CWE-506 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-506 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2025-30066tj-actions changed-files before 46 allows remote attackers to discover secrets by reading actions lo…72.1%높음8.6● 실제 악용이 확인됨CVE-2026-33634Trivy is a security scanner. On March 19, 2026, a threat actor used compromised credentials to publi…59.7%심각9.4● 실제 악용이 확인됨CVE-2024-4978Justice AV Solutions Viewer Setup 8.3.7.250-1 contains a malicious binary when executed and is signe…26.9%높음8.7● 실제 악용이 확인됨CVE-2025-54313eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply ch…5.1%높음7.5● 랜섬웨어 캠페인에 사용됨CVE-2026-45321On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/…3.3%심각9.6● 실제 악용이 확인됨CVE-2025-30154reviewdog/action-setup is a GitHub action that installs reviewdog. reviewdog/action-setup@v1 was com…2.5%높음8.6● 랜섬웨어 캠페인에 사용됨CVE-2026-48027Nx Console is the user interface for Nx & Lerna. On 19 May 2026, a malicious version of Nx Console, …1.8%심각9.3● 실제 악용이 확인됨CVE-2026-8398A supply chain attack compromised the official installation packages of DAEMON Tools Lite (Windows v…1.5%심각9.3
전체 목록
12건
CVE-2025-59374악용 확인"UNSUPPORTED WHEN ASSIGNED" Certain versions of the ASUS Live Update client were distributed with unauthorized…1.2%심각9.3
CVE-2026-111862Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123 packag…0.7%심각9.8
CVE-2026-97230IO::Socket::SSL::SelfCertificate versions 1.00 for Perl contains malware which executes Python code from an ob…0.2%심각9.8
CVE-2026-95831Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Python code fr…0.1%높음7.8
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.