CWE-357
25 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 25Published CVEs25 of them scored
- 8Last 12 monthspublished in the last year
- 0Critical8 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-126199
pgEdge Postgres MCP Server write confirmation skipped for writes that begin with a reading keyword
pgEdge · pgedge-postgres-mcp
Medium6.8 - CVE-2026-126198
pgEdge Postgres MCP Server custom tools performed writes without user confirmation
pgEdge · pgedge-postgres-mcp
Low3.1 - CVE-2026-59082
A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions), SIMATIC WinCC V8.1 (All versions). Affected…
Siemens · SIMATIC WinCC V7.5
High8.5 - CVE-2026-123839
In JetBrains IntelliJ IDEA before 2026.3 opening arbitrary URLs without confirmation was possible via the Remote Development port forwarding model
JetBrains · IntelliJ IDEA
Medium4.7 - CVE-2026-123320
In JetBrains Toolbox App before 3.9 insufficient warning in the login dialog allowed connecting to a malicious server
JetBrains · Toolbox App
Low3.1 - CVE-2026-58597
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft · Microsoft Edge (Chromium-based)
Medium4.3 - CVE-2026-47782
Android App "RoboForm Password Manager" provided by Siber Systems, Inc. handles Android intents without sufficient URL validation, user confirmation nor…
Siber Systems, Inc. · Android App "RoboForm Password Manager"
Medium4.6 - CVE-2026-26151
Remote Desktop Spoofing Vulnerability
Microsoft · Windows 10 Version 1607
High7.1 - CVE-2025-47967
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
Microsoft · Microsoft Edge (Chromium-based)
Medium4.7 - CVE-2025-33054
Remote Desktop Spoofing Vulnerability
Microsoft · Windows 11 version 22H2
High8.1