CWE-923
87 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 87Published CVEs87 of them scored
- 44Last 12 monthspublished in the last year
- 7Critical35 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-125361
Tencent BrowserSkill through 0.4.2 Missing Authentication in Local WebSocket Transport
Tencent · BrowserSkill
High7.2 - CVE-2026-10756
TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access services intended to be reachable only…
Hitachi Energy · TRO600 Series Firmware
High7.7 - CVE-2026-110909
Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP requests belongs to the current project. A process listening on a…
Wheels · Wheels CLI
Medium5.0 - CVE-2026-102085
Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker
Juniper Networks · Junos OS Evolved
Medium6.9 - CVE-2026-70212
Windows Security Center Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1607
High7.0 - CVE-2026-85925
Azure Key Vault Client SDK Elevation of Privilege Vulnerability
Microsoft · azure-keyvault-administration
High8.2 - CVE-2026-86345
389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result
Red Hat · Red Hat Directory Server 11
Critical9.0 - CVE-2026-92172
Prior to v66.0.0.733.524 of Meta Horizon OS, OVRMediaService could be induced to send a privileged PendingIntent including a com.oculus.horizon CallerIdentity…
Meta Platforms, Inc · Meta Horizon OS
High8.8 - CVE-2026-92173
Prior to v74.0.0.878.1682 of Meta Horizon OS, MediaSyncJobReceiver could be induced to send a privileged PendingIntent including a com.oculus.vrshell…
Meta Platforms, Inc · Meta Horizon OS
Critical9.1 - CVE-2026-102727
FTP Passive Data Connection Not Bound to the Authenticated Control Peer
Eclipse Foundation · Eclipse ThreadX NetX Duo
Medium6.0