CWE-420 · Access Control
Unprotected Alternate Channel
41CVEs
SortMost likely exploited
41 CVEs with CWE-420 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-20198In CISA KEVExploitedCisco IOS XE Web UI - Command InjectionCisco · Cisco IOS XE Software · CVSS 10 · 2023-10-16 | 10.0 | 100% | 2023-10-16 |
| CVE-2025-54309In CISA KEVExploitedCrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is not used, mishandles AS2 validation and consequently allows remote attackers to obtain admin acces…CrushFTP · CrushFTP · CVSS 9 · 2025-07-18 | 9.0 | 93% | 2025-07-18 |
| CVE-2025-13315CheckTwonky Server 8.5.2 on Linux and Windows - Log File ExposureLynxtechnology · Twonky Server · CVSS 9.3 · 2025-11-19 | 9.3 | 31% | 2025-11-19 |
| CVE-2026-40217CheckLiteLLM < 1.25.0 - Remote Code ExecutionBerriAI · LiteLLM · CVSS 8.8 · 2026-04-10 | 8.8 | 17% | 2026-04-10 |
| CVE-2025-67303CheckComfyUI-Manager < 3.38 - Configuration OverwriteComfy · Comfyui-Manager · CVSS 7.5 · 2026-01-05 | 7.5 | 1.4% | 2026-01-05 |
| CVE-2024-6242Rockwell Automation Chassis Restrictions Bypass Vulnerability in Select Logix DevicesRockwell Automation · ControlLogix® 5580 (1756-L8z) · CVSS 7.3 · 2024-08-01 | 7.3 | 11% | 2024-08-01 |
| CVE-2025-53967Framelink Figma MCP Server before 0.6.3 allows an unauthenticated remote attacker to execute arbitrary operating system commands via a crafted HTTP POST request with shell metacha…Framelink · Figma MCP Server · CVSS 8 · 2025-10-08 | 8.0 | 6.6% | 2025-10-08 |
| CVE-2020-8558Kubernetes node setting allows for neighboring hosts to bypass localhost boundaryKubernetes · Kubernetes · CVSS 5.4 · 2020-07-27 | 5.4 | 3.4% | 2020-07-27 |
| CVE-2023-28840moby/moby's dockerd daemon encrypted overlay network may be unauthenticatedmoby · moby · CVSS 7.5 · 2023-04-04 | 7.5 | 2.6% | 2023-04-04 |
| CVE-2023-28842moby/moby's dockerd daemon encrypted overlay network with a single endpoint is unauthenticatedmoby · moby · CVSS 6.8 · 2023-04-04 | 6.8 | 1.4% | 2023-04-04 |
| CVE-2023-31241Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright.Snap One · OvrC Cloud · CVSS 8.6 · 2023-05-22 | 8.6 | 0.8% | 2023-05-22 |
| CVE-2026-25916Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13, when "Block remote images" is used, does not block SVG feImage.Roundcube · Webmail · CVSS 4.3 · 2026-02-09 | 4.3 | 0.8% | 2026-02-09 |
| CVE-2022-25786GateManager debug interface is included in production buildsSecomea · GateManager · CVSS 4.9 · 2022-05-04 | 4.9 | 0.7% | 2022-05-04 |
| CVE-2024-4444LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Bypass to User Registrationthimpress · LearnPress – WordPress LMS Plugin for Create and Sell Online Courses · CVSS 5.3 · 2024-05-10 | 5.3 | 0.7% | 2024-05-10 |
| CVE-2026-105008Windows Schannel Spoofing VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 9 · 2026-10-13 | 9.0 | 0.7% | 2026-10-13 |
| CVE-2025-52921In Innoshop through 0.4.1, an authenticated attacker could exploit the File Manager functions in the admin panel to achieve code execution on the server, by uploading a crafted fi…InnoShop · InnoShop · CVSS 9.9 · 2025-06-23 | 9.9 | 0.5% | 2025-06-23 |
| CVE-2023-0317GateManager debug interface is included in non-debug buildsSecomea · GateManager · CVSS 4.9 · 2023-04-19 | 4.9 | 0.5% | 2023-04-19 |
| CVE-2025-54351In iperf before 3.19.1, net.c has a buffer overflow when --skip-rx-copy is used (for MSG_TRUNC in recv).ES · iperf3 · CVSS 8.9 · 2025-08-03 | 8.9 | 0.5% | 2025-08-03 |
| CVE-2024-6099LearnPress – WordPress LMS Plugin <= 4.2.6.8.1 - Unauthenticated Bypass to User Registrationthimpress · LearnPress – WordPress LMS Plugin for Create and Sell Online Courses · CVSS 5.3 · 2024-07-02 | 5.3 | 0.4% | 2024-07-02 |
| CVE-2023-30946Issues notification metadata lacks authorizationPalantir · com.palantir.issues:issues · CVSS 3.5 · 2023-06-29 | 3.5 | 0.4% | 2023-06-29 |
| CVE-2026-77639Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could concatenate many gzip or zlib sub-streams, each just under the per-stream detection threshold, to…torproject · Tor · CVSS 5.3 · 2026-08-20 | 5.3 | 0.4% | 2026-08-20 |
