CWE-656 · weakness in Misconfiguration and Insecure Design
Reliance on Security Through Obscurity
10 CVEs
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
Every one of the 10 is a mark on the map. Named now: 1 to 10, most at risk first.
- RVD#3321: No Authentication required to exert manual control of the robot
- Privilege Escalation in Cellular Router, Secure Router, and Network Security Appliances
- Frontend Authorization Logic Disclosure Vulnerability
- RVD#3323: Mismanaged permission implementation leads to privilege escalation, exfiltration of sensitive information, and DoS
- TP-Link Omada ER605 Reliance on Security Through Obscurity Vulnerability
- RVD#2562: Booting from a live image leads to exfiltration of sensible information and privilege escalation
- GeoVision GV-IP Device Utility Device Authentication insufficient encryption vulnerability
- GeoVision GV-IP Device Utility Device Authentication insufficient encryption vulnerability
- Insecure Password Derivation Function for Database Administrator in dormakaba Kaba exos 9300
- BYD DiLink OS Incorrect encryption Implementation of system log dumps
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.