CWE-276 · Access Control
Incorrect Default Permissions
1,478CVEs
3exploited
5with a public check
10likely (EPSS 10%+)
SortMost likely exploited
1,478 CVEs with CWE-276 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2013-0632In CISA KEVExploitedadministrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and possibly execute arbitrary code by logging in to the RDS compo…Adobe · ColdFusion · CVSS 9.8 · 2013-01-17 | 9.8 | 93% | 2013-01-17 |
| CVE-2022-22948In CISA KEVExploitedThe vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may…VMware · VMware vCenter Server and VMware Cloud Foundation · CVSS 6.5 · 2022-03-29 | 6.5 | 13% | 2022-03-29 |
| CVE-2026-87886In CISA KEVExploitedLocal privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis B…Acronis · Acronis Backup plugin for cPanel & WHM · CVSS 7.8 · 2026-09-17 | 7.8 | 0.2% | 2026-09-17 |
| CVE-2017-11610CheckXML-RPC Server - Remote Code ExecutionSupervisord · Supervisor · 2017-08-23 | – | 88% | 2017-08-23 |
| CVE-2023-29919CheckSolarView Compact <= 6.00 - Local File InclusionContec · Solarview Compact Firmware · CVSS 9.8 · 2023-05-23 | 9.8 | 60% | 2023-05-23 |
| CVE-2023-29923CheckPowerJob <=4.3.2 - Unauthenticated AccessPowerjob · Powerjob · CVSS 5.3 · 2023-04-19 | 5.3 | 9.5% | 2023-04-19 |
| CVE-2020-7943CheckPuppet Server/PuppetDB - Sensitive Information DisclosurePuppet · Puppet Enterprise 2018.1.x stream · 2020-03-11 | – | 7.7% | 2020-03-11 |
| CVE-2020-9039CheckCouchbase Server - Broken Access ControlCouchbase · Couchbase Server · 2020-02-22 | – | 3.9% | 2020-02-22 |
| CVE-2019-17124Kramer VIAware 2.5.0719.1034 has Incorrect Access Control.Kramerav · Viaware · 2019-10-09 | – | 23% | 2019-10-09 |
| CVE-2020-12608An issue was discovered in SolarWinds MSP PME (Patch Management Engine) Cache Service before 1.1.15 in the Advanced Monitoring Agent. There are insecure file permissions for %PROG…Solarwinds · Managed Service Provider Patch Management Engine · 2020-05-07 | – | 22% | 2020-05-07 |
| CVE-2021-3437Potential security vulnerabilities have been identified in an OMEN Gaming Hub SDK package which may allow escalation of privilege and/or denial of service. HP is releasing softwar…HP Inc. · OMEN Gaming Hub SDK · CVSS 9.8 · 2022-11-21 | 9.8 | 16% | 2022-11-21 |
| CVE-2020-12695The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment t…Ui · Unifi Controller · 2020-06-08 | – | 15% | 2020-06-08 |
| CVE-2017-8625Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to bypass Device Guard User Mode Code Integrity (UMCI) policies due to Internet…Microsoft Corporation · Internet Explorer · 2017-08-08 | – | 15% | 2017-08-08 |
| CVE-2024-57684An access control issue in the component formDMZ.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the DMZ service of the device via a crafted…Dlink · Dir-816 Firmware · CVSS 9.8 · 2025-01-16 | 9.8 | 15% | 2025-01-16 |
| CVE-2024-39924An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. A vulnerability has been identified in the authentication and authorization process of the endpoint responsi…Dani-Garcia · Vaultwarden · CVSS 8.8 · 2024-09-13 | 8.8 | 13% | 2024-09-13 |
| CVE-2018-14335An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files (outside of their permissions) via a symlin…H2database · H2 · CVSS 6.5 · 2018-07-24 | 6.5 | 13% | 2018-07-24 |
| CVE-2020-12834eQ-3 Homematic Central Control Unit (CCU)2 through 2.51.6 and CCU3 through 3.51.6 allow Remote Code Execution in the JSON API Method ReGa.runScript, by unauthenticated attackers w…Eq-3 · Homematic Ccu2 Firmware · 2020-05-15 | – | 11% | 2020-05-15 |
