Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-454

4 published CVEs are weaknesses of this kind, as the records or NVD name it.

All 4 in the listAtom feed of new CVEsWhat CWE-454 is, at MITRE (opens in a new tab)
Published CVEs
4
Last 12 months
3
Critical
1
Known exploited
0

Critical 1High 2Medium 1Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20251
  2. 20263

Newest CVEs

  • CVE-2026-54003

    Kirby: External Initialization of the Panel on reverse proxy setups with the `Forwarded` header

    getkirby · kirby

    Critical9.1
  • CVE-2026-48980

    pam_usb: getenv() used in PAM context allows environment variable injection into local-check logic

    mcdope · pam_usb

    Medium6.3
  • CVE-2026-26148

    Microsoft Azure AD SSH Login extension for Linux Elevation of Privilege Vulnerability

    Microsoft · Microsoft Azure AD SSH Login extension for Linux

    High8.1
  • CVE-2025-36244

    IBM AIX privilege escalation

    IBM · AIX

    High7.4

Vendors it comes up for most

  1. IBM1
  2. Microsoft1
  3. getkirby1
  4. mcdope1