CWE-636 · Misconfiguration and Insecure Design
Not Failing Securely
64CVEs
0exploited
0with a public check
1likely (EPSS 10%+)
SortMost likely exploited
64 CVEs with CWE-636 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-43532Remote Registry Service Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 8.8 · 2024-10-08 | 8.8 | 12% | 2024-10-08 |
| CVE-2021-1578Cisco Application Policy Infrastructure Controller Privilege Escalation VulnerabilityCisco · Cisco Application Policy Infrastructure Controller (APIC) · CVSS 8.8 · 2021-08-25 | 8.8 | 2.0% | 2021-08-25 |
| CVE-2023-45285Command 'go get' may unexpectedly fallback to insecure git in cmd/goGo toolchain · cmd/go · 2023-12-06 | – | 1.1% | 2023-12-06 |
| CVE-2025-21210Windows BitLocker Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 4.2 · 2025-01-14 | 4.2 | 1.1% | 2025-01-14 |
| CVE-2026-68746Livebook Teams identity check fails open when the deployment group is unresolvable, allowing unauthenticated accesslivebook-dev · livebook · CVSS 7.7 · 2026-08-05 | 7.7 | 1.0% | 2026-08-05 |
| CVE-2024-3729Frontend Admin by DynamiApps <= 3.19.4 - Improper Missing Encryption Exception Handling to Form Manipulationshabti · Frontend Admin by DynamiApps · CVSS 9.8 · 2024-05-02 | 9.8 | 0.8% | 2024-05-02 |
| CVE-2026-53459Bambuddy's authentication fails open on database errors, allowing unauthenticated access to all endpointsmaziggy · bambuddy · CVSS 9.3 · 2026-09-15 | 9.3 | 0.8% | 2026-09-15 |
| CVE-2026-22034Snuffleupagus vulnerable to RCE on instances with upload validation enabled but without the VLD packagejvoisin · snuffleupagus · CVSS 9.2 · 2026-01-08 | 9.2 | 0.7% | 2026-01-08 |
| CVE-2026-118746.NET Security Feature Bypass VulnerabilityMicrosoft · .NET 11.0 installed on Linux · CVSS 6.8 · 2026-11-10 | 6.8 | 0.7% | 2026-11-10 |
| CVE-2026-18329NGINX ngx_http_js_module vulnerabilityF5 · NGINX JavaScript · CVSS 8.2 · 2026-09-02 | 8.2 | 0.6% | 2026-09-02 |
| CVE-2026-73421NextAuth.js: Configuration errors can cause existence-based auth checks to fail open (auth object populated with an error)nextauthjs · next-auth · CVSS 9.1 · 2026-08-13 | 9.1 | 0.6% | 2026-08-13 |
| CVE-2026-95860node-opcua: Namespace-Level RBAC Fail-Open - Anonymous Write/Call Bypass via Unbound `DefaultRolePermissionsnode-opcua · node-opcua · CVSS 9.1 · 2026-11-03 | 9.1 | 0.6% | 2026-11-03 |
| CVE-2026-40525OpenViking < 0.3.9 Authentication Bypass via VikingBot OpenAPIvolcengine · OpenViking · CVSS 9.1 · 2026-04-17 | 9.1 | 0.6% | 2026-04-17 |
| CVE-2026-81379Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft · Visual Studio Code · CVSS 8.2 · 2026-09-08 | 8.2 | 0.5% | 2026-09-08 |
| CVE-2026-69306Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft · Visual Studio Code · CVSS 8.2 · 2026-08-11 | 8.2 | 0.5% | 2026-08-11 |
| CVE-2026-109593An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information.SonicWall · Global Management System (GMS) · CVSS 9.1 · 2026-11-03 | 9.1 | 0.5% | 2026-11-03 |