| CVE-1999-0426The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing.Suse · Suse Linux · 2000-02-04 | – | 11% | 2000-02-04 |
| CVE-2020-11444Sonatype Nexus Repository Manager 3.x up to and including 3.21.2 has Incorrect Access Control.Sonatype · Nexus · 2020-04-02 | – | 8.5% | 2020-04-02 |
| CVE-2013-4859INSTEON Hub 2242-222 lacks Web and API authenticationInsteon · Hub Firmware · 2019-12-27 | – | 7.0% | 2019-12-27 |
| CVE-2021-44140Arbitrary file deletion on logoutApache Software Foundation · Apache JSPWiki · 2021-11-24 | – | 6.4% | 2021-11-24 |
| CVE-2020-28906Incorrect File Permissions in Nagios XI 5.7.5 and earlier and Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to root. Low-privileged users are able to modify file…Nagios · Fusion · 2021-05-24 | – | 6.2% | 2021-05-24 |
| CVE-2023-26918Diasoft File Replication Pro 7.5.0 allows attackers to escalate privileges by replacing a legitimate file with a Trojan horse that will be executed as LocalSystem. This occurs bec…Filereplicationpro · File Replication Pro · CVSS 9.8 · 2023-04-13 | 9.8 | 6.1% | 2023-04-13 |
| CVE-2021-3394Millennium Millewin (also known as "Cartella clinica") 13.39.028, 13.39.28.3342, and 13.39.146.1 has insecure folder permissions allowing a malicious user for a local privilege es…Millewin · Millewin · 2021-02-09 | – | 5.9% | 2021-02-09 |
| CVE-2023-31067An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILES(X86)%\TSplus\Clients\www.Tsplus · Tsplus Remote Access · 2023-09-11 | – | 5.5% | 2023-09-11 |
| CVE-2023-31068An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILES(X86)%\TSplus\UserDesktop…Tsplus · Tsplus Remote Work · 2023-09-11 | – | 5.4% | 2023-09-11 |
| CVE-2023-20178A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows could allow a low-privile…Cisco · Cisco Secure Client · CVSS 7.8 · 2023-06-28 | 7.8 | 5.4% | 2023-06-28 |
| CVE-2006-5014Unspecified vulnerability in cPanel before 10.9.0 12 Tree allows remote authenticated users to gain privileges via unspecified vectors in (1) mysqladmin and (2) hooksadmin.Cpanel · Cpanel · CVSS 8.8 · 2006-09-27 | 8.8 | 4.0% | 2006-09-27 |
| CVE-2021-31217In SolarWinds DameWare Mini Remote Control Server 12.0.1.200, insecure file permissions allow file deletion as SYSTEM.Solarwinds · Dameware Mini Remote Control · 2021-07-13 | – | 4.0% | 2021-07-13 |
| CVE-2020-24583An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used). FILE_UPLOAD_DIRECTORY_PERMISSIONS mode was not applied to…Djangoproject · Django · 2020-09-01 | – | 4.0% | 2020-09-01 |
| CVE-2017-12763An unspecified server utility in NoMachine before 5.3.10 on Mac OS X and Linux allows authenticated users to gain privileges by gaining access to local files.Nomachine · Nomachine · 2017-08-29 | – | 3.9% | 2017-08-29 |
| CVE-2021-36365Nagios XI before 5.8.5 has Incorrect Permission Assignment for repairmysql.sh.Nagios · Nagios Xi · 2021-09-28 | – | 3.8% | 2021-09-28 |
| CVE-2021-36363Nagios XI before 5.8.5 has Incorrect Permission Assignment for migrate.php.Nagios · Nagios Xi · 2021-09-28 | – | 3.8% | 2021-09-28 |
| CVE-2016-5425The Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distributions uses weak permissions for /usr/lib/tmpfiles.d/tomcat.…Apache · Tomcat · 2016-10-13 | – | 3.8% | 2016-10-13 |
| CVE-2021-40904The web management console of CheckMK Raw Edition (versions 1.5.0 to 1.6.0) allows a misconfiguration of the web-app Dokuwiki (installed by default), which allows embedded php cod…Checkmk · Checkmk · 2022-03-25 | – | 3.7% | 2022-03-25 |
