CVE-2026-62903

Authentication bypass by capture-replay in SQL Server allows an unauthorized attacker to disclose information over a network...

EUVD-2026-121568

Authentication bypass by capture-replay in SQL Server allows an unauthorized attacker to disclose information over a network...

EUVD-2026-121695

Authentication bypass by capture-replay in the MigTD for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This resu...

CVE-2026-61473

The Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor is vulnerable to an authentication bypass by capture-replay (CWE-294). A system software adversary with privileged user access can perform a low-complexity attack to achieve an escalation of privilege . This vulnerability m...

Microsoft.Data.SqlClient Information Disclosure Vulnerability

Authentication bypass by capture-replay in SQL Server allows an unauthorized attacker to disclose information over a network...

CVE-2022-29593

CVE-2022-29593 - Authentication Bypass by Capture Replay Dingtian-DT-R002 Title Authentication Bypass by Capture-replay Published: Version: 1.0 Vendor: Shenzhen Dingtian Technologies Co.,Ltd Product: 2 Channel Relay Board/Relay Card Version affected: Firmware V3.1.276A Product - Dingtian DTR004 A...

CVE-2022-43704

CVE-2022-43704 - Channel Accessible by Non-Endpoint/Authentication Bypass by Capture-replay Sinilink XY-WFTX Wifi Remote Thermostat Module Temperature Controller Title Product Documentation Application User Manual Hardware Datasheets ESP8285 Buck Converter Firmware Product Description Overview WI...

CVE-2026-82907

Authentication Bypass by Capture-replay in ExternalLoginKeysManager in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthenticated attacker who captures a live externalLoginKey value to obtain a complete, cookie-free, reusable session as the user who issued it, in every...

CVE-2026-82907 Apache OFBiz: externalLoginKey honoured pre-auth, reusable and unbound

Authentication Bypass by Capture-replay in ExternalLoginKeysManager in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthenticated attacker who captures a live externalLoginKey value to obtain a complete, cookie-free, reusable session as the user who issued it, in every...

CVE-2026-82907 Apache OFBiz: externalLoginKey honoured pre-auth, reusable and unbound

Authentication Bypass by Capture-replay in ExternalLoginKeysManager in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthenticated attacker who captures a live externalLoginKey value to obtain a complete, cookie-free, reusable session as the user who issued it, in every...

CVE-2026-82907

Apache OFBiz versions 24.09 before 24.09.08 are vulnerable to an Authentication Bypass by Capture-replay in the ExternalLoginKeysManager component. The root cause is that checkExternalLoginKey runs as a global preprocessor before CSRF and authentication checks, accepting the key as a bearer crede...

EUVD-2026-117477

Authentication Bypass by Capture-replay in ExternalLoginKeysManager in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthenticated attacker who captures a live externalLoginKey value to obtain a complete, cookie-free, reusable session as the user who issued it, in every...

PT-2026-137505

Name of the Vulnerable Software and Affected Versions Apache OFBiz versions 24.09 through 24.09.07 Description An authentication bypass exists in the ExternalLoginKeysManager due to a capture-replay flaw. A remote unauthenticated attacker who captures a live externalLoginKey value can obtain a...

CVE-2026-122220

WPO365 | LOGIN wpo365-login plugin before version 45.2 contains an authentication bypass by capture-replay vulnerability caused by a non-functional anti-replay check in Saml2Service::checkmessageid, which never persists processed SAML message IDs to the wpo365samlmessageids transient due to a log...

EUVD-2026-117064

WPO365 | LOGIN wpo365-login plugin before version 45.2 contains an authentication bypass by capture-replay vulnerability caused by a non-functional anti-replay check in Saml2Service::checkmessageid, which never persists processed SAML message IDs to the wpo365samlmessageids transient due to a log...

CVE-2026-121640

An Authentication Bypass by Capture-replay vulnerability in WatchGuard AuthPoint Gateway allows an attacker who has observed a legitimate request between AuthPoint Gateway components to replay it and perform unauthorized administrative actions, including disrupting authentication services...

EUVD-2026-116930

An Authentication Bypass by Capture-replay vulnerability in WatchGuard AuthPoint Gateway allows an attacker who has observed a legitimate request between AuthPoint Gateway components to replay it and perform unauthorized administrative actions, including disrupting authentication services...

CVE-2026-121640 WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions

An Authentication Bypass by Capture-replay vulnerability in WatchGuard AuthPoint Gateway allows an attacker who has observed a legitimate request between AuthPoint Gateway components to replay it and perform unauthorized administrative actions, including disrupting authentication services...

CVE-2026-121640

The WatchGuard AuthPoint Gateway is affected by an Authentication Bypass by Capture-replay vulnerability (CWE-294). An attacker who observes a legitimate request between AuthPoint Gateway components can replay that request to perform unauthorized administrative actions . This could lead to the di...

PT-2026-136985

An Authentication Bypass by Capture-replay vulnerability in WatchGuard AuthPoint Gateway allows an attacker who has observed a legitimate request between AuthPoint Gateway components to replay it and perform unauthorized administrative actions, including disrupting authentication services...