By weakness (CWE)

CWE-287: related vulnerabilities

CVEs classified under CWE-287. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

106 published vulnerabilities · page 2 of 2

• CVE-2026-56294MEDIUM 4.8

  A vulnerability in capacitor-native-biometric allows attackers to bypass biometric authentication on mobile applications. The flaw exists because the authentication success handler doesn't properly verify cryptographic parameters. An attacker with physical or programmatic access to a device can exploit this by intercepting and manipulating the authentication flow, gaining unauthorized access without providing valid biometric credentials. This is a medium-severity issue because it requires specific technical conditions and device access, but it directly undermines a critical security control.

• CVE-2026-45153MEDIUM 4.6

  Nextcloud Files app on Android has a PIN bypass vulnerability affecting versions 33.0.0 through 33.0.x. An attacker with physical access to an unlocked Android device can use the back button to circumvent the app's PIN protection and gain unauthorized access to files stored in the Nextcloud app. This is a local attack requiring the device to already be unlocked, but it effectively neutralizes the app-level security control that would normally protect sensitive files even if the phone falls into the wrong hands.

• CVE-2026-34917MEDIUM 4.3

  A vulnerability in how session identifiers are managed allows attackers with low-privilege access to the web admin console to reuse their session tokens to authenticate against the XML-RPC API, which normally requires full admin permissions. By exploiting this session confusion, an attacker could gain unauthorized API access and potentially chain this into further exploitation. The fix involves tracking the session context (whether a session originated from the web interface or API) to prevent tokens from being valid across different authentication boundaries.

• CVE-2026-49848MEDIUM 4.3

  FreeSWITCH versions prior to 1.11.1 contain a flaw in the Verto module's authentication handler that allows user-supplied session variables to be written into connection state before password validation occurs. Because these writes are append-only and failed authentication attempts don't close the WebSocket connection, variables from a bad login attempt persist and carry over into a subsequent successful login on the same connection. This creates a window for session state manipulation through repeated authentication attempts.

• CVE-2022-48575LOW 3.5

  CVE-2022-48575 is a local bypass vulnerability in macOS that allows someone with physical access to a Mac to circumvent the Login Window security prompt. The issue stems from inconsistent state handling in the authentication system—essentially, the login screen may fail to properly enforce its security state in certain conditions, potentially allowing unauthorized access. Apple has patched this in macOS Monterey 12.4 and later.

• CVE-2026-44961NONE 0.0

  CVE-2026-44961 is a validation bypass in an XML-RPC API's user creation method that was inadvertently introduced when patching a previous vulnerability. The flaw allows attackers to craft usernames that bypass security checks, enabling account impersonation or injection of malicious scripts. Because the vulnerability has no CVSS score assigned and is not listed on CISA's Known Exploited Vulnerabilities catalog, it appears to be a localized or low-impact issue at this time, though the authentication context and data exposure potential warrant attention.