| CVE-2026-40247free5gc UDR improper path validation allows unauthenticated access to Traffic Influence Subscriptionsfree5gc · free5gc · CVSS 8.7 · 2026-04-16 | 8.7 | 0.5% | 2026-04-16 |
| CVE-2024-8185Vault Vulnerable to Denial of Service When Processing Raft Join RequestsHashiCorp · Vault · CVSS 7.5 · 2024-10-31 | 7.5 | 0.5% | 2024-10-31 |
| CVE-2026-126539Directus before 12.1.0 Authorization Bypass via Public WebSocket REST Interfacedirectus · directus · CVSS 8.1 · 2026-11-11 | 8.1 | 0.5% | 2026-11-11 |
| CVE-2026-96437The ai-azure-content-safety plugin in Kong Gateway Enterprise skips inspection of request bodies larger than the in-memory body buffer, allowing prompts to bypass input content-sa…Kong Inc. · Kong Gateway Enterprise · CVSS 8.2 · 2026-11-10 | 8.2 | 0.5% | 2026-11-10 |
| CVE-2026-44094Fallback to second RAUC slot with default credentialsPhoenix Contact · CHARX SEC-3150 · CVSS 8.6 · 2026-07-30 | 8.6 | 0.5% | 2026-07-30 |
| CVE-2026-74048Apache Tomcat: OpenSSL-FFM FIPS failure does not prevent start-upApache Software Foundation · Apache Tomcat · CVSS 6.5 · 2026-10-20 | 6.5 | 0.4% | 2026-10-20 |
| CVE-2026-46482MyBB: Security Question insufficient validationmybb · mybb · CVSS 5.3 · 2026-08-18 | 5.3 | 0.4% | 2026-08-18 |
| CVE-2026-40248free5gc UDR improper path validation allows unauthenticated creation and modification of Traffic Influence Subscriptionsfree5gc · free5gc · CVSS 8.7 · 2026-04-16 | 8.7 | 0.4% | 2026-04-16 |
| CVE-2026-54762Traefik Kubernetes Ingress NGINX provider fails open when auth-secret resolution failstraefik · traefik · CVSS 5.9 · 2026-06-23 | 5.9 | 0.4% | 2026-06-23 |
| CVE-2026-95848Moquette fails open when configured authentication or authorization classes cannot loadmoquette-io · moquette · CVSS 9.3 · 2026-09-23 | 9.3 | 0.4% | 2026-09-23 |
| CVE-2026-92591Craft CMS 5.0.0 before 5.10.13 Environment Secret Exposure via Installercraftcms · cms · CVSS 5.9 · 2026-09-16 | 5.9 | 0.4% | 2026-09-16 |
| CVE-2026-108142A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.Veeam · Backup and Replication · CVSS 9.1 · 2026-10-27 | 9.1 | 0.4% | 2026-10-27 |
| CVE-2026-61595djust: Multi-tenant isolation fails open on the WebSocket/SSE path, disclosing other tenants' datadjust-org · djust · CVSS 7.7 · 2026-09-16 | 7.7 | 0.4% | 2026-09-16 |
| CVE-2026-103510Authentication bypass via blank auth token in P4SearchPerforce · P4 (Helix Core) · CVSS 9.5 · 2026-10-05 | 9.5 | 0.4% | 2026-10-05 |
| CVE-2026-86120APITable through 1.13.0-beta.1 Fail-Open Authorization in the Fusion API Node Permission Guardapitable · apitable · CVSS 4.3 · 2026-09-05 | 4.3 | 0.4% | 2026-09-05 |
| CVE-2026-128334listmonk 6.2.0 before 7.0.0-beta.2 Missing Authentication via Azure Bounce Webhookknadh · listmonk · CVSS 4.8 · 2026-11-13 | 4.8 | 0.4% | 2026-11-13 |
| CVE-2025-41760Pass filter with Empty TableMBS · UBR-01 Mk II · CVSS 4.9 · 2026-03-09 | 4.9 | 0.4% | 2026-03-09 |
| CVE-2025-41759Use of wildcard (“*” or “all”) in Block listMBS · UBR-01 Mk II · CVSS 4.9 · 2026-03-09 | 4.9 | 0.4% | 2026-03-09 |
