Incorrect User Management

Every one of the 32 is a mark on the map. Named now: 1 to 26, most at risk first.

1. A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote u…CVE-2024-29296Portainer · CVSS 5.3 · 1.3% likely

   Portainer

2. Incorrect User Management in GitLabCVE-2023-3932GitLab · CVSS 8.2 · 0.9% likely

   GitLab

3. A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application creates temporary user credentials for UMC (User Management…CVE-2022-32260Siemens · CVSS 6.5 · 0.8% likely

   Siemens

4. Improper User Management in GitLabCVE-2023-3907GitLab · CVSS 4.9 · 0.7% likely

   GitLab

5. Philips MRI 1.5T and 3T Improper Access ControlCVE-2021-26262Philips · CVSS 5.9 · 0.7% likely

   Philips

6. An issue discovered in CS-Cart MultiVendor 4.16.1 allows attackers to alter arbitrary user account profiles via crafted post request.CVE-2023-26689Cs-Cart · CVSS 9.8 · 0.6% likely

   Cs-Cart

7. Unintentional change of settings during initial registration of system administrators which uses control protocols. The affected Office / Small Office Multifunction Printers and L…CVE-2023-0857Canon Inc. · CVSS 5.9 · 0.6% likely

   Canon Inc.

8. Improper verification of a user input in Open Source MANO v7-v12 allows an authenticated attacker to execute arbitrary code within the LCM module container via a Virtual Network F…CVE-2022-35503CVSS 7.5 · 0.5% likely
9. Rockwell Automation FactoryTalk® Linx Network Browser Security Bypass VulnerabilityCVE-2025-7972Rockwell Automation · CVSS 8.4 · 0.5% likely

   Rockwell Automation

10. The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an improperly secured default configuration. An insecure, non-revocable…CVE-2026-56428Bosch · CVSS 8.1 · 0.5% likely

    Bosch

11. An Incorrect User Management vulnerability [CWE-286] in FortiWeb version 7.6.2 and below, version 7.4.6 and below, version 7.2.10 and below, version 7.0.11 and below widgets dashb…CVE-2024-46671Fortinet · CVSS 5.6 · 0.5% likely

    Fortinet

12. IBM QRadar SIEM information disclosureCVE-2024-27269IBM · CVSS 6.8 · 0.4% likely

    IBM

13. Incorrect User Management in GitLabCVE-2023-3914GitLab · CVSS 5.4 · 0.4% likely

    GitLab

14. phpMyFAQ duplicate email registration allows multiple accounts with the same emailCVE-2025-59943thorsten · CVSS 8.1 · 0.4% likely

    Thorsten

15. Incorrect User Management in GitLabCVE-2023-3115GitLab · CVSS 5.4 · 0.4% likely

    GitLab

16. Authenticated Escalation to guest to rootCVE-2024-48853ABB · CVSS 9 · 0.4% likely

    ABB

17. Weintek cMT3092X Incorrect User ManagementCVE-2026-60135Weintek · CVSS 6.5 · 0.4% likely

    Weintek

18. A user/password reuse vulnerability exists in the FOXMAN-UN/UNEM application and server management. If exploited a malicious high-privileged user could use the passwords and login…CVE-2024-28020Hitachi Energy · CVSS 8 · 0.4% likely

    Hitachi Energy

19. Weblate has improper validation upon invitation acceptanceCVE-2025-64725WeblateOrg · CVSS 1 · 0.3% likely

    WeblateOrg

20. An incorrect user management vulnerability [CWE-286] in the FortiManager version 6.4.6 and below VDOM creation component may allow an attacker to access a FortiGate without a pass…CVE-2022-45857Fortinet · CVSS 6 · 0.3% likely

    Fortinet

21. Zoom Workplace Apps - Incorrect User ManagementCVE-2024-45425Zoom Communications, Inc · CVSS 4.9 · 0.3% likely

    Zoom Communications, Inc

22. IBM Concert Software improper access controlsCVE-2024-52359IBM · CVSS 4.3 · 0.3% likely

    IBM

23. Incorrect User Management in GitLabCVE-2024-13041GitLab · CVSS 4.2 · 0.3% likely

    GitLab

24. OpenClaw < 2026.3.22 - Privilege Escalation via Self-Declared Scopes in Trusted-Proxy Control UICVE-2026-35638OpenClaw · CVSS 8.8 · 0.3% likely

    OpenClaw

25. ScaleFusion 10.5.2 does not properly limit users to the Edge application because file downloads can occur. NOTE: the vendor's position is "Not vulnerable if the default Windows de…CVE-2023-51750Scalefusion · 0.3% likely

    Scalefusion

26. Authd, through version 0.3.6, did not sufficiently randomize user IDs to prevent collisions. A local attacker who can register user names could spoof another user's ID and gain th…CVE-2024-9312Canonical Ltd. · CVSS 7.5 · 0.3% likely

    Canonical

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.