Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CWE-639

Authorization Bypass Through User-Controlled Key

The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

2,063
Assigned CVEs
32nd
Commonality Rank
6.5
Avg CVSS
0.0%
In CISA KEV

Volume and Severity of Assigned CVEs Over Time

Volume of CVEs assigned to CWE-639 and their average CVSS base score over time.

Volume of CVEsAvg CVSS Base Score
First CVE
Dec 18, 2012
13 years ago
Most Recent CVE
Jul 23, 2026
1 day ago

Top CVEs Assigned This CWE

Top CVEs that have been assigned this CWE. A single CVE can have multiple CWE assignments, though many have just one.

2,063 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2023-6875CRITICAL
The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress is vulnerable to unauthorized access of data and modification
Jan 11, 20249.890NOYES
CVE-2026-55255HIGH
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, an Insecure Direct Object Reference (IDOR) vulnerability in /api/v1/responses endpoin
Jun 23, 20268.481YESNO
CVE-2021-45428CRITICAL
TLR-2005KSH is affected by an incorrect access control vulnerability. THe PUT method is enabled so an attacker can upload arbitrary files including HTML and CGI formats.
Jan 3, 20229.880NOYES
CVE-2019-17382CRITICAL
An issue was discovered in zabbix.php?action=dashboard.view&dashboardid=1 in Zabbix through 4.4. An attacker can bypass the login page and access the dashboard page, and then creat
Oct 9, 20199.169NOYES
CVE-2024-46982HIGH
Next.js is a React framework for building full-stack web applications. By sending a crafted HTTP request, it is possible to poison the cache of a non-dynamic server-side rendered r
Sep 17, 20247.559NONO
CVE-2019-13360CRITICAL
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, remote attackers can bypass authentication in the login process by leveraging knowledge of a valid username.
Jul 16, 20199.855NOYES
CVE-2025-5947CRITICAL
The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via authentication bypass in all versions up to, and including, 6.0. This is due to the plugi
Aug 1, 20259.853NOYES
CVE-2025-3605CRITICAL
The Frontend Login and Registration Blocks plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.1. This is due
May 9, 20259.851NOYES
CVE-2022-22832CRITICAL
An issue was discovered in Servisnet Tessa 0.0.2. Authorization data is available via an unauthenticated /data-service/users/ request.
Feb 6, 20229.850NOYES
CVE-2026-8679HIGH
The AudioIgniter plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 2.0.2. This is due to the handle_playlist_endpoint() funct
May 22, 20267.546NOYES
View all 2,063 CVEs →

CVE Severity & Scoring

This CWEGlobal (All CVEs)
0.0-0.9
1.0-1.9
2.0-2.9
3.0-3.9
21%
10%
4.0-4.9
19%
19%
5.0-5.9
18%
16%
6.0-6.9
15%
26%
7.0-7.9
16%
11%
8.0-8.9
8%
14%
9.0-10.0
unknown
CVSS Score Range

Exploit Exposure

Exploit activity across CVEs assigned to this CWE, including CVEs that carry other CWE assignments.

CISA KEV
1 CVE
0.0% of CVEs· 79th percentile
Metasploit
1 CVE
0.0% of CVEs· 78th percentile
Nuclei
17 CVEs
0.8% of CVEs· 83rd percentile
ExploitDB
17 CVEs
0.8% of CVEs· 79th percentile

Social Chatter

Social posts that mention CVE IDs assigned to this CWE. This is assigned-CVE activity, not mentions of the CWE label itself.

Media Mentions

Media articles that mention CVE IDs assigned to this CWE. This is assigned-CVE coverage, not mentions of the CWE label itself.

Top Affected Vendors

Top Affected Products