CWE-1327
33 published CVEs are weaknesses of this kind, as the records or NVD name it.
- Published CVEs
- 33
- Last 12 months
- 21
- Critical
- 11
- Known exploited
- 0
Critical 11High 8Medium 9Low 5Not scored 0
CVEs per yearBy the year they were published
- 20221
- 20232
- 20246
- 20254
- 202620
Newest CVEs
- CVE-2026-119249
A malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address vulnerability found in WiFiman Desktop to obtain information…
Ubiquiti Inc · WiFiman Desktop
High7.5 - CVE-2026-59177
ESPHome Device Builder allows unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces
esphome · device-builder
High8.8 - CVE-2026-112346
OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE
OpenHands · OpenHands Software Agent SDK
Critical9.3 - CVE-2026-92559
IBM App Connect Enterprise is vulnerable to a credential exposure
IBM · App Connect Enterprise
Critical9.8 - CVE-2026-108760
LlamaFarm through 0.0.34 Unauthenticated API Exposed on All Interfaces
llama-farm · llamafarm
High7.2 - CVE-2026-100868
Penpot before 2.18.0 Unauthenticated WebSocket Access via MCP Bridge
penpot · penpot
Medium5.3 - CVE-2026-57123
PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired in
MervinPraison · praisonaiagents
Critical9.8 - CVE-2026-75021
fastify-cli vulnerable to remote code execution via ignored explicit Inspector bind address
fastify-cli · fastify-cli
High8.1 - CVE-2026-20212
Cisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution Vulnerability
Cisco · Cisco NX-OS Software
Critical9.8 - CVE-2026-82456
argocd-mcp 0.8.0 Authentication Bypass via Unauthenticated HTTP
argoproj-labs · argocd-mcp
Critical10.0