CWE-347

991 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 7 of them as exploited in the wild.

Critical 196High 436Medium 325Low 34Not scored 0

CVEs per yearBy the year they were published

CVE-2026-5430
Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover
WSO2 · WSO2 Universal Gateway
ExploitedCritical10.0
CVE-2026-48558
SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification
SimpleHelp · SimpleHelp
ExploitedCritical9.5
CVE-2025-59718
A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through…
Fortinet · FortiSwitchManager
ExploitedCritical9.1
CVE-2025-47827
In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted…
Product not named
ExploitedMedium4.6
CVE-2020-2021
PAN-OS: Authentication Bypass in SAML Authentication
Palo Alto Networks · PAN-OS
ExploitedCritical10.0
CVE-2013-3900
WinVerifyTrust Signature Validation Vulnerability
Microsoft · Windows 10 Version 1809
ExploitedMedium5.5
CVE-2020-1464
Windows Spoofing Vulnerability
Microsoft · Windows 10 Version 1803
ExploitedHigh7.8

CVE-2026-123605
Hickory DNS through 0.25.0-alpha.3 DNSSEC Validation Bypass via RRSIG Signer's Name
hickory-dns · hickory-dns
High8.7
CVE-2026-123590
Hickory DNS 0.26.0-beta.1 before 0.26.2 Improper NSEC/NSEC3 Signature Validation
hickory-dns · hickory-dns
Medium6.3
CVE-2026-123538
OpenAM before 16.1.4 SAML 1.x Signature Verification Issuer Impersonation
OpenIdentityPlatform · OpenAM
High7.5
CVE-2026-17379
Multiple Vulnerabilities in IBM API Connect
IBM · API Connect
High7.4
CVE-2026-17301
Multiple Vulnerabilities in IBM API Connect
IBM · API Connect
Critical9.8
CVE-2026-105459
Multiple Vulnerabilities in IBM API Connect
IBM · API Connect
Medium6.8
CVE-2026-85708
Chartbrew: Private chart data disclosure via forgeable CB_SECRET share tokens
chartbrew · chartbrew
High7.5
CVE-2026-58490
Tracecat: Unsigned SAML response accepted in Docker Compose SAML deployments due to empty signing defaults
TracecatHQ · tracecat
Critical9.8
CVE-2026-122267
MinIO Signature V4 verification before RELEASE.2026-09-22T19-25-18Z accepts unsigned x-amz-* headers, letting a presigned PUT URL be escalated into a…
Chainguard · MinIO
High8.8
CVE-2026-111062
A russh SSH server accepts a publickey authentication whose signature uses a different algorithm than the one named in the request
Eugeny · russh
Low2.3