CWE-1327 · Access Control
Binding to an Unrestricted IP Address
33CVEs
SortMost likely exploited
33 CVEs with CWE-1327 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-47176CheckCUPS - Remote Code ExecutionOpenPrinting · cups-browsed · CVSS 5.3 · 2024-09-26 | 5.3 | 51% | 2024-09-26 |
| CVE-2026-82456Checkargocd-mcp 0.8.0 - Unauthenticated MCP Session and Tool Accessargoproj-labs · argocd-mcp · CVSS 10 · 2026-08-29 | 10.0 | 2.4% | 2026-08-29 |
| CVE-2026-59177CheckESPHome Device Builder <1.0.10 - Unauthenticated Dashboard Accessesphome · device-builder · CVSS 8.8 · 2026-10-28 | 8.8 | 1.2% | 2026-10-28 |
| CVE-2023-1968CVE-2023-1968Illumina · iScan Control Software · CVSS 10 · 2023-04-28 | 10.0 | 1.8% | 2023-04-28 |
| CVE-2026-112346OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCEOpenHands · OpenHands Software Agent SDK · CVSS 9.8 · 2026-10-26 | 9.8 | 1.0% | 2026-10-26 |
| CVE-2026-20212Cisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution VulnerabilityCisco · Cisco NX-OS Software · CVSS 9.8 · 2026-09-02 | 9.8 | 0.8% | 2026-09-02 |
| CVE-2024-36105dbt allows Binding to an Unrestricted IP Address via socketsocketdbt-labs · dbt-core · CVSS 5.3 · 2024-05-27 | 5.3 | 0.7% | 2024-05-27 |
| CVE-2026-75021fastify-cli vulnerable to remote code execution via ignored explicit Inspector bind addressfastify-cli · fastify-cli · CVSS 8.1 · 2026-09-08 | 8.1 | 0.7% | 2026-09-08 |
| CVE-2025-61934AutomationDirect Productivity Suite Binding to an Unrestricted IP Address CWE-1327AutomationDirect · Productivity Suite · CVSS 10 · 2025-10-23 | 10.0 | 0.7% | 2025-10-23 |
| CVE-2026-24015Apache IoTDB: Insecure Default Configuration VulnerabilityApache Software Foundation · Apache IoTDB · CVSS 9.8 · 2026-03-09 | 9.8 | 0.6% | 2026-03-09 |
| CVE-2026-21528Azure IoT Explorer Information Disclosure VulnerabilityMicrosoft · Azure IoT Explorer · CVSS 6.5 · 2026-02-10 | 6.5 | 0.5% | 2026-02-10 |
| CVE-2026-100868Penpot before 2.18.0 Unauthenticated WebSocket Access via MCP Bridgepenpot · penpot · CVSS 6.3 · 2026-09-27 | 6.3 | 0.5% | 2026-09-27 |
| CVE-2026-92559IBM App Connect Enterprise is vulnerable to a credential exposureIBM · App Connect Enterprise · CVSS 9.8 · 2026-10-20 | 9.8 | 0.5% | 2026-10-20 |
| CVE-2023-41742Excessive attack surface due to binding to an unrestricted IP address. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 30430, Acronis Cyber…Acronis · Acronis Agent · CVSS 4.3 · 2023-08-31 | 4.3 | 0.5% | 2023-08-31 |
| CVE-2026-16713IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code executionIBM · Documentation Offline · CVSS 4.3 · 2026-08-13 | 4.3 | 0.5% | 2026-08-13 |
| CVE-2026-28395OpenClaw 2026.1.14-1 < 2026.2.12 - Unintended Public Binding of Chrome Extension Relay via Wildcard cdpUrlOpenClaw · OpenClaw · CVSS 6.5 · 2026-03-05 | 6.5 | 0.5% | 2026-03-05 |
| CVE-2023-5398Server receiving a malformed message based on a list of IPs resulting in heap corruption causing a denial of service. See Honeywell Security Notification for recommendations on up…Honeywell · Experion Server · CVSS 5.9 · 2024-04-17 | 5.9 | 0.4% | 2024-04-17 |
