CWE-749 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-749 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 랜섬웨어 캠페인에 사용됨CVE-2010-0738The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBo…73.8%보통5.3● 실제 악용이 확인됨CVE-2006-1547ActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote …54.6%높음7.5● 랜섬웨어 캠페인에 사용됨CVE-2010-1428The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka J…52.7%높음7.5● 랜섬웨어 캠페인에 사용됨CVE-2018-19322The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS E…1.8%높음7.8CVE-2026-77521MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.5-lts, assistants with a …1.0%심각10.0CVE-2026-109412An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attac…0.9%심각9.9CVE-2026-66088In openEQUELLA before 2026.1, the system.execute() function available to the scripting engine runs s…0.7%심각9.4CVE-2026-77926Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin user…0.7%높음8.7
전체 목록
36건
CVE-2026-106513MISP exposes critical infrastructure settings—specifically the Redis host addresses used by the core applicati…0.6%보통6.9
CVE-2026-76487A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager …0.6%보통5.3
CVE-2026-89139Temporal Server compiles a Worker Controller Instance module into its Worker Service, and that module register…0.6%높음8.7
CVE-2026-109422NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a remote co…0.5%심각9.2
CVE-2026-109556EdgeEver Desktop 1.92.0 through 1.112.0 contains a remote code execution vulnerability in the desktop:acp-prob…0.5%높음7.3
CVE-2026-61793Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.0.2 until 6.7.0, nuxt-og-image exposes th…0.5%보통6.9
CVE-2026-116019Grav 2.0.15 before 2.2.13 contains an allowlist bypass vulnerability that allows page editors to invoke arbitr…0.3%높음8.7
CVE-2026-118606Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnera…0.3%높음8.8
CVE-2026-119978Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated users to execute OS co…0.3%심각9.0
CVE-2026-108897A security vulnerability has been detected in Smart Media4U Technology SHAREit App 6.27.38_ww on Android. The …0.3%보통5.5
CVE-2026-70387Exposed dangerous method or function and Incorrect Authorization vulnerability in OnePlus OxygenOS on Android.…0.3%높음8.4
CVE-2026-89110SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality…0.3%심각9.9
CVE-2026-112780Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerability that allows page editors to call arbi…0.3%심각9.3
CVE-2026-105848Payload is a free and open source headless content management system. In @payloadcms/plugin-stripe versions be…0.3%보통6.4
CVE-2026-96430Exposed Dangerous Method or Function in the /WebAgenda/SQLWin.do API endpoint of Flowring Agentflow 4.0 versio…0.2%높음8.7
CVE-2026-54702Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the webview…0.2%높음7.3
CVE-2026-68928Acode is a powerful text and code editor for Android. From 1.11.6 until 1.12.7, com.foxdebug.acode.rk.exec.ter…0.2%높음8.6
CVE-2026-102667Joyland AI app allows an attacker with shared network access to inject JavaScript into content loaded in WebVi…0.2%심각9.0
CVE-2026-92612In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable bytes throu…0.2%낮음1.0
CVE-2026-113775A maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.LoadDll com…0.1%높음7.8
CVE-2026-86711electerm before 5.3.15 exposes 40+ main-process functions through an unvalidated Electron IPC handler with no …0.1%높음7.5
CVE-2026-20293A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers …0.1%높음7.1
CVE-2026-102734asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutil…0.1%보통5.5
CVE-2026-118602Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability. This vulnerabili…0.1%높음7.8
CVE-2026-86157Exposure of privileged IPC functionality in Progress Telerik Fiddler Everywhere before version 8.2.0 allows a …0.1%보통5.6
CVE-2026-75810Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief system stall by…0.1%보통5.7
CVE-2026-120091Temporal Server compiles a Worker Controller Instance module, go.temporal.io/auto-scaled-workers, into its Wor…높음8.7
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.