| CVE-2026-100304TDuck survey form 6.0 Information Disclosure via Fail-Open Form Ownership CheckTDuckCloud · tduck-survey-form · CVSS 5.3 · 2026-09-25 | 5.3 | 0.4% | 2026-09-25 |
| CVE-2026-107314pgjdbc does not enforce requireAuth when the value excludes every authentication methodpgjdbc · pgjdbc · CVSS 5.9 · 2026-10-07 | 5.9 | 0.3% | 2026-10-07 |
| CVE-2026-114479Not Failing Securely ('Failing Open') in hMailServerProgressive Robot Ltd · hMailServer · CVSS 5.8 · 2026-10-21 | 5.8 | 0.3% | 2026-10-21 |
| CVE-2026-42423OpenClaw < 2026.4.8 - strictInlineEval Approval Boundary Bypass via Approval-Timeout FallbackOpenClaw · OpenClaw · CVSS 7.5 · 2026-04-28 | 7.5 | 0.3% | 2026-04-28 |
| CVE-2026-41334OpenClaw < 2026.3.31 - Decompression Bomb Denial of Service via Image Pixel-Limit Guard BypassOpenClaw · OpenClaw · CVSS 6.5 · 2026-04-23 | 6.5 | 0.3% | 2026-04-23 |
| CVE-2023-22943Modular Input REST API Requests Connect via HTTP after Certificate Validation Failure in Splunk Add-on Builder and Splunk CloudConnect SDKSplunk · Splunk Add-on Builder · CVSS 4.8 · 2023-02-14 | 4.8 | 0.3% | 2023-02-14 |
| CVE-2024-2660Vault TLS Cert Auth Method Did Not Correctly Validate OCSP ResponsesHashiCorp · Vault · CVSS 6.4 · 2024-04-04 | 6.4 | 0.3% | 2024-04-04 |
| CVE-2026-105933Apache Pulsar: Namespace encryption requirement not enforced after a failure during topic initializationApache Software Foundation · Apache Pulsar · CVSS 2.3 · 2026-10-21 | 2.3 | 0.3% | 2026-10-21 |
| CVE-2026-27448pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callbackpyca · pyopenssl · CVSS 1.7 · 2026-03-17 | 1.7 | 0.3% | 2026-03-17 |
| CVE-2026-53712SCRAM: Silent channel-binding authentication downgrade via unsupported certificate algorithmsongres · scram · CVSS 8.2 · 2026-07-17 | 8.2 | 0.3% | 2026-07-17 |
| CVE-2026-82018IGEL OS 12 / 11 Secure Boot Bypass via Unsigned igel.conf FileIGEL · IGEL OS 12 · CVSS 6.1 · 2026-08-28 | 6.1 | 0.3% | 2026-08-28 |
| CVE-2026-88831Busybox: busybox: httpd silently fails open when ip deny rules contain invalid cidr prefix lengthsRed Hat · Red Hat Hardened Images · CVSS 5.3 · 2026-09-23 | 5.3 | 0.2% | 2026-09-23 |
| CVE-2021-3614A vulnerability was reported on some Lenovo Notebook systems that could allow an attacker with physical access to elevate privileges under certain conditions during a BIOS update…Lenovo · Notebook BIOS · CVSS 6.4 · 2021-07-16 | 6.4 | 0.2% | 2021-07-16 |
| CVE-2026-54291Silent channel-binding authentication downgrade via unsupported certificate algorithmspgjdbc · pgjdbc · CVSS 8.2 · 2026-07-06 | 8.2 | 0.2% | 2026-07-06 |
| CVE-2026-45781MCP Registry: OCI ownership validation fails open on upstream rate limits, allowing attacker-controlled package claimsmodelcontextprotocol · registry · CVSS 3.5 · 2026-05-14 | 3.5 | 0.2% | 2026-05-14 |
| CVE-2026-41377OpenClaw < 2026.3.31 - Fail-Open Security Scan Bypass in Plugin InstallationOpenClaw · OpenClaw · CVSS 4.6 · 2026-04-28 | 4.6 | 0.2% | 2026-04-28 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.