Cyber Posture

CWE · MITRE source

CWE-303Incorrect Implementation of Authentication Algorithm

Abstraction: Base · CVEs in our corpus: 80

The requirements for the product dictate the use of an established authentication algorithm, but the implementation of the algorithm is incorrect.

This incorrect implementation may allow authentication to be bypassed.

Last updated: 09 May 2026 03:25 UTC

NIST 800-53 r5 controls that address this weakness (0)AI

Control Title Family Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2023-29357 KEV9.69.80.94362023-06-14
CVE-2024-7593 KEV9.69.80.94442024-08-13
CVE-2025-133904.110.00.34992025-12-03
CVE-2018-48412.29.80.03522018-03-29
CVE-2022-206952.210.00.02652022-04-15
CVE-2025-213112.29.80.03282025-01-14
CVE-2020-156322.08.80.04202020-07-23
CVE-2022-393662.09.90.00902022-10-28
CVE-2023-33262.09.80.00502023-06-22
CVE-2024-49852.09.80.00802024-05-20
CVE-2024-101272.09.80.00092024-11-20
CVE-2025-632102.09.80.00142025-11-19
CVE-2025-124192.09.90.00092025-11-27
CVE-2025-124212.09.90.00092025-11-27
CVE-2025-664892.09.80.00142025-12-03
CVE-2026-295152.09.80.00172026-03-11
CVE-2016-94631.98.10.03862017-03-28
CVE-2020-88611.98.80.02442020-02-22
CVE-2020-88631.98.80.01772020-03-23
CVE-2023-48601.99.60.00352024-07-16
CVE-2025-578081.98.10.04692025-09-02
CVE-2026-284461.99.40.00982026-03-05
CVE-2021-326911.88.80.00642021-06-16
CVE-2023-259571.89.10.00062023-03-14
CVE-2023-291291.89.10.00092023-06-13