CWE-491 · Access Control
Public cloneable() Method Without Final
4CVEs
SortMost likely exploited
4 CVEs with CWE-491 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2025-60425Nagios Fusion v2024R1.2 and v2024R2 does not invalidate already existing session tokens when the two-factor authentication mechanism is enabled, allowing attackers to perform a se…Nagios · Fusion · CVSS 8.6 · 2025-10-27 | 8.6 | 1.0% | 2025-10-27 |
| CVE-2024-39069An issue in ifood Order Manager v3.35.5 'Gestor de Peddios.exe' allows attackers to execute arbitrary code via a DLL hijacking attack.No vendor recorded · CVSS 7.8 · 2024-07-09 | 7.8 | 0.6% | 2024-07-09 |
| CVE-2025-63685Quark Cloud Drive v3.23.2 has a DLL Hijacking vulnerability. This vulnerability stems from the insecure loading of system libraries. Specifically, the application does not validat…Quark · Quark Cloud Drive · CVSS 9.8 · 2025-11-20 | 9.8 | 0.4% | 2025-11-20 |
| CVE-2025-55622Reolink v4.54.0.4.20250526 was discovered to contain a task hijacking vulnerability due to inappropriate taskAffinity settings. NOTE: this is disputed by the Supplier because it i…Reolink · Reolink · CVSS 6.5 · 2025-08-22 | 6.5 | 0.4% | 2025-08-22 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.