CWE-1327
36 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 36Published CVEs34 of them scored
- 24Last 12 monthspublished in the last year
- 12Critical8 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-97849
Apache TomEE: Derby network service listens on all interfaces
Apache Software Foundation · Apache TomEE
Not scored - CVE-2026-111249
Apache TomEE: Unauthenticated LiveReload endpoint reachable from the network
Apache Software Foundation · Apache TomEE
Not scored - CVE-2026-112136
A vulnerability has been identified in Mendix Studio Pro 11 (All versions >= V11.15.0 < V11.16.0), Mendix Studio Pro 11.12 (All versions >= V11.12.6 <…
Siemens · Mendix Studio Pro 11
Critical9.2 - CVE-2026-119249
A malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address vulnerability found in WiFiman Desktop to obtain information…
Ubiquiti Inc · WiFiman Desktop
High7.5 - CVE-2026-59177
ESPHome Device Builder allows unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces
esphome · device-builder
High8.8 - CVE-2026-112346
OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE
OpenHands · OpenHands Software Agent SDK
Critical9.3 - CVE-2026-92559
IBM App Connect Enterprise is vulnerable to a credential exposure
IBM · App Connect Enterprise
Critical9.8 - CVE-2026-108760
LlamaFarm through 0.0.34 Unauthenticated API Exposed on All Interfaces
llama-farm · llamafarm
High7.2 - CVE-2026-100868
Penpot before 2.18.0 Unauthenticated WebSocket Access via MCP Bridge
penpot · penpot
Medium5.3 - CVE-2026-57123
PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired in
MervinPraison · praisonaiagents
Critical9.8