise Guardian <4.1.14.2.2.1 - Auth Bypass

CVSS 7.3

CVE-2025-34143 CRITICAL

ETQ Reliance CG (legacy) < MP-4583 - Auth Bypass & RCE via SYSTEM Impersonation

CVE-2025-7692 HIGH

Orion Login with SMS <1.0.5 - Auth Bypass

CVSS 8.1

CVE-2025-7444 CRITICAL

LoginPress Pro <5.0.1 - Auth Bypass

CVSS 9.8

CVE-2025-1313 HIGH

Nokri - Job Board WordPress Theme <1.6.3 - Privilege Escalation

CVSS 8.8

CVE-2025-30026 CRITICAL

AXIS Camera Station Server - Auth Bypass

CVSS 9.8

CVE-2025-24332 HIGH

Nokia Single RAN AirScale - Privilege Escalation

CVSS 7.1

CVE-2025-53099 HIGH

Sentry < 25.5.0 - Authentication Bypass via OAuth Authorization Code Race Condition

CVSS 7.5

CVE-2025-25171 HIGH

ThemesGrove WP SmartPay <2.7.13 - Auth Bypass

CVSS 8.8

CVE-2025-6688 CRITICAL

idokd simple_payment 1.3.6-2.3.8 - Unauthenticated Authentication Bypass via create_user() Function

CVSS 9.8

CVE-2025-6675 MEDIUM

miniorange_2fa < 4.8.0 - Authentication Bypass via Alternate Path

CVSS 4.8

CVE-2025-6556 MEDIUM

Google Chrome <138.0.7204.49 - Auth Bypass

CVSS 5.4

CVE-2025-32976 HIGH

Quest KACE SMA <14.1.101 (Patch 4) - Auth Bypass

CVSS 8.8

CVE-2025-5820 HIGH

Sony XAV-AX8500 Firmware >=2.00.1 <3.02.00 - Unauthenticated Authentication Bypass via Bluetooth ERTM Channel

CVSS 8.8

CVE-2025-51381 CRITICAL

KAON KCM3100 <= 1.4.2 - Unauthenticated Authentication Bypass

CVSS 9.8