What CVEs are caused by CWE-592?

22 recorded CVEs are attributed to CWE-592, including CVE-2026-43512, CVE-2019-3899, CVE-2014-5432.

Is CWE-592 actively exploited?

22 recorded CVEs are caused by CWE-592; none are currently in CISA's KEV catalog of actively exploited flaws.

This weakness has been marked Deprecated by MITRE. It is kept here for reference; see the related weaknesses below for current alternatives.

Class weakness

Deprecated

CWE-592: DEPRECATED: Authentication Bypass Issues

This weakness has been deprecated because it covered redundant concepts already described in CWE-287.

Last updated May 1, 2026

22

Recorded CVEs

With this primary weakness

0

KEVs

In the CISA KEV catalog

Not rated

Likelihood of exploit

Per MITRE

Class

Abstraction

MITRE classification

Overview

CWE-592 (DEPRECATED: Authentication Bypass Issues) is a class-level software weakness catalogued by MITRE in the Common Weakness Enumeration (CWE). It describes a recurring type of mistake that can lead to exploitable security vulnerabilities.

Real-world CVEs

22 recorded CVEs are caused by CWE-592 (DEPRECATED: Authentication Bypass Issues). The highest-severity and most recent are shown first. 1 new CWE-592 CVE has been recorded so far in 2026 (1 in 2025).

CVE-2018-14643

Critical · CVSS 9.8 · EPSS 93th

2018-09-21

CVE-2018-1085

Critical · CVSS 9.8 · EPSS 82th

2018-06-15

CVE-2018-10933

Critical · CVSS 9.1 · EPSS 100th

2018-10-17

CVE-2017-2684

Critical · CVSS 9.0 · EPSS 79th

2017-02-22

CVE-2019-14843

High · CVSS 8.8 · EPSS 66th

2020-01-07

CVE-2018-10847

High · CVSS 8.8 · EPSS 75th

2018-07-30

CVE-2017-2650

High · CVSS 8.5 · EPSS 64th

2018-07-27

CVE-2019-10201

High · CVSS 8.1 · EPSS 51th

2019-08-14

CVE-2024-38884

High · CVSS 7.8 · EPSS 8th

2024-08-02

Showing 12 of 22 recorded CWE-592 CVEs. Track new ones as they are published and get AI-written analysis and fixes.

Monitor CWE-592 vulnerabilities

Frequently asked questions

Common questions about CWE-592.

What is CWE-592?: This weakness has been deprecated because it covered redundant concepts already described in CWE-287.
What CVEs are caused by CWE-592?: 22 recorded CVEs are attributed to CWE-592, including CVE-2026-43512, CVE-2019-3899, CVE-2014-5432.
Is CWE-592 actively exploited?: 22 recorded CVEs are caused by CWE-592; none are currently in CISA's KEV catalog of actively exploited flaws.

References

Weakness data is sourced from the MITRE CWE catalog (v4.20). CVE associations are aggregated and kept current by RadicalNotion.AI.

Stay ahead of CWE-592

Get alerted the moment a new CWE-592 vulnerability affects your stack, with AI-written analysis, severity context, and remediation guidance.

Start free See pricing