CWE-671

6 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 1High 2Medium 2Low 1Not scored 0

CVEs per yearBy the year they were published

CVE-2026-33389
Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0
Nozomi Networks · Guardian
Medium5.3
CVE-2026-31985
Disabled and non-configurable TLS certificate validation in n2os-tui when connecting the Remote Collector to a Guardian or CMC, in Remote Collector before v26.2.0
Nozomi Networks · Remote Collector
High8.3
CVE-2025-24024
Mjolnir v1.9.0 accepts commands from any room
matrix-org · mjolnir
Critical9.1
CVE-2023-20115
A vulnerability in the SFTP server implementation for Cisco Nexus 3000 Series Switches and 9000 Series Switches in standalone NX-OS mode could allow an…
Cisco · Cisco NX-OS Software
Medium5.4
CVE-2022-29163
Bypass of password requirements when sharing a folder via the Circles app in Nextcloud Server
nextcloud · security-advisories
Low3.5
CVE-2018-13283
Lack of administrator control over security vulnerability in client.cgi in Synology SSL VPN Client before 1.2.5-0226 allows remote attackers to conduct…
Synology · SSL VPN Client
High8.8