What CVEs are caused by CWE-592?

22 recorded CVEs are attributed to CWE-592, including CVE-2026-43512, CVE-2019-3899, CVE-2014-5432.

Is CWE-592 actively exploited?

22 recorded CVEs are caused by CWE-592; none are currently in CISA's KEV catalog of actively exploited flaws.

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Home
Weaknesses (CWE)
CWE-592

RadicalNotion.AI

We do not sell or share your personal information

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Careers
Contact
Book a demo

Get Started

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Home
Weaknesses (CWE)
CWE-592

CWE-592: DEPRECATED: Authentication Bypass Issues

This weakness has been marked Deprecated by MITRE. It is kept here for reference; see the related weaknesses below for current alternatives.

Class weakness

Deprecated

CWE-592: DEPRECATED: Authentication Bypass Issues

This weakness has been deprecated because it covered redundant concepts already described in CWE-287.

Last updated May 1, 2026

Recorded CVEs

With this primary weakness

KEVs

In the CISA KEV catalog

Not rated

Likelihood of exploit

Per MITRE

Class

Abstraction

MITRE classification

Overview

CWE-592 (DEPRECATED: Authentication Bypass Issues) is a class-level software weakness catalogued by MITRE in the Common Weakness Enumeration (CWE). It describes a recurring type of mistake that can lead to exploitable security vulnerabilities.

Real-world CVEs

22 recorded CVEs are caused by CWE-592 (DEPRECATED: Authentication Bypass Issues). The highest-severity and most recent are shown first. 1 new CWE-592 CVE has been recorded so far in 2026 (1 in 2025).

CVE-2026-43512
Apache Tomcat: Digest authenticator will authenticate any unknown user
Critical · CVSS 9.8 · EPSS 66th
2026-05-12
CVE-2019-3899
Critical · CVSS 9.8 · EPSS 70th
2019-04-22
CVE-2014-5432
Critical · CVSS 9.8 · EPSS 83th
2019-03-26
CVE-2018-14643
Critical · CVSS 9.8 · EPSS 93th
2018-09-21
CVE-2018-1085
Critical · CVSS 9.8 · EPSS 81th
2018-06-15
CVE-2018-10933
Critical · CVSS 9.1 · EPSS 100th
2018-10-17
CVE-2017-2684
Critical · CVSS 9.0 · EPSS 78th
2017-02-22
CVE-2019-14843
High · CVSS 8.8 · EPSS 64th
2020-01-07
CVE-2018-10847
High · CVSS 8.8 · EPSS 74th
2018-07-30
CVE-2017-2650
High · CVSS 8.5 · EPSS 63th
2018-07-27
CVE-2019-10201
High · CVSS 8.1 · EPSS 50th
2019-08-14
CVE-2024-38884
High · CVSS 7.8 · EPSS 8th
2024-08-02

Showing 12 of 22 recorded CWE-592 CVEs. Track new ones as they are published and get AI-written analysis and fixes.

Monitor CWE-592 vulnerabilities

Frequently asked questions

Common questions about CWE-592.

What is CWE-592?: This weakness has been deprecated because it covered redundant concepts already described in CWE-287.
What CVEs are caused by CWE-592?: 22 recorded CVEs are attributed to CWE-592, including CVE-2026-43512, CVE-2019-3899, CVE-2014-5432.
Is CWE-592 actively exploited?: 22 recorded CVEs are caused by CWE-592; none are currently in CISA's KEV catalog of actively exploited flaws.

References

MITRE CWE definition (CWE-592) (opens in a new tab)
CWE-592 vulnerabilities on NVD (opens in a new tab)
Learn: What is a CWE?

Weakness data is sourced from the MITRE CWE catalog (v4.20). CVE associations are aggregated and kept current by RadicalNotion.AI.

Stay ahead of CWE-592

Get alerted the moment a new CWE-592 vulnerability affects your stack, with AI-written analysis, severity context, and remediation guidance.

Start free See pricing

On this page

Overview
Real-world CVEs
FAQ
References