Skip to content
BackEsc
Connect AISign inSign up free

CWE-669 · weakness in Access Control

Incorrect Resource Transfer Between Spheres

112 CVEs · 2 exploited

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Connect AI

exploited in the wild
2
check available
1
likely to be exploited
3

Every one of the 112 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. crypto: algif_aead - Revert to operating out-of-placeCVE-2026-31431Linux · CVSS 7.8 · 98% likelycovered by CyberSIXT

    Linux1 article

  2. Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to…CVE-2026-111793Openwave Messaging (Ireland) Limited · CVSS 4.3 · 0.6% likelycovered by CyberSIXT

    Openwave Messaging (Ireland) Limited5 articles5 articles this week: Hackers Exploit Openwave and Cisco BroadWorks Flaws

  3. Dify v1.9.1 - Broken Access ControlCVE-2025-63387Dify · CVSS 4.3 · 19% likely
  4. SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfe…CVE-2002-0055Microsoft · 38% likely

    Microsoft

  5. OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically makes a WebSocket connection without prompting, sending a toke…CVE-2026-25253OpenClaw · CVSS 8.8 · 32% likelycovered by CyberSIXT

    OpenClaw1 article

  6. Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2020-1048Microsoft · CVSS 7.8 · 17% likely

    Microsoft

  7. V6.0.10P2T2 and V6.0.10P2T5 of F6x2W product are impacted by Information leak vulnerability. Unauthorized users could log in directly to obtain page information without entering a…CVE-2020-6862ZTE Corporation · 6.3% likely

    ZTE

  8. 2FA bypass in Kaseya VSA <= v9.5.6CVE-2021-30120Kaseya · CVSS 9.9 · 5.7% likely

    Kaseya1 bounty report

  9. The web server in Aternity before 9.0.1 does not require authentication for getMBeansFromURL loading of Java MBeans, which allows remote attackers to execute arbitrary Java code b…CVE-2016-5062Aternity · 3.9% likely

    Aternity

  10. containerd-shim API Exposed to Host Network ContainersCVE-2020-15257containerd · CVSS 5.2 · 3.1% likely

    Containerd

  11. Opera does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote at…CVE-2004-0872Opera · 2.7% likely

    Opera

  12. In AutomateAppCore.dll in Blue Prism Robotic Process Automation 6.4.0.8445, a vulnerability in access control can be exploited to escalate privileges. The vulnerability allows for…CVE-2019-11875Blueprism · 2.2% likely
  13. Newgen OmniFlow Intelligent Business Process Suite (iBPS) 7.0 has an "improper server side validation" vulnerability where client-side validations are tampered, and inappropriate…CVE-2018-17791Newgensoft · 1.9% likely

    Newgensoft

  14. FreeBSD NSD before 3.2.13 allows remote attackers to crash a NSD child server process (SIGSEGV) and cause a denial of service in the NSD server.CVE-2012-2979nsd3 · 1.7% likely
  15. An issue was discovered in apply.cgi on D-Link DAP-1520 devices before 1.10b04Beta02. Whenever a user performs a login action from the web interface, the request values are being…CVE-2020-15892Dlink · 1.6% likely

    D-Link

  16. The Eat Spray Love mobile app for both iOS and Android contains logic that allows users to bypass authentication and retrieve or modify information that they would not normally ha…CVE-2020-5800Eat Spray Love Project · 1.6% likely
  17. An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4., that allows attackers to escalate privileges within the application, since all permission checks are done client-side…CVE-2021-45891Zauner · 1.4% likely
  18. SmokeDetector intentionally does automatic deployments of updated copies of SmokeDetector without server operator authority.CVE-2019-1020011SmokeDetector · CVSS 9 · 1.3% likely
  19. Stratodesk NoTouch Center before 4.4.68 is affected by: Incorrect Access Control. A low privileged user on the platform, for example a user with "helpdesk" privileges, can perform…CVE-2020-25917Stratodesk · 1.3% likely
  20. D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. A DHCP Request is sent to th…CVE-2019-13263Dlink · 1.2% likely

    D-Link

  21. Apache Airflow Providers Edge3: Edge3 Worker RPC RCE on Airflow 2CVE-2025-67895Apache Software Foundation · CVSS 9.8 · 1.2% likely

    Apache

  22. Proxy-Authorization request header isn't stripped during cross-origin redirects in urllib3CVE-2024-37891urllib3 · CVSS 4.4 · 1.1% likely

    Urllib3

  23. TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. A DHCP…CVE-2019-13266Tp-Link · 1.0% likely

    TP-Link

  24. A CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could cause data exfiltration and unauthorized access when accessing a malicious website. Affected…CVE-2021-22806Schneider-Electric · 1.0% likely

    Schneider Electric

  25. In Red Hat CloudForms 4.7 and 5, the read only widgets can be edited by inspecting the forms and dropping the disabled attribute from the fields since there is no server-side vali…CVE-2020-10778Redhat · 0.9% likely

    Red Hat

  26. Firefox used to cache the last filename used for printing a file. When generating a filename for printing, Firefox usually suggests the web page title. The caching and suggestion…CVE-2021-29960Mozilla · 0.8% likely

    Mozilla

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Sign inSign up free

Updated