Authentication Bypass by Spoofing
CWE-290
This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.
We track 334 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.5. 8 have been exploited in real attacks.
Latest Authentication Bypass by Spoofing vulnerabilities
- 8.1 High severity
Apache Mynewt NimBLE: Authentication Bypass by Spoofing
Authentication Bypass by Spoofing vulnerability in Apache NimBLE. Receiving specially crafted Security Request could lead to removal of original bond and re-bond with impostor. This issue affects Apache NimBLE: through 1.8.0. Users are recommended to upgrade t
- 9.8 Critical severity
Trend Micro Apex Central: Buffer Copy without Checking Size of Input
A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executable, leading to execution of attacker-supplied code under the context of SYSTEM on affected installati
- 8.8 High severity
signalk-server: Authentication Bypass by Spoofing
Signal K Server is a server application that runs on a central hub in a boat. Versions prior to 2.19.0 of the access request system have two related features that when combined by themselves and with an information disclosure vulnerability enable convincing so
- 7.4 High severity
RPS: Authentication Bypass by Spoofing
Yealink RPS before 2025-06-27 allows unauthorized access to information, including AutoP URL addresses. This was fixed by deploying an enhanced authentication mechanism through a security update to all cloud instances.
- 9.8 Critical severity
QTS: Authentication Bypass by Spoofing
An authentication bypass by spoofing vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to access resources which are not otherwise accessible without proper authentication.
- 9.3 Critical severity
ShineLan-X: Authentication Bypass by Spoofing
The authentication mechanism on web interface is not properly implemented. It is possible to bypass authentication checks by crafting a post request with new settings since there is no session token or authentication in place. This would allow an attacker for
- 9.8 Critical severity
ShineLan-X: Authentication Bypass by Spoofing
The SWD debug interface on the Growatt ShineLan-X communication dongle is available by default, allowing an attacker to attain debug access to the device and to extracting secrets or domains from within the device
- 7.5 High severity
PDF Editor: Authentication Bypass by Spoofing
Foxit PDF Editor and Reader before 2025.2.1 allow signature spoofing via OCG. When Optional Content Groups (OCG) are supported, the state property of an OCG is runtime-only and not included in the digital signature computation buffer. An attacker can leverage
- 9.3 Critical severity
Sistema de Información Tributario: Authentication Bypass by Spoofing
Bypass vulnerability in the authentication method in the GTT Tax Information System application, related to the Active Directory (LDAP) login method. Authentication is performed through a local WebSocket, but the web application does not properly validate the
- 7.5 High severity
1Panel: Authentication Bypass by Spoofing
1Panel is an open-source, web-based control panel for Linux server management. Versions 2.0.13 and below allow an unauthenticated attacker to disable CAPTCHA verification by abusing a client-controlled parameter. Because the server previously trusted this valu
- 7.5 High severity
Firefox: Authentication Bypass by Spoofing
Spoofing issue in the Downloads Panel component. This vulnerability was fixed in Firefox 146, Thunderbird 146, Firefox ESR 140.7, and Thunderbird 140.7.
- 9.8 Critical severity
cpp-httplib: Authentication Bypass by Spoofing
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled HTTP headers to influence server-visible metadata, logging, and authorization decisions. An attacker can inject header
- 7.8 High severity
Torrent Suite Software: Authentication Bypass by Spoofing
An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. One of the middlewares included in this application, LocalhostAuthMiddleware, authenticates users as ionadmin if the REMOTE_ADDR property in request.META is set to 127.0.0.1,
- 9.2 Critical severity
Looker: Authentication Bypass by Spoofing
An attacker could take over a Looker account in a Looker instance configured with OIDC authentication, due to email address string normalization.Looker-hosted and Self-hosted were found to be vulnerable. This issue has already been mitigated for Looker-hosted.
- 7.5 High severity
Chrome: Authentication Bypass by Spoofing
Object lifecycle issue in Media in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: High)
- 8.2 High severity
Chrome: Authentication Bypass by Spoofing
Inappropriate implementation in Omnibox in Google Chrome on Android prior to 141.0.7390.54 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)
- 7.5 High severity
Anydesk: Authentication Bypass by Spoofing
An issue was discovered in AnyDesk for Windows before 9.0.6 and AnyDesk for Android before 8.0.0. When the connection between two clients is established via an IP address, it is possible to manipulate the data and spoof the AnyDesk ID.
