CWE-1357 · Other weaknesses
Reliance on Insufficiently Trustworthy Component
9CVEs
SortMost likely exploited
9 CVEs with CWE-1357 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-47619NVIDIA Dynamo for Linux examples and recipes contain a vulnerability where an attacker could cause a system failure. A successful exploit of this vulnerability might lead to code…NVIDIA · Dynamo · CVSS 6.6 · 2026-08-04 | 6.6 | 0.8% | 2026-08-04 |
| CVE-2025-32800Conda-build vulnerable to supply chain attack vector due to pyproject.toml referring to dependencies not present in PyPIconda · conda-build · CVSS 7.2 · 2025-06-16 | 7.2 | 0.7% | 2025-06-16 |
| CVE-2026-75569Mce-operator-bundle: all github actions pinned by mutable tag, not commit shaRed Hat · multicluster engine for Kubernetes 2.10 · CVSS 7.7 · 2026-08-19 | 7.7 | 0.6% | 2026-08-19 |
| CVE-2026-85469Quay-builder-qemu: quay-builder-qemu: release workflow uses third-party action pinned to mutable @master with registry credentials in scopeRed Hat · Red Hat Quay 3 · CVSS 8 · 2026-09-16 | 8.0 | 0.5% | 2026-09-16 |
| CVE-2026-66783Submariner-operator: release workflow consumes same-org composite action via mutable @devel branch refRed Hat · Red Hat Advanced Cluster Management for Kubernetes 2.16 · CVSS 4.4 · 2026-08-18 | 4.4 | 0.4% | 2026-08-18 |
| CVE-2026-67275Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability. An unauthenticated attacker with remote access could…Dell · PowerProtect One · CVSS 5.3 · 2026-08-26 | 5.3 | 0.3% | 2026-08-26 |
| CVE-2024-3313SUBNET PowerSYSTEM Server and Substation Server Reliance on Insufficiently Trustworthy ComponentSUBNET Solutions · PowerSYSTEM Server · CVSS 8.4 · 2024-04-09 | 8.4 | 0.3% | 2024-04-09 |
| CVE-2024-28042SUBNET PowerSYSTEM Center Reliance on Insufficiently Trustworthy ComponentSUBNET · PowerSYSTEM Center · CVSS 8.4 · 2024-05-15 | 8.4 | 0.2% | 2024-05-15 |
| CVE-2024-26024SUBNET Substation Server Reliance on Insufficiently Trustworthy ComponentSUBNET · Substation Server · CVSS 8.4 · 2024-05-28 | 8.4 | 0.2% | 2024-05-28 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.