CWE-923 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-923 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
CVE-2026-78501Improper neutralization of special elements used in a command ('command injection') in Microsoft 365…0.9%높음7.4CVE-2026-85925Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an aut…0.5%높음8.2CVE-2026-86345A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a…0.4%심각9.0CVE-2026-96454Pake turns a website into a desktop application built on Tauri. Every application it generates inher…0.3%높음8.2CVE-2026-87734An issue was discovered in the utcp package before 0.0.6 for OCaml. Out-of-order segment reassembly …0.3%높음7.5CVE-2026-102085An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Netw…0.3%보통6.9CVE-2026-92173Prior to v74.0.0.878.1682 of Meta Horizon OS, MediaSyncJobReceiver could be induced to send a privil…0.3%심각9.1CVE-2026-92172Prior to v66.0.0.733.524 of Meta Horizon OS, OVRMediaService could be induced to send a privileged P…0.3%높음8.8
전체 목록
17건
CVE-2026-101891An improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unau…0.3%심각9.3
CVE-2026-70212Improper restriction of communication channel to intended endpoints in Windows Security Center allows an autho…0.2%높음7.0
CVE-2026-90461OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Servi…0.2%보통6.3
CVE-2026-91166Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. From 0.25.0 until 0.27.6, the browser …0.2%보통5.7
CVE-2026-81871OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the exporters/otlp/otlplo…0.2%보통6.3
CVE-2026-10756TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions an…0.2%높음7.7
CVE-2026-82932mH-DEVELOPER smart home module does not load any firewall rules at startup. This leaves all listening services…0.2%보통5.3
CVE-2026-110909Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP requests belongs…0.1%보통5.0
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.