CWE-291

12 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 3High 4Medium 4Low 1Not scored 0

CVEs per yearBy the year they were published

CVE-2026-107154
A session validation vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a remote…
SonicWall · SonicOS
High8.8
CVE-2026-86485
In JetBrains YouTrack before 2026.2.18634 iP spoofing via HTTP headers allowed forged Bitbucket webhooks
JetBrains · YouTrack
Low3.5
CVE-2026-3690
OpenClaw Canvas Authentication Bypass Vulnerability
OpenClaw · OpenClaw
High7.4
CVE-2026-4252
Tenda AC8 IPv6 check_is_ipv6 ip address for authentication
Tenda · AC8
Critical9.3
CVE-2025-66602
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The web server accepts access by IP address. When a worm that randomly…
Yokogawa Electric Corporation · FAST/TOOLS
Medium6.9
CVE-2025-59101
Insufficient Session Management in dormakaba access manager
dormakaba · Access Manager 92xx-k5
High7.7
CVE-2025-34202
Vasion Print (formerly PrinterLogic) Insecure Access to Docker Instances WAN
Vasion · Print Virtual Appliance Host
High8.7
CVE-2024-23309
The LevelOne WBR-6012 router with firmware R0.40e6 has an authentication bypass vulnerability in its web application due to reliance on client IP addresses for…
LevelOne · WBR-6012
Critical9.0
CVE-2024-32765
QTS, QuTS hero
QNAP Systems Inc. · QTS
Medium4.2
CVE-2023-7211
Uniway Router Administrative Web Interface reliance on ip address for authentication
Uniway · Router
Medium5.6