보안악용 확인 · 악용 확률 · 한국어 권고
소개
CVE Ledger

CWE-305 관련 취약점

같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.

원장 34,322건이 중 악용 확인 1,766건분류: CWE-305
우선순위순최신 공개순CWE-787 278CWE-78 205CWE-416 191CWE-22 166CWE-94 120CWE-502 120CWE-20 96CWE-119 94CWE-306 81CWE-843 79

CWE-305 — 주요 취약점

악용이 확인된 것을 먼저 보여줍니다.

9.8CRCWE-305● 랜섬웨어 캠페인에 사용됨CVE-2025-31161CrushFTP · CrushFTPCrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crus…100.0%심각9.88.8PACWE-305● 실제 악용이 확인됨CVE-2026-81578PaperCut · NG/MFAn improper access control vulnerability exists in the web management interface of PaperCut MF and P…84.7%높음8.87.2VMCWE-287● 랜섬웨어 캠페인에 사용됨CVE-2024-37085VMware · ESXiVMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Activ…26.8%높음7.27.728CWE-305CVE-2026-86207An authentication bypass in N-central < 2026.3 HF 3 leads to authentication bypass in internal only …0.7%높음7.79.128CWE-305CVE-2026-85500Authentication Bypass by Primary Weakness vulnerability in team-alembic AshAuthentication allows an …0.5%심각9.19.521CWE-305CVE-2026-111283BMC Helix Network Management on-prem before 26.3.01 contains an authentication bypass vulnerability …0.5%심각9.59.127CWE-305CVE-2026-77185Authentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.…0.5%심각9.18.121CWE-287CVE-2026-107808Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, POST /api/login c…0.4%높음8.1

전체 목록

15건

CVE-2026-94053Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 a…0.4%심각9.1
CVE-2026-10537A misconfiguration issue in the affected service in Control-M/Enterprise Manager and Control-M/Server may allo…0.3%보통6.9
CVE-2026-114230When dispatching SASL frames to authenticate the peer, Proton will also dispatch AMQP frames if they claim to …0.3%미평가
CVE-2026-103059When Gitea's built-in SSH server is enabled (`START_SSH_SERVER = true`), the presented public key was looked u…0.3%심각9.1
CVE-2026-88837BusyBox httpd treats yescrypt ($y$) password hashes as plaintext during Basic Authentication, inverting the au…0.3%보통6.5
CVE-2026-110883Authentication Bypass by Primary Weakness vulnerability in VideoWhisper.com 2Way VideoCalls and Random Chat we…0.3%보통6.5
CVE-2026-59563Zscaler MCP Server versions 0.7.0 and 0.7.1 has an issue where HMAC confirmation tokens were not bound to the …0.1%보통4.6
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.