This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.
535 vulnerabilities with CWE-290
CVE-2026-32045
MEDIUM
OpenClaw < 2026.2.21 - Authentication Bypass in HTTP Gateway Routes via Tokenless Tailscale Auth
CVSS 5.9
CVE-2026-32666
HIGH
Automated Logic WebCTRL Premium Server Authentication Bypass by Spoofing
CVSS 7.5
CVE-2026-33131
HIGH
h3 has a middleware bypass with one gadget
CVSS 7.4
CVE-2026-32014
HIGH
OpenClaw < 2026.2.26 - Node Reconnect Metadata Spoofing via Unsigned Platform Fields
CVSS 8.0
CVE-2026-0385
MEDIUM
Microsoft Edge (Chromium-based) for Android - Spoofing
CVSS 5.0
CVE-2026-31889
HIGH
Shopware <6.6.10.15/6.7.8.1 - Auth Bypass
CVSS 8.9
CVE-2026-27478
CRITICAL
Unity Catalog <=0.4.0 - Auth Bypass
CVSS 9.1
CVE-2026-31813
MEDIUM
Supabase Auth <2.185.0 - Auth Bypass
CVSS 4.8
CVE-2026-32229
MEDIUM
JetBrains Hub <2026.1 - Auth Bypass
CVSS 6.8
CVE-2026-28480
MEDIUM
OpenClaw <2026.2.14 - Auth Bypass
CVSS 6.5
CVE-2026-28465
MEDIUM
OpenClaw voice-call <2026.2.3 - Auth Bypass
CVSS 5.9
CVE-2026-27700
HIGH
Hono 4.12.0-4.12.1 - Auth Bypass
CVSS 8.2
CVE-2026-2800
CRITICAL
Firefox for Android <148 - Spoofing
CVSS 9.8
CVE-2026-24853
HIGH
Caido <0.55.0 - SSRF
CVSS 8.1
CVE-2026-25938
CRITICAL
Frangoteam Fuxa < 1.2.11 - Missing Authentication
CVSS 9.8
CVE-2026-21862
HIGH
Crates.io Rustfs < 1.0.0-alpha.78 - Authentication Bypass by Spoofing
CVSS 7.5
CVE-2026-0834
HIGH
Tp-link Archer Ax53 Firmware - Authentication Bypass by Spoofing
CVSS 8.8
CVE-2026-22797
CRITICAL
OpenStack keystonemiddleware <10.7.2, 10.8, 10.9 before 10.9.1, 10....
CVSS 9.9
CVE-2026-0890
MEDIUM
Mozilla Firefox < 140.7.0 - Authentication Bypass by Spoofing
CVSS 5.4
CVE-2026-21894
MEDIUM
N8n < 2.2.2 - Authentication Bypass by Spoofing
CVSS 6.5
CVE-2025-59707
CRITICAL
N2W <4.3.2 - RCE
CVSS 9.8
CVE-2025-59706
CRITICAL
N2W <4.3.2/4.4.0-4.4.1 - RCE
CVSS 9.8
CVE-2025-67298
HIGH
ClasroomIO <0.2.6 - Privilege Escalation
CVSS 8.1
CVE-2025-48840
MEDIUM
Fortinet FortiWeb 7.0-7.6.3 - Auth Bypass
CVSS 5.3
CVE-2025-71056
HIGH
GCOM EPON 1GE ONU C00R371V00B01 - Auth Bypass
CVSS 8.1
Details
Vulnerabilities
535