CWE-520 · Access Control
.NET Misconfiguration: Use of Impersonation
5CVEs
SortMost likely exploited
5 CVEs with CWE-520 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-46943An issue was discovered in OpenDaylight Authentication, Authorization and Accounting (AAA) through 0.19.3. A rogue controller can join a cluster to impersonate an offline peer, ev…Opendaylight · Authentication, Authorization And Accounting · CVSS 9.1 · 2024-09-15 | 9.1 | 0.6% | 2024-09-15 |
| CVE-2026-13444Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoin…IBM · Langflow OSS · CVSS 8.1 · 2026-07-30 | 8.1 | 0.4% | 2026-07-30 |
| CVE-2026-13442Langflow is affected by NET Misconfiguration: Use of Impersonation due to multiple unauthenticated and insufficiently authorized API endpointsIBM · Langflow OSS · CVSS 7.1 · 2026-07-28 | 7.1 | 0.3% | 2026-07-28 |
| CVE-2026-2450.NET misconfiguration: use of impersonation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Hijacking a Privileged Thread of Execution.This issue affe…upKeeper Solutions · upKeeper Instant Privilege Access · CVSS 7.4 · 2026-04-14 | 7.4 | 0.3% | 2026-04-14 |
| CVE-2019-25608Iperius Backup 6.1.0 Privilege Escalation via Backup JobIperius · Iperius Backup · CVSS 8.4 · 2026-03-22 | 8.4 | 0.1% | 2026-03-22 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.