| CVE-2020-9409TIBCO JasperReports Server Fails To Enforce Access RestrictionsTIBCO Software Inc. · TIBCO JasperReports Server · CVSS 9.8 · 2020-05-20 | 9.8 | 3.5% | 2020-05-20 |
| CVE-2019-0683An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request delegation of a TGT…Microsoft · Windows · 2019-04-08 | – | 3.4% | 2019-04-08 |
| CVE-2012-4434fwknop before 2.0.3 allow remote authenticated users to cause a denial of service (server crash) or possibly execute arbitrary code.fwknop · fwknop · 2020-01-09 | – | 3.3% | 2020-01-09 |
| CVE-2020-24584An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used). The intermediate-level directories of the filesystem cache…Djangoproject · Django · 2020-09-01 | – | 3.3% | 2020-09-01 |
| CVE-2021-39274In XeroSecurity Sn1per 9.0 (free version), insecure directory permissions (0777) are set during installation, allowing an unprivileged user to modify the main application and the…Xerosecurity · Sn1per · 2021-08-19 | – | 3.1% | 2021-08-19 |
| CVE-2021-45003Laundry Booking Management System 1.0 (Latest) and previous versions are affected by a remote code execution (RCE) vulnerability in profile.php through the "image" parameter that…Nikhil-Bhalerao · Laundry Booking Management System · 2022-01-10 | – | 3.1% | 2022-01-10 |
| CVE-2019-19896In IXP EasyInstall 6.2.13723, there is Remote Code Execution via weak permissions on the Engine Service share. The default file permissions of the IXP$ share on the server allows…Ixpdata · Easyinstall · CVSS 9.9 · 2020-01-23 | 9.9 | 3.0% | 2020-01-23 |
| CVE-2020-13452In Gotenberg through 6.2.1, insecure permissions for tini (writable by user gotenberg) potentially allow an attacker to overwrite the file, which can lead to denial of service or…Thecodingmachine · Gotenberg · 2021-01-07 | – | 2.9% | 2021-01-07 |
| CVE-2021-37351Nagios XI before version 5.8.5 is vulnerable to insecure permissions and allows unauthenticated users to access guarded pages through a crafted HTTP request to the server.Nagios · Nagios Xi · 2021-08-13 | – | 2.8% | 2021-08-13 |
| CVE-2022-27773A privilege escalation vulnerability is identified in Ivanti EPM (LANDesk Management Suite) that allows a user to execute commands with elevated privileges.Ivanti · Ivanti Endpoint Manger · CVSS 9.8 · 2022-12-05 | 9.8 | 2.8% | 2022-12-05 |
| CVE-2021-39273In XeroSecurity Sn1per 9.0 (free version), insecure permissions (0777) are set upon application execution, allowing an unprivileged user to modify the application, modules, and co…Xerosecurity · Sn1per · 2021-08-19 | – | 2.7% | 2021-08-19 |
| CVE-2019-12450file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissio…Gnome · Glib · 2019-05-29 | – | 2.6% | 2019-05-29 |
| CVE-2020-29582In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories du…Jetbrains · Kotlin · 2021-02-03 | – | 2.6% | 2021-02-03 |
| CVE-2017-16522MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 and DSL-100HN-T1 ES_113WJY0b16 devices allow remote authenticated users to obtain root access by specifying /bin/sh as the command to exe…Mitrastar · Gpt-2541gnac Firmware · 2017-11-03 | – | 2.6% | 2017-11-03 |
| CVE-2022-36640influxData influxDB before v1.8.10 contains no authentication mechanism or controls, allowing unauthenticated attackers to execute arbitrary commands. NOTE: the CVE ID assignment…Influxdata · Influxdb · 2022-09-02 | – | 2.6% | 2022-09-02 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.