External Control of Critical State Data

Every one of the 20 is a mark on the map. Named now: 1 to 20, most at risk first.

1. An invalid authentication sequence could result in the hostapd process terminating due to missing state validation stepsCVE-2019-9496Wi-Fi Alliance · 4.6% likely

   Wi-Fi Alliance

2. Cisco HyperFlex Software Static Signing Key VulnerabilityCVE-2018-15382Cisco · 1.3% likely

   Cisco

3. html-janitor node module suffers from an External Control of Critical State Data vulnerability via user-control of the '_sanitized' variable causing sanitization to be bypassed.CVE-2017-0928HackerOne · 1.0% likely

   HackerOne1 bounty report

4. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7450 1.2.0.62_1.0.1 routers. Authentication is not required to…CVE-2020-27872NETGEAR · CVSS 8.8 · 0.9% likely

   NETGEAR

5. Remote Code ExecutionCVE-2023-0575YugabyteDB · CVSS 7.2 · 0.8% likely

   YugabyteDB

6. A logic issue was addressed with improved state management. This issue is fixed in iOS 16. Deleted contacts may still appear in spotlight search results.CVE-2022-32859Apple · CVSS 5.3 · 0.7% likely

   Apple

7. The Matrix specification before 1.16 (i.e., with a room version before 12 and State Resolution before 2.1) has deficient state resolution.CVE-2025-49090Matrix · CVSS 7.1 · 0.5% likely

   Matrix

8. The snow crate before 0.9.5 for Rust, when stateful TransportState is used, allows incrementing a nonce and thereby denying message delivery.CVE-2024-58265mcginty · CVSS 3.1 · 0.5% likely
9. External Control of Critical State Data in GitLabCVE-2024-8754GitLab · CVSS 6.4 · 0.4% likely

   GitLab

10. Unsafe behavior in setuid/setgid binaries in runtimeCVE-2023-29403Go standard library · CVSS 7.8 · 0.4% likely

    Go standard library

11. Dell Inspiron 5675 BIOS versions prior to 1.4.1 contain a UEFI BIOS RuntimeServices overwrite vulnerability. A local attacker with access to system memory may exploit this vulnera…CVE-2020-26186Dell · CVSS 6.8 · 0.4% likely

    Dell

12. An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6…CVE-2026-65355Apple · CVSS 4.3 · 0.3% likely

    Apple

13. This issue was addressed through improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious website may be able to determ…CVE-2026-84518Apple · CVSS 4.3 · 0.3% likely

    Apple

14. An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 26.6.1. A website m…CVE-2026-65352Apple · CVSS 4.3 · 0.3% likely

    Apple

15. External Control of Critical State Data (CWE-642) in the Controller 6000 and Controller 7000 diagnostic web interface allows an authenticated user to modify device I/O connections…CVE-2024-22387Gallagher · CVSS 6.8 · 0.3% likely

    Gallagher

16. Zimbra Collaboration Suite RestFilter Request Attribute Override via Unauthenticated URL ParametersCVE-2026-50053Zimbra · CVSS 8.7 · 0.3% likelycovered by CyberSIXT

    Zimbra1 article

17. hw/pci/pcie_sriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327.CVE-2025-54566QEMU · CVSS 4.2 · 0.3% likely

    Qemu

18. GlobalProtect on MacOS: Local denial-of-service (DoS) vulnerability.CVE-2020-1976Palo Alto Networks · CVSS 4.7 · 0.3% likely

    Palo Alto Networks

19. Junos Fusion: A Satellite Device can be controlled by rewiring it to a foreign AD causing a DoSCVE-2022-22154Juniper Networks · CVSS 6.8 · 0.3% likely

    Juniper Networks

20. An error in the SignServer container startup logic was found in Keyfactor SignServer versions prior to 7.2. The Admin CLI command used to configure Certificate access to the initi…CVE-2025-26787Keyfactor · CVSS 4.7 · 0.1% likely

    Keyfactor

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.