보안악용 확인 · 악용 확률 · 한국어 권고
소개
CVE Ledger

CWE-15 관련 취약점

같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.

원장 35,126건이 중 악용 확인 1,767건분류: CWE-15
우선순위순최신 공개순CWE-787 278CWE-78 205CWE-416 191CWE-22 166CWE-94 120CWE-502 120CWE-20 96CWE-119 94CWE-306 81CWE-843 79

CWE-15 — 주요 취약점

악용이 확인된 것을 먼저 보여줍니다.

5.529CWE-15CVE-2026-96218Improper access control in Windows Update Stack allows an authorized attacker to perform tampering l…0.6%보통5.55.325CWE-15CVE-2026-54918NetBox Device Type Library is a collection of community-sourced device type definitions for import i…0.4%보통5.37.329CWE-15CVE-2026-96188External control of system or configuration setting in Microsoft PowerToys allows an authorized atta…0.4%높음7.37.827CWE-15CVE-2026-73027External control of system or configuration setting in Windows Setup Files Cleanup allows an authori…0.4%높음7.810.028CWE-15CVE-2026-87987An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permi…0.3%심각10.08.421CWE-15CVE-2026-107818MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 1…0.3%높음8.47.721CWE-15CVE-2026-110845n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a code execution vulnerabi…0.3%높음7.77.221CWE-15CVE-2026-103442External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaW…0.3%높음7.2

전체 목록

15건

CVE-2026-105294Legcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Discord…0.2%심각9.1
CVE-2026-107503Unvalidated environments URL allows OAuth authorization code + PKCE verifier theft and account takeover via in…0.2%높음7.1
CVE-2026-85217A maliciously crafted add-in, when installed and executed in Autodesk Fusion Desktop, can modify persistent ne…0.1%높음8.6
CVE-2025-68403An external control of system or configuration setting vulnerability has been reported to affect QuRouter. If …0.1%보통4.6
CVE-2026-94577A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handlin…0.1%높음7.3
CVE-2026-121614Docker Sandboxes versions 0.31.0 before 0.50.0 do not neutralize repository-controlled Git configuration when …높음7.1
CVE-2026-121427AzuraCast through 0.23.8 fails to remove frontend_config.custom_config in PUT /station/{id}/profile/edit for u…높음8.7
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.