| CVE-2025-56558The Dyson MQTT server (2022 and possibly later) allows publications and subscriptions by a client that has the correct values of AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_SESS…Dyson · MQTT server · CVSS 3 · 2025-10-29 | 3.0 | 0.4% | 2025-10-29 |
| CVE-2026-121290Security Advisory 0209Arista Networks · EOS · CVSS 8.2 · 2026-11-10 | 8.2 | 0.4% | 2026-11-10 |
| CVE-2025-62001BullWall Ransomware Containment hard-coded folder exclusionsBullWall · Ransomware Containment · CVSS 8.8 · 2025-12-18 | 8.8 | 0.4% | 2025-12-18 |
| CVE-2023-4570Improper Restriction in NI MeasurementLink Python ServicesNI · MeasurementLink · CVSS 8.8 · 2023-10-05 | 8.8 | 0.3% | 2023-10-05 |
| CVE-2025-59033The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control (WDAC) policy. Entries that specify only the to-be-signed (TBS) part of the code…Microsoft · Windows · CVSS 7.4 · 2025-09-08 | 7.4 | 0.3% | 2025-09-08 |
| CVE-2023-7266Some Huawei home routers have a connection hijacking vulnerability. Successful exploitation of this vulnerability may cause DoS or information leakage.(Vulnerability ID:HWPSIRT-20…Huawei · TC7001-10 · CVSS 7.5 · 2024-12-28 | 7.5 | 0.3% | 2024-12-28 |
| CVE-2025-8557An internal product security audit of Lenovo XClarity Orchestrator (LXCO) discovered the below vulnerability: An attacker with access to a device on the local Lenovo XClarity Orch…Lenovo · XClarity Orchestrator (LXCO) · CVSS 8.8 · 2025-09-11 | 8.8 | 0.3% | 2025-09-11 |
| CVE-2025-66432In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date.Oxide · Omicron · CVSS 5 · 2025-11-30 | 5.0 | 0.2% | 2025-11-30 |
| CVE-2026-40435BIG-IP httpd access control vulnerabilityF5 · BIG-IP · CVSS 5.3 · 2026-05-13 | 5.3 | 0.2% | 2026-05-13 |
| CVE-2025-62820Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network.Slack · Nebula · CVSS 4.9 · 2025-10-23 | 4.9 | 0.2% | 2025-10-23 |
| CVE-2025-52968xdg-open in xdg-utils through 1.2.1 can send requests containing SameSite=Strict cookies, which can facilitate CSRF. (For example, xdg-open could be modified to, by default, assoc…freedesktop · xdg-utils · CVSS 2.7 · 2025-06-23 | 2.7 | 0.2% | 2025-06-23 |
| CVE-2024-8038Vulnerable juju introspection abstract UNIX domain socket. An abstract UNIX domain socket responsible for introspection is available without authentication locally to network name…Canonical Ltd. · Juju · CVSS 7.9 · 2024-10-02 | 7.9 | 0.2% | 2024-10-02 |
| CVE-2026-102134Kiteworks Core Unprotected Alternate ChannelKiteworks · Core · CVSS 5.4 · 2026-09-30 | 5.4 | 0.2% | 2026-09-30 |
| CVE-2026-61909An issue was discovered in Cyrus IMAP before 3.12.4. CalDAV/CardDAV multiget bypasses a per-href ACL. An authenticated DAV user with some shared access to another user's calendar…cyrusimap · Cyrus IMAP · CVSS 3.5 · 2026-09-09 | 3.5 | 0.2% | 2026-09-09 |
| CVE-2026-43505An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when mod_proxy65 is enabled. Because mod_proxy65 mishandles access control in the activati…Prosody · Prosody · CVSS 6.5 · 2026-05-01 | 6.5 | 0.2% | 2026-05-01 |
| CVE-2025-41727Beckhoff: Performing privileged operations and gaining administrator accessBeckhoff Automation · Beckhoff.Device.Manager.XAR · CVSS 7.8 · 2026-01-27 | 7.8 | 0.2% | 2026-01-27 |
| CVE-2022-28693Unprotected alternative channel of return branch target prediction in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local…Intel(R) Processors · CVSS 4.7 · 2025-02-14 | 4.7 | 0.2% | 2025-02-14 |
| CVE-2023-52718A connection hijacking vulnerability exists in some Huawei home routers. Successful exploitation of this vulnerability may cause DoS or information leakage.(Vulnerability ID:HWPSI…Huawei · PT9030-15 · CVSS 6.4 · 2024-12-28 | 6.4 | 0.2% | 2024-12-28 |
| CVE-2025-1095IBM Personal Communications command executionIBM · Personal Communications · CVSS 8.8 · 2025-04-08 | 8.8 | 0.1% | 2025-04-08 |
| CVE-2026-35388OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.OpenBSD · OpenSSH · CVSS 2.5 · 2026-04-02 | 2.5 | 0.1% | 2026-04-02 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.