CWE-706 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-706 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2025-24813Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information dis…99.9%심각9.8● 실제 악용이 확인됨CVE-2020-15505A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, …99.7%심각9.8● 랜섬웨어 캠페인에 사용됨CVE-2021-40539Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication…99.0%심각9.8CVE-2026-92262MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 1…0.7%심각9.9CVE-2026-81383Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker …0.7%높음7.4CVE-2026-118938In Trail of Bits fickling through 0.1.12, a pickle STACK_GLOBAL operand carrying a dotted __qualname…0.5%높음8.8CVE-2026-87547Incorrect reference resolution in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remot…0.4%심각9.6CVE-2026-95334Incorrect reference resolution in WebProtect in Google Chrome prior to 154.0.8037.57 allowed a remot…0.4%높음8.3
전체 목록
37건
CVE-2026-92951vm2 before 3.11.7 contains an incorrect authorization vulnerability in the external package allowlist check th…0.4%심각9.4
CVE-2026-87613Incorrect reference resolution in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker…0.4%심각9.0
CVE-2026-85491Catalyst::Seal versions before 0.03 for Perl allow one request to disable a path or route a later one past an …0.4%높음8.8
CVE-2026-87618Incorrect reference resolution in Storage in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remo…0.3%높음8.3
CVE-2026-95275Incorrect reference resolution in MediaStream in Google Chrome prior to 154.0.8037.57 allowed a remote attacke…0.3%미평가
CVE-2026-110156Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 155.0.8059.79 allowed a remot…0.3%높음8.3
CVE-2026-106181Incorrect reference resolution in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker w…0.3%보통5.3
CVE-2026-107822MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11…0.3%보통6.4
CVE-2026-95106Gitea accepted pushed Git trees containing two entries with the same name, which Git's own consistency checks …0.3%심각9.1
CVE-2026-106230Incorrect reference resolution in Offline in Google Chrome on on Android prior to 155.0.8059.39 allowed a remo…0.3%보통5.3
CVE-2026-106274Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote a…0.3%높음8.8
CVE-2026-106308Incorrect reference resolution in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a rem…0.3%높음8.8
CVE-2026-106409Incorrect reference resolution in WebAppInstalls in Google Chrome on on Mac prior to 155.0.8059.39 allowed a r…0.3%높음8.3
CVE-2026-61844FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior …0.3%높음7.1
CVE-2026-14288GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3…0.2%낮음3.1
CVE-2026-87720Incorrect Authorization (CWE-863) in project name normalization (ProjectUtil.stripGitSuffix) and ProjectCache …0.3%높음7.6
CVE-2026-89313`JwksTrustStore.Get` assigned each parsed key to the function's **named return value** while refreshing the JW…0.2%보통6.3
CVE-2026-106325Incorrect reference resolution in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker lever…0.2%보통4.3
CVE-2026-87562Incorrect reference resolution in Accessibility in Google Chrome on on Mac prior to 153.0.8010.36 allowed a re…0.2%보통4.3
CVE-2026-77605Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the Folder as Workspace Run by system …0.2%높음7.8
CVE-2026-114663Vyper 0.4.0b1 through 0.5.0b1 miscompiles unfoldable constants and omitted default arguments from imported mod…0.2%높음8.6
CVE-2026-78359OTRS does not sufficiently enforce the uniqueness of customer user identities across multiple configured Custo…0.2%보통5.4
CVE-2026-112909filelock is a platform-independent file lock for Python. Prior to 4.2.1, UnixFileLock can truncate a regular f…0.1%보통6.1
CVE-2026-91727Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a local…0.1%높음8.1
CVE-2026-93375Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a loca…0.1%높음8.1
CVE-2026-106279Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local …0.1%높음7.4
CVE-2026-121200Incorrect reference resolution in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker l…심각9.6
CVE-2026-121133Incorrect reference resolution in Images in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote at…미평가
CVE-2026-119675MongoDB Database Tools mongorestore inconsistently handles the system.buckets. prefix when validating collecti…보통5.2
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.