- 8.8 High severity
Therefore Online and Therefore On-Premises: Authentication Bypass by Spoofing
Therefore Corporation GmbH has recently become aware that Therefore™ Online and Therefore™ On-Premises contain an account impersonation vulnerability. A malicious user may potentially be able to impersonate the web service account or the account of a service u
- 7.1 High severity
ArubaOS (AOS): Authentication Bypass by Spoofing
A Secure Boot Bypass Vulnerability exists in affected Access Points that allows an adversary to bypass the hardware root of trust verification in place to ensure only vendor-signed firmware can execute on the device. An adversary can exploit this vulnerability
- 10.0 Critical severity
NDI: Improper Authentication
A broken authorization vulnerability in Kiloview NDI N30 allows a remote unauthenticated attacker to deactivate user verification, giving them access to state changing actions that should only be initiated by administratorsThis issue affects Kiloview NDI N30 a
- 9.3 Critical severity
akka.net: Authentication Bypass by Spoofing
Akka.NET is a .NET port of the Akka project from the Scala / Java community. In all versions of Akka.Remote from v1.2.0 to v1.5.51, TLS could be enabled via our `akka.remote.dot-netty.tcp` transport and this would correctly enforce private key validation on th
- 7.5 High severity
EOS: Authentication Bypass by Spoofing
On affected platforms running Arista EOS, maliciously formed UDP packets with source port 3503 may be accepted by EOS. UDP Port 3503 is associated with LspPing Echo Reply. This can result in unexpected behaviors, especially for UDP based services that do not p
- 9.8 Critical severity
Official Document Management System: Authentication Bypass by Spoofing
Official Document Management System developed by 2100 Technology has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to obtain any user's connection token and use it to log into the system as that user.
- 8.8 High severity
i: Authentication Bypass by Spoofing
IBM i 7.3, 7.4, 7.5, and 7.6 is affected by an authenticated user obtaining elevated privileges with IBM Digital Certificate Manager for i (DCM) due to a web session hijacking vulnerability. An authenticated user without administrator privileges could exploit
- 9.8 Critical severity
PowerProtect Data Domain Feature Release: Authentication Bypass by Spoofing
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Authentication B
- 9.1 Critical severity
oauth2-proxy: Authentication Bypass by Spoofing
OAuth2-Proxy is an open-source tool that can act as either a standalone reverse proxy or a middleware component integrated into existing reverse proxy or load balancer setups. In versions 7.10.0 and below, oauth2-proxy deployments are vulnerable when using the
- 9.8 Critical severity
macOS: Authentication Bypass by Spoofing
A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access protected user data.
- 10.0 Critical severity
OneLogin Active Directory Connector (ADC): Authentication Bypass by Spoofing
A cryptographic authentication bypass vulnerability exists in OneLogin AD Connector prior to 6.1.5 due to the exposure of a tenant’s SSO JWT signing key via the /api/adc/v4/configuration endpoint. An attacker in possession of the signing key can craft valid JW
- 8.8 High severity
Director: Authentication Bypass by Spoofing
The Versa Director SD-WAN orchestration platform implements Two-Factor Authentication (2FA) using One-Time Passcodes (OTP) delivered via email or SMS. Versa Director accepts untrusted user input when dispatching 2FA codes, allowing an attacker who knows a vali
- 7.5 High severity
caido: Authentication Bypass by Spoofing
Caido is a web security auditing toolkit. Prior to version 0.48.0, due to the lack of protection for DNS rebinding, Caido can be loaded on an attacker-controlled domain. This allows a malicious website to hijack the authentication flow of Caido and achieve cod
- 9.8 Critical severity
dataease: Authentication Bypass by Spoofing
DataEase is an open source business intelligence and data visualization tool. Versions prior to version 2.10.10 have a flaw in the patch for CVE-2025-32966 that allow the patch to be bypassed through case insensitivity because INIT and RUNSCRIPT are prohibited
- 9.8 Critical severity
Onos: Authentication Bypass by Spoofing
An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle attack on communications between fake and real hosts.
- 7.5 High severity
Thunderbird: Authentication Bypass by Spoofing
Thunderbird parses addresses in a way that can allow sender spoofing in case the server allows an invalid From address to be used. For example, if the From header contains an (invalid) value "Spoofed Name ", Thunderbird treats [email protected] as the actual
- 9.8 Critical severity
dataease: Authentication Bypass by Spoofing
DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.8, authenticated users can complete RCE through the backend JDBC link. This issue has been patched in version 2.10.8.
- 7.5 High severity
jellyfin: Authentication Bypass by Spoofing
Jellyfin is an open source self hosted media server. In versions 10.9.0 to before 10.10.7, the /System/Restart endpoint provides administrators the ability to restart their Jellyfin server. This endpoint is intended to be admins-only, but it also authorizes re
- 9.1 Critical severity
HarmonyOS: Authentication Bypass by Spoofing
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- 9.1 Critical severity
HarmonyOS: Authentication Bypass by Spoofing
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- 9.1 Critical severity
HarmonyOS: Authentication Bypass by Spoofing
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- 9.1 Critical severity
HarmonyOS: Authentication Bypass by Spoofing
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
- 9.1 Critical severity
HarmonyOS: Authentication Bypass by Spoofing
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.