CWE-288
Authentication Bypass Using an Alternate Path or Channel
The product requires authentication, but the product has an alternate path or channel that does not require authentication.
521 vulnerabilities with CWE-288
CVE-2025-14714
MEDIUM
LibreOffice - Auth Bypass
CVSS 6.5
CVE-2025-11984
MEDIUM
GitLab CE/EE <18.4.6-18.6.2 - Auth Bypass
CVSS 6.8
CVE-2025-67507
HIGH
Filament < 4.3.1 - Authentication Bypass
CVSS 8.1
CVE-2025-66200
MEDIUM
Apache HTTP Server <2.4.66 - Auth Bypass
CVSS 5.4
CVE-2025-66238
HIGH
DCIM dcTrack - SSRF
CVSS 7.2
CVE-2025-13539
CRITICAL
FindAll Membership <1.0.4 - Auth Bypass
CVSS 9.8
CVE-2025-10571
CRITICAL
ABB Ability Edgenius <3.2.1.1 - Auth Bypass
CVSS 9.6
CVE-2025-63217
CRITICAL
Itel DAB MUX - Auth Bypass
CVSS 9.8
CVE-2025-12760
MEDIUM
Drupal Email TFA <2.0.6 - Auth Bypass
CVSS 5.4
CVE-2025-64530
HIGH
Apollo Federation <2.9.5-2.12.1 - Auth Bypass
CVSS 7.5
CVE-2025-59367
CRITICAL
Asus Dsl-ac51 Firmware < 1.1.2.3_1010 - Missing Authentication
CVSS 9.8
CVE-2025-64281
CRITICAL
Centralsquare Community Development - Authentication Bypass
CVSS 9.8
CVE-2025-13018
HIGH
Firefox < 145 - Firefox ESR < 140.5 - Thunderbird < 145 - Thunderbi...
CVSS 8.1
CVE-2025-13013
MEDIUM
Firefox < 145 - Firefox ESR < 140.5-115.30 - Mitigation Bypass
CVSS 6.1
CVE-2025-12445
MEDIUM
Google Chrome <142.0.7444.59 - CSRF
CVSS 6.5
CVE-2025-12431
MEDIUM
Google Chrome <142.0.7444.59 - Auth Bypass
CVSS 6.5
CVE-2025-64173
HIGH
Apollo Router Core <2.8.1-rc.0 - Info Disclosure
CVSS 7.5
CVE-2025-62064
CRITICAL
Elated-Themes Search & Go <2.7 - Auth Bypass
CVSS 9.8
CVE-2025-59392
MEDIUM
Elspec G5 <1.2.2.19 - Privilege Escalation
CVSS 6.8
CVE-2025-43436
HIGH
tvOS 26.1- iPadOS 26.1 - Info Disclosure
CVSS 7.5
CVE-2025-43422
MEDIUM
iOS <26.1 - Info Disclosure
CVSS 4.6
CVE-2025-5397
CRITICAL
Noo JobMonster <4.8.1 - Auth Bypass
CVSS 9.8
CVE-2025-12466
HIGH
Simple Oauth < 6.0.7 - Authentication Bypass
CVSS 7.5
CVE-2025-9313
CRITICAL
Asseco mMedica <11.9.5 - Info Disclosure
CVE-2025-11621
HIGH
Hashicorp Vault < 1.16.27 - Authentication Bypass
CVSS 8.1
Details
Vulnerabilities
521