CWE-520
5 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 5Published CVEs5 of them scored
- 4Last 12 monthspublished in the last year
- 1Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-13444
Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints
IBM · Langflow OSS
High8.1 - CVE-2026-13442
Langflow is affected by NET Misconfiguration: Use of Impersonation due to multiple unauthenticated and insufficiently authorized API endpoints
IBM · Langflow OSS
High7.1 - CVE-2026-2450
.NET misconfiguration: use of impersonation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Hijacking a Privileged Thread of…
upKeeper Solutions · upKeeper Instant Privilege Access
High7.4 - CVE-2019-25608
Iperius Backup 6.1.0 Privilege Escalation via Backup Job
Iperius · Iperius Backup
High8.6 - CVE-2024-46943
An issue was discovered in OpenDaylight Authentication, Authorization and Accounting (AAA) through 0.19.3. A rogue controller can join a cluster to impersonate…
Product not named
Critical9.1