Advisories · Weakness
CWE-1059.
Every Advisory and CVE whose sources give the weakness CWE-1059, newest first.
- CVSS 5.9 Medium
NetBox MCP Server: HTTP transport exposes all NetBox data without authentication
- netboxlabs netbox-mcp-server
- Authentication bypass
- CWE-1059
- CVSS 9.1 CriticalCritical · CVSS 9+
Apache Tomcat: EncryptInterceptor requirements not clearly documented
- Apache Software Foundation Apache Tomcat
- CWE-1059
- CVSS 7.1 High
@hulumi/baseline: AccountFoundation audit-delivery S3 bucket could be silently weakened
- CWE-1059
<1.4.0 · fixed in 1.4.0
GHSA-2mxr-p26x-mj73 · CVE-2026-48035 - CVSS 9.8 CriticalCritical · CVSS 9+
Incomplete Documentation of remote functions in FESTO products.
- Festo SE Bus module CPX-E-EP
- Festo SE Bus node CPX-FB32
- CWE-1059