Skip to content

CWE-419 · weakness in Access Control

Unprotected Primary Channel

8 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

check available
1

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

  1. Debug Endpoint pprof - Exposure DetectionCVE-2019-11248Kubernetes · CVSS 6.5 · 75% likely

    Kubernetes1 bounty report

  2. Node.js: All versions prior to Node.js 6.15.0: Debugger port 5858 listens on any interface by default: When the debugger is enabled with `node --debug` or `node debug`, it listens…CVE-2018-12120The Node.js Project · 4.3% likely

    Node.js

  3. Spigot Command Exploit in TritonCVE-2023-30859tritonmc · CVSS 7.2 · 1.1% likely
  4. Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.2, contain an unprotected primary channel vulnerability. An unauthenticated networ…CVE-2022-33932Dell · CVSS 5.3 · 0.9% likely

    Dell

  5. In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach…CVE-2018-12539The Eclipse Foundation · 0.5% likely

    Eclipse Foundation

  6. Envoy Admin Interface Exposed through prometheus metrics endpointCVE-2025-24030envoyproxy · CVSS 7.1 · 0.4% likely

    Envoyproxy

  7. Unprotected Primary Channel vulnerability in Movistar 4G routerCVE-2024-2414Movistar · CVSS 8.8 · 0.3% likely
  8. TONE store App version 3.4.2 and earlier contains an issue with unprotected primary channel. Since TONE store App communicates with TONE store website in cleartext, a man-in-the-m…CVE-2024-39886DREAM TRAIN INTERNET INC. · CVSS 3.7 · 0.3% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.