Skip to content
BackEsc
Sign in

CWE-276 · weakness in Access Control

Incorrect Default Permissions

1,476 CVEs · 3 exploited

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
3
check available
5
likely to be exploited
10

Every one of the 1,476 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and possibly execute arbitrary code by logging in to the RDS compo…CVE-2013-0632Adobe · CVSS 9.8 · 93% likely

    Adobe

  2. The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may…CVE-2022-22948VMware · CVSS 6.5 · 13% likely

    VMwareUNC3886

  3. Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis B…CVE-2026-87886Acronis · CVSS 7.8 · 0.2% likelycovered by CyberSIXT

    Acronis3 articles

  4. XML-RPC Server - Remote Code ExecutionCVE-2017-1161088% likely
  5. SolarView Compact <= 6.00 - Local File InclusionCVE-2023-29919CVSS 9.8 · 60% likely
  6. PowerJob <=4.3.2 - Unauthenticated AccessCVE-2023-29923CVSS 5.3 · 9.5% likely
  7. Puppet Server/PuppetDB - Sensitive Information DisclosureCVE-2020-7943Puppet Enterprise 2018.1.x stream · 7.7% likely
  8. Couchbase Server - Broken Access ControlCVE-2020-90393.9% likely
  9. Kramer VIAware 2.5.0719.1034 has Incorrect Access Control.CVE-2019-1712423% likely
  10. An issue was discovered in SolarWinds MSP PME (Patch Management Engine) Cache Service before 1.1.15 in the Advanced Monitoring Agent. There are insecure file permissions for %PROG…CVE-2020-1260822% likely
  11. Potential security vulnerabilities have been identified in an OMEN Gaming Hub SDK package which may allow escalation of privilege and/or denial of service. HP is releasing softwar…CVE-2021-3437HP Inc. · CVSS 9.8 · 16% likely

    HP

  12. The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment t…CVE-2020-1269515% likely
  13. Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to bypass Device Guard User Mode Code Integrity (UMCI) policies due to Internet…CVE-2017-8625Microsoft Corporation · 15% likely

    Microsoft

  14. An access control issue in the component formDMZ.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the DMZ service of the device via a crafted…CVE-2024-57684Dlink · CVSS 9.8 · 15% likely

    D-Link

  15. An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. A vulnerability has been identified in the authentication and authorization process of the endpoint responsi…CVE-2024-39924Dani-Garcia · CVSS 8.8 · 13% likely

    Dani-Garcia

  16. An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files (outside of their permissions) via a symlin…CVE-2018-14335CVSS 6.5 · 13% likely
  17. eQ-3 Homematic Central Control Unit (CCU)2 through 2.51.6 and CCU3 through 3.51.6 allow Remote Code Execution in the JSON API Method ReGa.runScript, by unauthenticated attackers w…CVE-2020-1283411% likely
  18. The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing.CVE-1999-042611% likely
  19. Sonatype Nexus Repository Manager 3.x up to and including 3.21.2 has Incorrect Access Control.CVE-2020-114448.5% likely
  20. INSTEON Hub 2242-222 lacks Web and API authenticationCVE-2013-48597.0% likely
  21. Arbitrary file deletion on logoutCVE-2021-44140Apache Software Foundation · 6.4% likely

    Apache

  22. Incorrect File Permissions in Nagios XI 5.7.5 and earlier and Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to root. Low-privileged users are able to modify file…CVE-2020-289066.2% likely
  23. Diasoft File Replication Pro 7.5.0 allows attackers to escalate privileges by replacing a legitimate file with a Trojan horse that will be executed as LocalSystem. This occurs bec…CVE-2023-26918CVSS 9.8 · 6.1% likely
  24. Millennium Millewin (also known as "Cartella clinica") 13.39.028, 13.39.28.3342, and 13.39.146.1 has insecure folder permissions allowing a malicious user for a local privilege es…CVE-2021-33945.9% likely
  25. An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILES(X86)%\TSplus\Clients\www.CVE-2023-310675.5% likely
  26. An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILES(X86)%\TSplus\UserDesktop…CVE-2023-310685.4% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in