CWE-304 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-304 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
CVE-2026-101296A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was con…0.7%심각9.1CVE-2026-108071Incorrect authentication vulnerability in the TSplus Remote Access multi-factor authentication (MFA)…0.5%높음8.7CVE-2026-89068Missing critical step in authentication vulnerability in Progress MOVEit Transfer (LDAP module). Thi…0.5%높음8.1CVE-2026-73535Gitea's OpenID connect handler accepts a user's password without enforcing enrolled TOTP or WebAuthn…0.4%미평가CVE-2026-94052A missing check in LdapPasswordAuthenticator in component sshd-ldap in Apache MINA SSHD versions 1.2…0.4%심각9.1CVE-2026-54723devpi is a Python package index staging server and packaging, testing, and release tool. Prior to 6.…0.3%보통6.5CVE-2026-93994Apache MINA SSHD is a Java library for client-side and server-side SSH. SSH servers can be configure…0.3%높음8.1CVE-2026-100667grav-plugin-login (the Grav CMS Login plugin) versions >= 3.8.7 and < 3.9.7 allow the two-factor aut…0.3%보통6.9
전체 목록
10건
CVE-2026-113438Pleasanter provided fails to properly verify passwords in LDAP authentication when processing specially crafte…0.2%보통6.9
CVE-2026-77800ManageEngine Key Manager Plus versions before 7151 are vulnerable to a SAML authentication bypass that allows …높음7.7
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.