CWE-668 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-668 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
CVE-2026-54504MCP Documentation Server is a local-first document management and semantic search server for AI codi…0.6%높음8.8CVE-2026-120308A Beta9 tenant can attach a volume when deploying a function, endpoint, or task queue. The gateway b…0.5%심각9.9CVE-2026-54582mport is the MidnightBSD Package Manager. Prior to 2.7.8, package installation lacked a preflight ch…0.5%보통6.0CVE-2026-115522Exposure of Resource to Wrong Sphere (CWE-668) in FileArtifactService in Google Agent Development Ki…0.4%보통5.3CVE-2026-92940vm2 versions 3.11.3 through 3.11.6 expose the host process's real https.globalAgent to sandboxed cod…0.3%심각10.0CVE-2026-61590djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered pe…0.3%높음7.4CVE-2026-85053Improper resource exposure in CacheStorage in Google Chrome prior to 152.0.7977.82 allowed a remote …0.3%높음8.8CVE-2026-54495The OpenFeature Operator allows users to expose feature flags to applications. In version 0.9.2 and …0.3%보통4.3
전체 목록
24건
CVE-2026-104073NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allows a low-pr…0.3%보통6.9
CVE-2026-105754vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the /inference/v1/generate…0.3%보통6.5
CVE-2026-50607A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and Preda…0.3%낮음2.7
CVE-2026-112936filelock is a platform-independent file lock for Python. From 3.20.4 until 4.0.9, ReadWriteLock and AsyncReadW…0.2%보통6.1
CVE-2026-105746Docling simplifies document processing by parsing diverse formats and providing integrations with the generati…0.2%낮음2.2
CVE-2026-102262Newell Brands DYMO ID 1.5.1.71 resolves its plugin Modules directory relative to the process working directory…0.2%높음7.0
CVE-2026-86551The Z80Ultra (NX741J) product contains a vulnerability where non-privileged programs can retrieve the Wi-Fi MA…0.2%낮음3.3
CVE-2025-10149The SCIM endpoint does not sufficiently validate authorization for federated users when performing operations …0.2%높음8.2
CVE-2026-106354Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to …0.2%보통4.3
CVE-2026-92706Dark Reader is an accessibility browser extension that makes web pages colors dark. Prior to 4.9.126, a websit…0.2%낮음3.4
CVE-2026-102125The sandbox that isolates document conversion on a Kiteworks appliance did not fully confine the code running …0.1%높음8.8
CVE-2026-57144PraisonAI is a multi-agent teams system. From version 4.5.110 to before version 4.6.61, praisonai.sandbox.Sand…0.1%높음8.8
CVE-2026-91788When implementing the JavaScript interface, Foxit PDF Editor/Reader did not perform the attribute authorizatio…0.1%보통4.7
CVE-2026-96812Improper Exposure of Resource to Wrong Sphere in the host file helper (gofer) in Google gVisor prior to commit…0.1%높음8.8
CVE-2026-121175Improper resource exposure in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass …미평가
CVE-2026-121168Improper resource exposure in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker lever…높음8.8
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.