Predictable from Observable State

Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.

1. Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the administrator's password, which could lead to a full compromise of…CVE-2019-6563ICS-CERT · 1.7% likely

   ICS-CERT

2. A flaw was found in all versions of the Keycloak operator, before version 8.0.2,(community only) where the operator generates a random admin password when installing Keycloak, how…CVE-2020-1731Red Hat · CVSS 9.1 · 1.3% likely

   Red Hat

3. All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attack…CVE-2018-17917Hangzhou Xiongmai Technology Co., Ltd · 1.3% likely
4. Dell EMC Isilon versions 8.2.2 and earlier contain a remotesupport vulnerability. The pre-configured support account, remotesupport, is bundled in the Dell EMC Isilon OneFS instal…CVE-2020-5365Dell · CVSS 5.3 · 1.0% likely

   Dell

5. jsbroks COCO Annotator Session predictable stateCVE-2024-10141jsbroks · CVSS 3.7 · 0.8% likely

   Jsbroks

6. ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTPserver.cpp use weak time-seeded pseudo-…CVE-2026-38968Ntop · CVSS 9.8 · 0.6% likely

   Ntop

7. fredsmith utils Filename screenshot_sync predictable stateCVE-2021-4277fredsmith · CVSS 2.6 · 0.5% likely
8. Weak Session Cookie EntropyCVE-2025-48461Advantech · CVSS 5 · 0.5% likely

   Advantech

9. Cache poisoning due to weak PRNGCVE-2025-40780ISC · CVSS 8.6 · 0.5% likely

   Isc

10. Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock and process id in CreateSessionAuthKeyCVE-2026-19565CVSS 3.7 · 0.4% likely
11. Keycloak-services: keycloak-services: predictable account-linking hash enables account takeover via malicious oidc clientCVE-2026-15571Red Hat · CVSS 7.3 · 0.4% likelycovered by CyberSIXT

    Red Hat1 article

12. GeoVision LPC2011/LPC2211 Web Interface guessable session cookie vulnerabilityCVE-2026-42365GeoVision Inc. · CVSS 8.6 · 0.3% likely

    GeoVision Inc.

13. Bruteforcing authentication cookie for a given userCVE-2023-49259Hongdian · CVSS 7.5 · 0.3% likely

    Hongdian

14. Predictable Object Identifier vulnerability in SAP NetWeaver AS Java (IIOP Service)CVE-2025-42925SAP_SE · CVSS 4.3 · 0.3% likely

    SAP

15. Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 uses a static authentication nonce that does not change between requests from the same source IP. Combined with the…CVE-2026-36609CVSS 7.3 · 0.2% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.