CWE-454
4 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 4Published CVEs4 of them scored
- 3Last 12 monthspublished in the last year
- 1Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-54003
Kirby: External Initialization of the Panel on reverse proxy setups with the `Forwarded` header
getkirby · kirby
Critical9.1 - CVE-2026-48980
pam_usb: getenv() used in PAM context allows environment variable injection into local-check logic
mcdope · pam_usb
Medium6.3 - CVE-2026-26148
Microsoft Azure AD SSH Login extension for Linux Elevation of Privilege Vulnerability
Microsoft · Microsoft Azure AD SSH Login extension for Linux
High8.1 - CVE-2025-36244
IBM AIX privilege escalation
IBM · AIX
High7.4