CWE-1390

118 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

Critical 29High 51Medium 34Low 4Not scored 0

CVEs per yearBy the year they were published

CVE-2026-55040
Microsoft SharePoint Server Security Feature Bypass Vulnerability
Microsoft · Microsoft SharePoint Enterprise Server 2016
ExploitedCritical9.1

CVE-2026-113373
Nexus Repository 3 - Disabled or Locked Single Sign-On Users Can Sign In Again
Sonatype · Nexus Repository 3
Critical9.1
CVE-2026-115967
WordPress Login with phone number plugin <= 1.8.78 - Broken Authentication vulnerability
Hamid Alinia · Login with phone number
High8.8
CVE-2025-30414
Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 42569,…
Acronis · Acronis Cyber Protect Cloud Agent
High7.1
CVE-2026-110475
Improper Authentication Vulnerability in CreditNirvana Collections Platform
CreditNirvana · CreditNirvana Collections Platform (CollectionWorkz)
Critical9.3
CVE-2026-69802
Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability
Microsoft · Windows Server 2012
High8.1
CVE-2026-85922
Azure Key Vault Security Feature Bypass Vulnerability
Microsoft · azure_security_keyvault_certificates
High7.4
CVE-2026-83840
Windows Error Reporting Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1607
High7.8
CVE-2026-83511
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Microsoft · Windows 10 Version 1607
High7.4
CVE-2026-70005
Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability
Microsoft · Windows Server 2019
Medium5.9
CVE-2026-69982
Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability
Microsoft · Windows 10 Version 1607
Medium5.9