CWEweakness
CWE-290 Authentication Bypass by Spoofing
- Abstraction
- Base
- Structure
- Simple
- Status
- Incomplete
- Languages
- Not Language-Specific
- CWE version
- 5.0
Description
This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.
Common consequences
• Access Control: Bypass Protection Mechanism, Gain Privileges or Assume Identity — This weakness can allow an attacker to access resources which are not otherwise accessible without proper authentication.
Observed examples
• CVE-2022-30319: S-bus functionality in a home automation product performs access control using an IP allowlist, which can be bypassed by a forged IP address.
• CVE-2009-1048: VOIP product allows authentication bypass using 127.0.0.1 in the Host header.
Related
Attack pattern · CAPEC (10)
- CAPEC-21 Exploitation of Trusted Identifiers attack pattern
- CAPEC-22 Exploiting Trust in Client attack pattern
- CAPEC-459 Creating a Rogue Certification Authority Certificate attack pattern
- CAPEC-461 Web Services API Signature Forgery Leveraging Hash Function Extension Weakness attack pattern
- CAPEC-473 Signature Spoof attack pattern
- CAPEC-476 Signature Spoofing by Misrepresentation attack pattern
- CAPEC-59 Session Credential Falsification through Prediction attack pattern
- CAPEC-60 Reusing Session IDs (aka Session Replay) attack pattern
- CAPEC-667 Bluetooth Impersonation AttackS (BIAS) attack pattern
- CAPEC-94 Adversary in the Middle (AiTM) attack pattern
Observed example · CVE (2)
- CVE-2022-30319 Saia Burgess Controls (SBC) PCD through 2022-05-06 allows Authentication bypass. vulnerability
- CVE-2009-1048 The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820 with firmware 6.5 before 6.5.20, 7.1 before… vulnerability
Referenced by CAPEC · weakness (10)
- CAPEC-21 Exploitation of Trusted Identifiers attack pattern
- CAPEC-22 Exploiting Trust in Client attack pattern
- CAPEC-459 Creating a Rogue Certification Authority Certificate attack pattern
- CAPEC-461 Web Services API Signature Forgery Leveraging Hash Function Extension Weakness attack pattern
- CAPEC-473 Signature Spoof attack pattern
- CAPEC-476 Signature Spoofing by Misrepresentation attack pattern
- CAPEC-59 Session Credential Falsification through Prediction attack pattern
- CAPEC-60 Reusing Session IDs (aka Session Replay) attack pattern
- CAPEC-667 Bluetooth Impersonation AttackS (BIAS) attack pattern
- CAPEC-94 Adversary in the Middle (AiTM) attack pattern
Referenced by CVE · weakness (819)
- CVE-2026-115962 Authentication Bypass by Spoofing vulnerability in myCred myCred mycred allows Identity Spoofing.This issue affects myCred: from n/a… vulnerability
- CVE-2026-118653 Echo is a Go web framework. vulnerability
- CVE-2026-86391 Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through… vulnerability
- CVE-2026-90717 Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through… vulnerability
- CVE-2026-107147 The twofactor_gauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoofed client address headers. vulnerability
- CVE-2026-76938 Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. vulnerability
- CVE-2026-82117 Authentication Bypass by Spoofing Vulnerability in HiRDB. vulnerability
- CVE-2026-90465 A missing authentication vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster interconnect, such… vulnerability
- CVE-2026-92546 Authentication bypass by spoofing vulnerability in Keepnet Labs Cybersecurity Inc. vulnerability
- CVE-2026-70381 An access-control vulnerability has been identified in the web server configuration. vulnerability
- CVE-2026-115933 Postiz signs its session, invitation and password reset tokens with one shared secret and without any marker of what a token is for. vulnerability
- CVE-2025-30052 The rsyncd service of the CGM CLININET is vulnerable to Authentication Bypass via IP spoofing. vulnerability
- CVE-2026-57210 Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. vulnerability
- CVE-2026-93627 An organizer authentication vulnerability in the email calendar processing of Zimbra Collaboration Suite (ZCS) allows an unauthenticated… vulnerability
- CVE-2026-93628 An attendee authentication vulnerability in the email calendar processing of Zimbra Collaboration Suite (ZCS) allows an unauthenticated… vulnerability
- CVE-2026-93629 An organizer authentication vulnerability in Zimbra Collaboration Suite (ZCS) allows an unauthenticated email sender to insert calendar… vulnerability
- CVE-2022-51026 Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user. vulnerability
- CVE-2026-112241 Authentication Bypass by Spoofing vulnerability in Brainstorm Force SureCart surecart allows Authentication Abuse.This issue affects… vulnerability
- CVE-2026-114640 Traefik from v3.7.0 before v3.7.14 contains an authentication bypass vulnerability in its Kubernetes Ingress-NGINX provider that forwards… vulnerability
- CVE-2026-103302 The Payment Gateway for Idram WordPress plugin before 2.1.6 does not verify the authenticity of incoming payment notifications, because the… vulnerability
- CVE-2026-107447 The Contest Gallery WordPress plugin before 34.0.1 does not reliably validate the visitor identity used to enforce its one-vote-per-entry… vulnerability
- CVE-2026-113703 SuggestArr before 3.0.0 contains an authentication bypass vulnerability in its local_bypass authentication mode where… vulnerability
- CVE-2026-111623 Xiaozhi-esp32-server-java through 6.1.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain… vulnerability
- CVE-2026-111691 WIMOOR through commit ec86736 contains an authentication bypass vulnerability that allows attackers to impersonate any tenant and privilege… vulnerability
- CVE-2026-102764 The vulnerability exists within internal components of BeyondTrust’s Remote Support product. vulnerability
- CVE-2026-102946 joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. vulnerability
- CVE-2026-110723 In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from… vulnerability
- CVE-2026-84731 An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element… vulnerability
- CVE-2026-104108 FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. vulnerability
- CVE-2026-106465 The NetX Secure DTLS server sends a HelloVerifyRequest carrying a freshly generated cookie, but never checks the cookie a client returns. vulnerability
Referenced by CWE · can also be (1)
- CWE-358 Improperly Implemented Security Check for Standard weakness
Referenced by CWE · child of (3)
Referenced by CWE · has member (1)
- CWE-884 CWE Cross-section view
Referenced by CWE · peer of (1)
- CWE-602 Client-Side Enforcement of Server-Side Security weakness