CVE-2024-54013CWE-306

Authentication Bypass

High · published April 28, 2026

CVSS v4.0
8.7
EPSS
0%
Percentile
8.5
In the wild
Unconfirmed
What it is

Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, under certain conditions, lead to unintended access to protected functions. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00193 · 8.5th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-04-28T07:06Z
EPSS history
Timeline
  • 28 APR 07:06Z
    Authentication Bypass
    cvelistv5