CWE-420 · weakness in Access Control
Unprotected Alternate Channel
41 CVEs · 2 exploited
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- exploited in the wild
- 2
- check available
- 3
- likely to be exploited
- 1
Every one of the 41 is a mark on the map. Named now: 1 to 26, most at risk first.
- Cisco IOS XE Web UI - Command Injection
- CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is not used, mishandles AS2 validation and consequently allows remote attackers to obtain admin acces…
- Twonky Server 8.5.2 on Linux and Windows - Log File Exposure
- LiteLLM < 1.25.0 - Remote Code Execution
- ComfyUI-Manager < 3.38 - Configuration Overwrite
- Rockwell Automation Chassis Restrictions Bypass Vulnerability in Select Logix Devices
- Framelink Figma MCP Server before 0.6.3 allows an unauthenticated remote attacker to execute arbitrary operating system commands via a crafted HTTP POST request with shell metacha…
- Kubernetes node setting allows for neighboring hosts to bypass localhost boundary
- moby/moby's dockerd daemon encrypted overlay network may be unauthenticated
- moby/moby's dockerd daemon encrypted overlay network with a single endpoint is unauthenticated
- Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright.
- Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13, when "Block remote images" is used, does not block SVG feImage.
- GateManager debug interface is included in production builds
- LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Bypass to User Registration
- Windows Schannel Spoofing Vulnerability
- In Innoshop through 0.4.1, an authenticated attacker could exploit the File Manager functions in the admin panel to achieve code execution on the server, by uploading a crafted fi…
- GateManager debug interface is included in non-debug builds
- In iperf before 3.19.1, net.c has a buffer overflow when --skip-rx-copy is used (for MSG_TRUNC in recv).
- LearnPress – WordPress LMS Plugin <= 4.2.6.8.1 - Unauthenticated Bypass to User Registration
- Issues notification metadata lacks authorization
- Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could concatenate many gzip or zlib sub-streams, each just under the per-stream detection threshold, to…
- The Dyson MQTT server (2022 and possibly later) allows publications and subscriptions by a client that has the correct values of AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_SESS…
- Security Advisory 0209
- BullWall Ransomware Containment hard-coded folder exclusions
- Improper Restriction in NI MeasurementLink Python Services
- The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control (WDAC) policy. Entries that specify only the to-be-signed (TBS) part of the code…
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.