CWE-1327.

Ubiquiti Inc WiFiman Desktop: A malicious actor with access to the network could exploit a Binding to an Unrestricted…

• Ubiquiti Inc WiFiman Desktop
• CWE-1327

OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE

• OpenHands Software Agent SDK
• CWE-1327

IBM App Connect Enterprise is vulnerable to a credential exposure

• IBM App Connect Enterprise
• CWE-1327

LlamaFarm through 0.0.34 Unauthenticated API Exposed on All Interfaces

• llama-farm llamafarm
• CWE-1327

Penpot before 2.18.0 Unauthenticated WebSocket Access via MCP Bridge

• penpot
• @penpot/mcp
• CWE-1327

ESPHome Device Builder Dashboard: Unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces

• CWE-1327

<1.0.10 · fixed in 1.0.10

fastify-cli vulnerable to remote code execution via ignored explicit Inspector bind address

• fastify-cli
• CWE-1327

Cisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution Vulnerability

• Cisco NX-OS Software
• CWE-1327

argocd-mcp 0.8.0 Authentication Bypass via Unauthenticated HTTP

• argoproj-labs argocd-mcp
• CWE-1327

9router: Unauthenticated `/v1` proxy access via `Host`-header spoofing → open AI relay + SSRF

• Authentication bypass
• Server-side request forgery (SSRF)

<0.5.2 · fixed in 0.5.2

GitHub CLI: `gh codespace ports forward` exposes forwarded services on all network interfaces by default

• cli
• Information disclosure
• CWE-1327

IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution

• IBM Documentation Offline
• CWE-1327

VPS.org one-click Supabase template deployment instance contains multiple vulnerabilities

• VPS.org Supabase template
• CWE-1188
• CWE-1327

Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces

• Spring Tools for Eclipse
• CWE-1327

PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired in

• Authentication bypass
• CWE-350

<1.6.59 · fixed in 1.6.59

Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially resulting in lo…

• AMD Instinct™ MI210
• AMD Instinct™ MI250
• CWE-1327

Accidental binding to INADDR_ANY might lead to RCE in golang.org/x/tools/gopls

• golang.org/x/tools/gopls
• CWE-1327

OpenClaw: Sandbox browser CDP relay could expose DevTools protocol on 0.0.0.0

• Broken access control
• CWE-1188

<2026.4.10 · fixed in 2026.4.10

Apache IoTDB has an Insecure Default Configuration Vulnerability

• CWE-1327

>=1.0.0, <1.3.7 || >=2.0.0, <2.0.7 · fixed in 1.3.7, 2.0.7

OpenClaw's Chrome extension relay binds publicly due to wildcard treated as loopback

• Broken access control
• CWE-1327

>=2026.1.14-1, <2026.2.12 · fixed in 2026.2.12

Azure IoT Explorer Information Disclosure Vulnerability

• Microsoft Azure IoT Explorer
• CWE-1327

Keycloak has debug default bind address

• CWE-1327

<26.4.4 · fixed in 26.4.4

Duplicate Advisory: Keycloak allows Binding to an Unrestricted IP Address

• CWE-1327

<=26.4.4 · no fixed version yet

AutomationDirect Productivity Suite Binding to an Unrestricted IP Address CWE-1327

• AutomationDirect Productivity Suite
• AutomationDirect Productivity 3000 P3-622 CPU
• CWE-1327

OmniParser Remote Code Execution Vulnerability

• Microsoft OmniParser
• CWE-1327

Remote Code Execution in ProTNS ActADUR

• ProTNS ActADUR
• Command injection
• Authentication bypass

Excessive attack surface in acep-collector service due to binding to an unrestricted IP address.

• Acronis Cyber Protect 16
• CWE-1327

Excessive attack surface in acep-importer service due to binding to an unrestricted IP address.

• Acronis Cyber Protect 16
• CWE-1327

Excessive attack surface in archive-server service due to binding to an unrestricted IP address.

• Acronis Cyber Protect 16
• CWE-1327

cups-browsed binds to `INADDR_ANY:631`, trusting any packet from any source

• OpenPrinting cups-browsed
• CWE-1327

dbt allows Binding to an Unrestricted IP Address via socketsocket

• CWE-1327

<1.6.15 || >=1.7.0, <1.7.15 || >=1.8.0, <1.8.1 · fixed in 1.6.15, 1.7.15, 1.8.1

Server receiving a malformed message based on a list of IPs resulting in heap corruption causing a denial of service.

• Honeywell Experion Server
• CWE-1327

Excessive attack surface due to binding to an unrestricted IP address.

• Acronis Agent
• Acronis Cyber Protect 15
• CWE-1327

CVE-2023-1968

• Illumina iScan Control Software
• Illumina MiniSeq Control Software
• CWE-1327

JetBrains PyCharm: In JetBrains PyCharm before 2022.1 exposure of the debugger port to the internal network…

• JetBrains PyCharm
• CWE-1327