CWE-1390 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-1390 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2026-55040Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a secur…69.5%심각9.1CVE-2026-73025Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature ov…0.9%심각9.8CVE-2026-62895Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker t…0.7%높음8.8CVE-2026-83674Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker …0.6%높음8.1CVE-2026-83511Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker …0.6%높음7.4CVE-2026-70005Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker …0.6%보통5.9CVE-2026-69982Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker …0.6%보통5.9CVE-2026-85922Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature …0.5%높음7.4
전체 목록
28건
CVE-2026-77483Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.0.5%높음8.8
CVE-2026-69802Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute cod…0.5%높음8.1
CVE-2026-110475This vulnerability exists in the CreditNirvana Collections Platform due to improper authentication and authori…0.5%심각9.3
CVE-2026-85323Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoof…0.5%보통6.8
CVE-2026-96940Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a …0.5%높음8.8
CVE-2026-92289Lemonldap::NG::Portal versions from 2.23.0 before 2.23.4 for Perl allow a PKCE bypass for public Relying Parti…0.4%미평가
CVE-2026-85939Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a networ…0.4%보통5.3
CVE-2026-115967Weak Authentication vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Authe…0.4%높음8.8
CVE-2026-92288Lemonldap::NG::Portal versions from 2.20.0 before 2.21.6, from 2.22.0 before 2.23.4 for Perl allow unauthentic…0.4%심각9.1
CVE-2026-83840Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-83681Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally.0.3%보통5.5
CVE-2026-85376Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges lo…0.3%높음7.8
CVE-2026-83586Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacke…0.3%높음7.8
CVE-2026-93355LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the conf…0.3%높음7.6
CVE-2026-94455An HTTP endpoint intended for provisioning enterprise and reseller organisations is reachable without any sess…0.3%높음7.1
CVE-2026-80219A flaw was found in hawtio-operator. When deploying Hawtio in cluster mode, the operator creates a cluster-sco…0.2%높음8.7
CVE-2026-85328Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges local…0.2%높음7.0
CVE-2026-83657Weak authentication in Windows Modern Device Management (MDM) allows an authorized attacker to perform tamperi…0.2%보통5.5
CVE-2025-30414Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber …0.2%높음7.1
CVE-2026-88101Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges…0.2%높음7.8
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.