Unexpected Status Code or Return Value

Every one of the 17 is a mark on the map. Named now: 1 to 17, most at risk first.

1. sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to misinterpretation of whether a stri…CVE-2026-123158OpenBSD · CVSS 8.1 · 19% likelycovered by CyberSIXT

   OpenBSD14 articles9 articles this week: CISA adds four exploited software flaws to its KEV catalogue

2. Post-auth queries on compound index may crash mongodCVE-2018-20802MongoDB Inc. · CVSS 6.5 · 1.6% likely

   MongoDB

3. Junos OS: A malformed IPv4 packet received by Junos in an NG-mVPN scenario may cause the routing protocol daemon (rpd) process to coreCVE-2019-0066Juniper Networks · CVSS 7.5 · 1.4% likely

   Juniper Networks

4. Invariant in IndexBoundsBuilderCVE-2019-20924MongoDB Inc. · CVSS 6.5 · 1.3% likely

   MongoDB

5. Copeland XWEB and XWEB Pro Unexpected Status Code or Return ValueCVE-2026-25085Copeland · CVSS 8.6 · 0.8% likely

   Copeland

6. A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The Web UI of affected devices does not check the length of parameters in certain conditions.…CVE-2023-48429Siemens · CVSS 2.7 · 0.6% likely

   Siemens

7. Server Data type confusion - info leakCVE-2023-25948Honeywell · CVSS 7.5 · 0.6% likely

   Honeywell

8. Plv8 Deferred Trigger Privilege EscalationCVE-2024-1713Plv8 · CVSS 7.2 · 0.6% likely
9. In Yubico pam-u2f before 1.3.1, local privilege escalation can sometimes occur. This product implements a Pluggable Authentication Module (PAM) that can be deployed to support aut…CVE-2025-23013Yubico · CVSS 7.3 · 0.4% likely
10. Lack of Graceful Error Handling - HTTP 5xx ErrorCVE-2025-12516Azure Access Technology · CVSS 10 · 0.4% likely

    Azure Access Technology

11. Systemic Internal Server Errors - HTTP 500 ResponseCVE-2025-12515Azure Access Technology · CVSS 10 · 0.4% likely

    Azure Access Technology

12. Possible thread exhaustion from processing http responses in PingFederate Google AdapterCVE-2025-22854Ping Identity · CVSS 6.9 · 0.4% likely

    Ping Identity

13. Junos OS: The kernel will crash when certain USB devices are insertedCVE-2023-28975Juniper Networks · CVSS 4.6 · 0.3% likely

    Juniper Networks

14. In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks,…CVE-2026-76956libexpat project · CVSS 5.9 · 0.3% likely

    Libexpat Project

15. Crux Agent silently fails SKA preshared key rotation when SHA-512 peering is negotiatedCVE-2026-107785Sirius Computer, Inc. · CVSS 6.3 · 0.1% likely
16. Improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availability.CVE-2025-48510AMD · CVSS 7.1 · 0.1% likely

    AMD

17. In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only…CVE-2026-73064trustedfirmware · CVSS 2.9 · 0.1% likely

    Trustedfirmware

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.