CWE-286
32 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 32Published CVEs32 of them scored
- 4Last 12 monthspublished in the last year
- 2Critical13 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-56428
The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an improperly secured default configuration. An…
Bosch · BSH ELP (Electronic Platform) Modules
High8.1 - CVE-2026-60135
Weintek cMT3092X Incorrect User Management
Weintek · cMT3092X firmware
High7.1 - CVE-2026-35638
OpenClaw < 2026.3.22 - Privilege Escalation via Self-Declared Scopes in Trusted-Proxy Control UI
OpenClaw · OpenClaw
High8.7 - CVE-2025-64725
Weblate has improper validation upon invitation acceptance
WeblateOrg · weblate
Low1.0 - CVE-2025-63563
Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 does not properly invalidate active user sessions after a password change. This allows…
Product not named
Medium6.5 - CVE-2025-59943
phpMyFAQ duplicate email registration allows multiple accounts with the same email
thorsten · phpMyFAQ
High8.1 - CVE-2025-7972
Rockwell Automation FactoryTalk® Linx Network Browser Security Bypass Vulnerability
Rockwell Automation · FactoryTalk® Linx
High8.4 - CVE-2024-48853
Authenticated Escalation to guest to root
ABB · ASPECT-Enterprise
Critical9.5 - CVE-2024-46671
An Incorrect User Management vulnerability [CWE-286] in FortiWeb version 7.6.2 and below, version 7.4.6 and below, version 7.2.10 and below, version 7.0.11 and…
Fortinet · FortiWeb
Medium5.6 - CVE-2024-58105
A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute…
Trend Micro, Inc. · Trend Micro Apex One
High7.3