CWE-348 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-348 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
CVE-2026-61682kcp is a Kubernetes-like control plane for form-factors and use-cases beyond Kubernetes and containe…0.4%심각9.9CVE-2026-92395@fastify/proxy-addr is a Fastify plugin that determines a request's client address behind trusted re…0.3%심각9.1CVE-2026-100653vLLM is an inference and serving engine for large language models. In versions from 0.22.1 through 0…0.3%높음8.3CVE-2026-97404In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Signature header. By sending a r…0.3%심각9.2CVE-2026-93483In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthori…0.2%심각9.5CVE-2026-119711PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp() that allows unaut…0.2%보통6.9CVE-2026-108736Speedtest Tracker through 1.15.0 contains an IP allowlist bypass vulnerability that allows unauthent…0.2%보통6.3CVE-2026-62987Fabio is an HTTP(S) and TCP router for deploying applications managed by consul. From 1.6.6 until 1.…0.2%보통5.8
전체 목록
35건
CVE-2026-90711proxy-addr is a Node.js module that determines a request's client address behind trusted reverse proxies, and …0.2%심각9.1
CVE-2026-110726In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives th…0.2%보통6.5
CVE-2026-101277A security flaw has been discovered in Trusted Domain Project OpenDKIM up to 2.11.0. The impacted element is t…0.2%보통5.5
CVE-2026-108162Pingvin Share X before 1.22.0 contains a rate limit bypass vulnerability that allows unauthenticated remote at…0.2%보통6.9
CVE-2026-103592simple-php-router through 5.4.1.7 contains an IP restriction bypass vulnerability in the IpRestrictAccess midd…0.2%보통6.9
CVE-2026-90679Forgejo 13.0.0 through 16.0.4, when "[federation] ENABLED = true" is set, has a spoofing issue that affects id…0.2%보통4.3
CVE-2026-114474Use of a less trusted source for the envelope sender in the external-account download of Progressive Robot hMa…0.2%보통5.9
CVE-2026-107567Use of a less trusted source in the DKIM signing of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a…0.2%높음7.5
CVE-2026-107271Gophish through 0.12.1 contains a rate limit bypass vulnerability that allows unauthenticated attackers to eva…0.2%보통6.9
CVE-2026-61589djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance.…0.2%보통6.3
CVE-2026-111443Wheels 4.0.6 through 4.1.2 lets an unauthenticated client switch a request into a separate test application co…0.2%보통6.5
CVE-2026-80514The wpForo Forum WordPress plugin from 3.0.0 before 3.1.6 does not verify the source of client-supplied IP add…0.2%보통5.3
CVE-2026-16272Use of less trusted source vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual …0.1%심각9.1
CVE-2026-118265Echo is a Go web framework. From 5.0.0 until 5.4.1, Echo v5's ExtractIPFromRealIPHeader validates whether the …0.1%보통5.3
CVE-2026-111450Wheels through 4.1.1 derives its default production error-email address from the Host header of the request th…0.1%보통5.9
CVE-2026-108555PairDrop through 1.11.2 contains an IP spoofing vulnerability in Peer._setIP that allows remote attackers to j…0.1%낮음2.3
CVE-2026-102275PyJWT is a Python implementation of JSON Web Token standards. From 2.1.0 until 2.15.0, PyJWT OKPAlgorithm.from…0.1%보통6.5
CVE-2026-114437In the Golang Chi web framework, the ClientIPFromXFF middleware skips any X-Forwarded-For entry in a configure…0.1%보통6.3
CVE-2026-84718A flaw was found in the Ansible Automation Platform automation-controller. In the shipped production configura…0.1%보통4.3
CVE-2026-112378GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3…0.1%보통4.3
CVE-2026-111934Coder before 2.34.7 contains an IP spoofing vulnerability in the ExtractRealIPAddress middleware that trusts t…0.1%보통6.3
CVE-2026-87070The Forminator Forms WordPress plugin before 1.57.2.1 does not verify that a request came from a trusted proxy…0.1%보통5.3
CVE-2026-102630UnoPim versions before 2.0.1 and 2.1.1 trust all connecting clients as proxies and honor the X-Forwarded-Host …0.1%낮음2.3
CVE-2026-92530GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.…0.1%보통4.3
CVE-2026-78015Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Less Truste…0.1%낮음3.7
CVE-2026-105051Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor presence check via CPUID interception (Sim…0.1%낮음1.9
CVE-2026-120633CGI versions before 5.00 for Perl trust the client X-Forwarded-Host header in url, self_url, virtual_host and …미평가
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.