CWE-942 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-942 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
CVE-2026-116748Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in rpc-…1.2%높음8.7CVE-2026-62895Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker t…0.7%높음8.8CVE-2026-89058A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins ("*"), reflec…0.5%높음7.4CVE-2026-84176Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Platform HTTP Ve…0.4%보통6.5CVE-2026-90882The open-vsx.org deployment returned Access-Control-Allow-Origin reflecting the requesting origin to…0.4%높음8.7CVE-2026-66070RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.17, 4.0.22, 4.1.13, and 4.2.6, …0.4%높음7.6CVE-2026-107858Missing Origin Validation in WebSockets (CWE-1385) and Permissive Cross-domain Policy with Untrusted…0.4%높음7.2CVE-2026-12962A Permissive Cross-domain Security Policy with Untrusted Domains in Armoury Crate allows a remote us…0.4%보통5.3
전체 목록
21건
CVE-2026-85313Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Jetty component. This issu…0.3%보통4.3
CVE-2026-62863MoLing is a computer-use and browser-use based MCP server. Prior to 0.5.0, when MoLing runs in SSE mode using …0.3%심각9.6
CVE-2026-3303IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry…0.3%낮음3.7
CVE-2026-115917vLLM is an inference and serving engine for large language models. Prior to 0.32.0, the OpenAI-compatible serv…0.2%낮음3.4
CVE-2026-92359A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. The affected element is the function create…0.2%낮음2.3
CVE-2026-56595HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated…0.2%낮음3.1
CVE-2026-108372Open and provider-neutral, LoopX is a lightweight state kernel and local-first control plane for loop engineer…0.2%높음7.1
CVE-2026-66247iControl is affected by an insecure Cross-Origin Resource Sharing (CORS) policy vulnerability, which could all…0.2%보통4.3
CVE-2026-82438Description Three separate mechanisms allowed a web page on an unrelated origin to read responses that Storm's…0.2%높음8.1
CVE-2026-110737The push endpoint of a Vaadin application that uses server push reflects the request Origin into the Access-Co…0.2%낮음2.3
CVE-2026-119285Fiber is an Express inspired web framework written in Go. From 2.52.1 until 2.52.3, the CORS middleware's vali…0.1%보통5.9
CVE-2026-55842Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, the apiCorsConfiguration() method…0.1%보통5.4
CVE-2026-111922Vikunja from 2.2.0 before 2.7.0 contains a permissive CORS configuration that trusts every localhost and 127.0…0.1%높음7.2
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.