CWE-1327 · weakness in Access Control
Binding to an Unrestricted IP Address
33 CVEs
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- check available
- 3
Every one of the 33 is a mark on the map. Named now: 1 to 26, most at risk first.
- CUPS - Remote Code Execution
- argocd-mcp 0.8.0 - Unauthenticated MCP Session and Tool Access
- ESPHome Device Builder <1.0.10 - Unauthenticated Dashboard Access
- CVE-2023-1968
- OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE
- Cisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution Vulnerability
- dbt allows Binding to an Unrestricted IP Address via socketsocket
- fastify-cli vulnerable to remote code execution via ignored explicit Inspector bind address
- AutomationDirect Productivity Suite Binding to an Unrestricted IP Address CWE-1327
- Apache IoTDB: Insecure Default Configuration Vulnerability
- Azure IoT Explorer Information Disclosure Vulnerability
- Penpot before 2.18.0 Unauthenticated WebSocket Access via MCP Bridge
- IBM App Connect Enterprise is vulnerable to a credential exposure
- Excessive attack surface due to binding to an unrestricted IP address. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 30430, Acronis Cyber…
- IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution
- OpenClaw 2026.1.14-1 < 2026.2.12 - Unintended Public Binding of Chrome Extension Relay via Wildcard cdpUrl
- Server receiving a malformed message based on a list of IPs resulting in heap corruption causing a denial of service. See Honeywell Security Notification for recommendations on up…
- VPS.org one-click Supabase template deployment instance contains multiple vulnerabilities
- Keycloak-server: debug default bind address
- In JetBrains PyCharm before 2022.1 exposure of the debugger port to the internal network was possible
- OmniParser Remote Code Execution Vulnerability
- A malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address vulnerability found in WiFiman Desktop to obtain information about the host devi…
- Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configuration, potenti…
- A vulnerability has been identified in Mendix Studio Pro 11 (All versions >= V11.15.0 < V11.16.0), Mendix Studio Pro 11.12 (All versions >= V11.12.6 < V11.12.7). The affected prod…
- Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces
- GitHub CLI: `gh codespace ports forward` exposes forwarded services on all network interfaces by default
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.