CWE-1390Class1 in KEV

Weak Authentication

Incomplete in the CWE catalog · 103 CVEs mapped

103
CVEs mapped
1
In KEV
7.8
Median CVSS
What it is

The product uses an authentication mechanism to restrict access to specific users or identities, but the mechanism does not sufficiently prove that the claimed identity is correct.

Recent examples
7.8cvss
CVE-2026-88101

CVE-2026-88101 - HIGH Severity Vulnerability

Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.

HIGHno explanation yet
0%
epss
5.3cvss
CVE-2026-85939

CVE-2026-85939 - MEDIUM Severity Vulnerability

Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.

MEDIUMno explanation yet
0%
epss
7.4cvss
CVE-2026-85922

CVE-2026-85922 - HIGH Severity Vulnerability

Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.

HIGHno explanation yet
1%
epss
The record
Technical detail
CWE ID
CWE-1390
Abstraction
Class
Structure
Simple
Status
Incomplete
References (1)