CWE-829 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-829 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2026-0770Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution…62.6%심각9.8● 실제 악용이 확인됨CVE-2025-32463Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user…55.5%높음7.8● 실제 악용이 확인됨CVE-2026-111357Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache co…0.5%높음7.0CVE-2026-70267Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an au…0.9%높음7.2CVE-2026-93993Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation p…0.9%높음8.6CVE-2026-54752NetBox Device Type Library is a collection of community-sourced device type definitions for import i…0.7%심각9.6CVE-2026-54916NetBox Device Type Library is a collection of community-sourced device type definitions for import i…0.6%높음8.8CVE-2026-96237Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to …0.5%높음7.5
전체 목록
60건
CVE-2026-73800Gitea resolves local reusable workflow files from a fork's head commit when a trusted base-branch workflow run…0.5%미평가
CVE-2026-105677Ghost is a Node.js content management system. From 6.10.3 until 6.64.0, a vulnerability in how Ghost loads the…0.5%높음7.2
CVE-2026-86169Axolotl through 0.18.0 contains a remote code execution vulnerability in the multipack patch path where trust_…0.5%높음8.7
CVE-2026-116843Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands…0.4%높음8.7
CVE-2026-113709Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.1.0 until 3.3.15, 3.4.10, 3.5…0.4%심각9.9
CVE-2026-55675The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit 649c9aea2d…0.4%심각10.0
CVE-2026-63184Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.1, the `refitter`…0.4%높음7.1
CVE-2026-54918NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox…0.4%보통5.3
CVE-2023-7357A remote code execution (RCE) vulnerability was identified in the FlexNet Publisher lmadmin web user interface…0.4%높음8.6
CVE-2026-108913omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because the files pl…0.4%높음7.1
CVE-2026-84725when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during obj…0.3%높음8.1
CVE-2026-86131A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows…0.4%심각9.2
CVE-2026-114488A flaw was found in Wildfly. A remote attacker can bypass authentication on IIOP EJB invocations as the CSIv2 …0.3%높음7.4
CVE-2026-114727Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content into ImageMagick when…0.3%높음8.3
CVE-2026-118762Monkeytype is a minimalistic and customizable typing test. Prior to 26.43.0, the .github/workflows/fix-formatt…0.3%심각9.3
CVE-2026-97150When converting baserCMS4-style addons to baserCMS5-style ones, BcAddonMigrator includes "config.php" from the…0.3%높음8.6
CVE-2026-105080In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes them to the e…0.3%심각9.4
CVE-2026-96443Insufficient validation of the JDBC driver URL in Apache Doris allows a privileged user to achieve remote code…0.3%보통6.5
CVE-2026-78019Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Funct…0.3%높음7.5
CVE-2026-79721Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a malicio…0.3%높음8.6
CVE-2026-115802A weakness has been identified in InternScience InternAgent 1.5.0. This affects the function train of the file…0.3%낮음2.1
CVE-2026-85355Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an au…0.3%높음7.0
CVE-2026-81305CM2507 IP cameras automatically execute a predetermined script from removable media without verifying its auth…0.3%높음7.0
CVE-2026-87695Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized att…0.2%높음7.8
CVE-2026-59176Functype is a family of TypeScript functional programming libraries. Prior to 1.4.4, the `set_functype_version…0.2%높음7.8
CVE-2026-12171auto-changelog before 2.6.1 merges configuration from inside the target repository (the .auto-changelog file a…0.2%높음8.4
CVE-2026-17647IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to execute arbitrary…0.2%높음8.8
CVE-2026-54160Network UPS Tools is a collection of programs which provide a common interface for monitoring and administerin…0.2%높음8.2
CVE-2026-104811DigitalCanion SA has discovered a vulnerability that allows remote attackers to execute arbitrary code on affe…0.2%높음8.4
CVE-2026-54532CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit 271d415, pull_request_tar…0.2%보통6.9
CVE-2026-87114A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly execut…0.2%높음7.1
CVE-2026-86063Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin installatio…0.2%높음7.5
CVE-2026-89332Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE befo…0.2%보통6.7
CVE-2026-65119NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where a…0.2%높음8.4
CVE-2026-59172Joker is a small Clojure interpreter, linter and formatter written in Go. Prior to 1.8.2, `joker --lint <file>…0.2%높음7.8
CVE-2026-49449Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. From…0.2%낮음2.5
CVE-2026-82525Exterro FTK Imager before 8.3 contains an XML external entity (XXE) injection vulnerability that allows attack…0.1%보통6.8
CVE-2026-96269GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of…0.1%높음7.5
CVE-2026-63277LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A do…0.1%높음8.5
CVE-2026-0303A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code executi…0.1%낮음2.4
CVE-2026-86504In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container …0.1%높음7.8
CVE-2026-111091In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configu…0.1%높음7.8
CVE-2026-95985The file write tool in Amazon Kiro IDE versions before 1.0.242 might allow remote unauthenticated actors to in…0.1%높음8.6
CVE-2026-100256In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints was possible in untrus…0.1%높음7.8
CVE-2026-92705Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automat…0.1%높음7.8
CVE-2026-15564Wildfly's IIOP listener may permit deserialization of input streams before authentication is performed. An att…0.1%높음7.4
CVE-2026-113461Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the Oracle client libr…0.1%보통5.2
CVE-2026-105745Docling simplifies document processing by parsing diverse formats and providing integrations with the generati…0.1%보통6.7
CVE-2026-86949This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcod…0.1%높음8.8
CVE-2026-55251NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox…0.1%보통6.5
CVE-2026-104809DigitalCanion has discovered a vulnerability that allows an attacker to cause the system to load an attacker-c…0.1%높음8.4
CVE-2026-105331Local privilege escalation in Checkmk 2.5.0 before 2.5.0p10 allows a user with access to edit the Oracle Insta…0.1%보통5.2
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.