CWE-1259 · weakness in Other weaknesses
Improper Restriction of Security Token Assignment
18 CVEs
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
Every one of the 18 is a mark on the map. Named now: 1 to 18, most at risk first.
- KubePi's JWT token validation has a defect
- Pterodactyl's improper JWT scoping allows subuser to upload files when not explicitly granted `file.create` permissions
- Multiple Vulnerabilities in IBM API Connect
- Insecure permissions in volcano v1.8.2 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
- Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints
- Cisco Secure Firewall Management Center Software Single Sign-On Token Forgery of Administrator Account Vulnerability
- Apache Answer: AdminToken not invalidated after admin deactivation
- In Gatling Enterprise versions below 1.25.0, a user logging-out can still use his session token to continue using the application without expiration, due to incorrect session mana…
- A CORS misconfiguration in Nginx Proxy Manager v2.12.3 allows unauthorized domains to access sensitive data, particularly JWT tokens, due to improper validation of the Origin head…
- Clinical Collaboration Platform 12.2.1.5 has a weak logout system where the session token remains valid after logout and allows a remote attacker to obtain sensitive information a…
- TitanSystems Zender v3.9.7 contains an account takeover vulnerability in its password reset functionality. A temporary password or reset token issued to one user can be used to lo…
- A security flaw in the '_transfer' function of a smart contract implementation for Money Making Opportunity (MMO), an Ethereum ERC721 Non-Fungible Token (NFT) project, allows user…
- Information Disclosure in Multiple WSO2 Products Due to Improper Handling in Enrich Mediator
- OpenBao's Token Store Allows Cross-Namespace Renewal, Revocation
- biscuit-java vulnerable to public key confusion in third party block
- Gitea admin API public-only token scope bypass
- In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exceptionally high compression ra…
- Page table protection configuration vulnerability in the trusted firmware module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.