CWE-288

Authentication Bypass Using an Alternate Path or Channel

Parent: CWE-306 - Missing Authentication for Critical Function

The product requires authentication, but the product has an alternate path or channel that does not require authentication.

612 vulnerabilities with CWE-288

CVE-2025-64281 CRITICAL

CentralSquare Community Development 19.5.7 - Unauthenticated Authentication Bypass

CVSS 9.8

CVE-2025-13018 HIGH

Firefox < 145 - Firefox ESR < 140.5 - Thunderbird < 145 - Thunderbi...

CVSS 8.1

CVE-2025-13013 MEDIUM

Firefox < 145 - Firefox ESR < 140.5-115.30 - Mitigation Bypass

CVSS 6.1

CVE-2025-12445 MEDIUM

Google Chrome <142.0.7444.59 - CSRF

CVSS 6.5

CVE-2025-12431 MEDIUM

Google Chrome <142.0.7444.59 - Auth Bypass

CVSS 6.5

CVE-2025-64173 HIGH

Apollo Router Core <2.8.1-rc.0 - Info Disclosure

CVSS 7.5

CVE-2025-62064 CRITICAL

Elated-Themes Search & Go <2.7 - Auth Bypass

CVSS 9.8

CVE-2025-59392 MEDIUM

Elspec G5 <1.2.2.19 - Privilege Escalation

CVSS 6.8

CVE-2025-43436 HIGH

tvOS 26.1- iPadOS 26.1 - Info Disclosure

CVSS 7.5

CVE-2025-43422 MEDIUM

iPadOS < 26.1 - Authentication Bypass via Stolen Device Protection Disabling

CVSS 4.6

CVE-2025-5397 CRITICAL

Noo JobMonster <4.8.1 - Auth Bypass

CVSS 9.8

CVE-2025-12466 HIGH

Drupal Simple OAuth 6.0.0-6.0.6 - Authentication Bypass

CVSS 7.5

CVE-2025-9313 CRITICAL

Asseco mMedica <11.9.5 - Info Disclosure

CVE-2025-11621 HIGH

HashiCorp Vault 0.6.0-1.16.26, 1.17.0-1.20.4, 1.21.0 - Authentication Bypass via AWS Auth Method Cache Mishandling

CVSS 8.1

CVE-2025-60041 HIGH

Iulia Cazan Emails Catch All <3.5.3 - Auth Bypass

CVSS 8.8

CVE-2025-49901 CRITICAL

quantumcloud Simple Link Directory <14.8.1 - Auth Bypass

CVSS 9.8

CVE-2025-11534 CRITICAL

Raisecomm RAX701-GC-WP-01 SSH Authentication Bypass

CVE-2025-58133 MEDIUM

Zoom Rooms < 6.5.1 - Unauthenticated Authentication Bypass

CVSS 5.3

CVE-2025-9967 CRITICAL

Orion SMS OTP Verification <1.1.7 - Privilege Escalation

CVSS 9.8

CVE-2025-10294 CRITICAL

OwnID Passwordless Login <1.3.4 - Auth Bypass

CVSS 9.8

CVE-2025-55338 MEDIUM

Windows BitLocker - Privilege Escalation

CVSS 6.1

CVE-2025-8093 HIGH

Authenticator Login < 2.1.8 - Authentication Bypass

CVSS 8.8

CVE-2025-11522 CRITICAL

Search & Go - Directory WordPress Theme <2.7 - Auth Bypass

CVSS 9.8

CVE-2025-34251 HIGH

Tesla Telematics Control Unit (TCU) < 2025.14 - Unauthenticated Privilege Escalation via ADB File Write

CVE-2025-9914 MEDIUM

SICK AG Baggage Analytics < 4.6.3 - Authentication Bypass via Local Database Credentials

CVSS 4.3

Details

Vulnerabilities 612

Links