| CVE-2026-16503VPS.org one-click Supabase template deployment instance contains multiple vulnerabilitiesVPS.org · Supabase template · CVSS 9.1 · 2026-07-31 | 9.1 | 0.4% | 2026-07-31 |
| CVE-2025-11538Keycloak-server: debug default bind addressKeycloak · keycloak · CVSS 6.8 · 2025-11-13 | 6.8 | 0.4% | 2025-11-13 |
| CVE-2022-29820In JetBrains PyCharm before 2022.1 exposure of the debugger port to the internal network was possibleJetBrains · PyCharm · CVSS 3 · 2022-04-28 | 3.0 | 0.4% | 2022-04-28 |
| CVE-2025-55322OmniParser Remote Code Execution VulnerabilityMicrosoft · OmniParser · CVSS 7.3 · 2025-09-24 | 7.3 | 0.4% | 2025-09-24 |
| CVE-2026-119249A malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address vulnerability found in WiFiman Desktop to obtain information about the host devi…Ubiquiti Inc · WiFiman Desktop · CVSS 7.5 · 2026-10-29 | 7.5 | 0.3% | 2026-10-29 |
| CVE-2026-0481Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configuration, potenti…AMD · AMD Instinct™ MI210 · CVSS 9.2 · 2026-05-15 | 9.2 | 0.3% | 2026-05-15 |
| CVE-2026-112136A vulnerability has been identified in Mendix Studio Pro 11 (All versions >= V11.15.0 < V11.16.0), Mendix Studio Pro 11.12 (All versions >= V11.12.6 < V11.12.7). The affected prod…Siemens · Mendix Studio Pro 11 · CVSS 8.8 · 2026-11-10 | 8.8 | 0.3% | 2026-11-10 |
| CVE-2026-47873Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfacesSpring · Spring Tools for Eclipse · CVSS 8 · 2026-07-30 | 8.0 | 0.3% | 2026-07-30 |
| CVE-2026-72924GitHub CLI: `gh codespace ports forward` exposes forwarded services on all network interfaces by defaultcli · cli · CVSS 2.1 · 2026-08-25 | 2.1 | 0.3% | 2026-08-25 |
| CVE-2026-108760LlamaFarm through 0.0.34 Unauthenticated API Exposed on All Interfacesllama-farm · llamafarm · CVSS 7.6 · 2026-10-11 | 7.6 | 0.2% | 2026-10-11 |
| CVE-2024-49384Excessive attack surface in acep-collector service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) bef…Acronis · Acronis Cyber Protect 16 · CVSS 3.5 · 2024-10-15 | 3.5 | 0.2% | 2024-10-15 |
| CVE-2024-49383Excessive attack surface in acep-importer service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) befo…Acronis · Acronis Cyber Protect 16 · CVSS 3.5 · 2024-10-15 | 3.5 | 0.2% | 2024-10-15 |
| CVE-2024-49382Excessive attack surface in archive-server service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) bef…Acronis · Acronis Cyber Protect 16 · CVSS 3.5 · 2024-10-15 | 3.5 | 0.2% | 2024-10-15 |
| CVE-2026-42503Accidental binding to INADDR_ANY might lead to RCE in golang.org/x/tools/goplsgolang.org/x/tools · golang.org/x/tools/gopls · CVSS 8.8 · 2026-05-06 | 8.8 | 0.2% | 2026-05-06 |
| CVE-2026-111249Apache TomEE: Unauthenticated LiveReload endpoint reachable from the networkApache Software Foundation · Apache TomEE · 2026-11-10 | – | 0.2% | 2026-11-10 |
| CVE-2026-97849Apache TomEE: Derby network service listens on all interfacesApache Software Foundation · Apache TomEE · 2026-11-10 | – | 0.2% | 2026-11-10 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.