CWE-424.

Docker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcall

• Docker Desktop
• CWE-424

OpenStack Ironic: OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting…

• OpenStack Ironic
• CWE-424

Grav Flex Objects 1.4.0 before 1.4.17 Authorization Bypass via Pages API Routes

• getgrav grav-plugin-flex-objects
• CWE-424

Improper Protection of Alternate Path in Splunk SOAR

• Splunk SOAR
• CWE-424

`wasi-http` p3: forwarded trailers aren't checked against `is_forbidden_header` hook

• CWE-424

>=46.0.0, <48.0.7 || >=49.0.0, <49.0.4 · fixed in 48.0.7, 49.0.4

Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared Presets

• renovate
• mend renovate-ce
• CWE-424

Windows AppX Deployment Service Security Feature Bypass Vulnerability

• Microsoft Windows 10 Version 21H2
• Microsoft Windows 10 Version 22H2
• CWE-424

Missing authorization checks in Amazon Athena engine version 3 request handling

• AWS Amazon Athena
• Broken access control
• CWE-424

Arbitrary file read via the convert_playwright_script prompt in mcp-k6

• Grafana mcp-k6
• Path traversal
• CWE-424

copyparty SFTP Volume Restriction Bypass via mkdir/rmdir/chattr Handlers

• 9001 copyparty
• Path traversal
• CWE-424

CrewAI: CrewAI before fb2323b offers a Python blocklist approach that operates at the wrong level…

• CrewAI
• CWE-424

AshLua read operation aggregate bypasses the exposed-field allow-list, exposing private attributes

• CWE-424

>=0.1.0, <0.2.1 · fixed in 0.2.1

ash_authentication_oauth2_server aliases every protocol endpoint under /.well-known, bypassing path-scoped controls

• CWE-424

>=0.1.0, <0.3.1 · fixed in 0.3.1

PCRE2: PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached…

• PCRE2
• CWE-424

Apache Tika: unpack endpoint in tika-server allows configuration with unsecureFeatures=false

• Apache Software Foundation Apache Tika
• CWE-424

Gitea: Release attachment extension allowlist bypass via web release edit form (variant of CVE-2025-68939)

• Unrestricted file upload
• CWE-424

<1.27.0 · fixed in 1.27.0

OpenStack Ironic: In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using…

• OpenStack Ironic
• CWE-424

Prisma Access Agent: Local Authenticated VPN Enforcement Bypass on Linux

• Palo Alto Networks Prisma Access Agent
• CWE-424

Prisma Browser: Improperly Restricted Automation Bridge Allows Security Bypass

• Palo Alto Networks Prisma Browser
• CWE-424

Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to retain access when their account has been disabled.

• Ivanti Neurons for ITSM (On-Premise)
• Ivanti Neurons for ITSM (Cloud)
• CWE-424

Improper Protection of Alternate Path exists in the no-access and workdir feature of the AWS API MCP Server versions >= 0.2.14 and < 1.3.9 on all platforms may allow the bypass of intended file acc...

• CWE-424

>=0.2.14, <1.3.9 · fixed in 1.3.9

Gitea allows attackers to add attachments with forbidden file extensions

• CWE-424

<1.23.0-rc0 · fixed in 1.23.0-rc0

Prisma Browser: Insufficient Policy Enforcement Vulnerability in Prisma Browser

• Palo Alto Networks Prisma Browser
• CWE-424

NEOJAPAN Inc. desknet's NEO: Improper Protection of Alternate Path (CWE-424) in the AppSuite of desknet's NEO V4.0R1.0…

• NEOJAPAN Inc. desknet's NEO
• CWE-424

Privilege Management for Windows - Elevation of Privilege

• BeyondTrust Privilege Management for Windows
• CWE-424

Arris VIP1113: Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow booting an arbitrary image…

• Arris VIP1113
• CWE-424

Arris VIP1113: Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow file overwrite via TFTP…

• Arris VIP1113
• CWE-424

vBulletin: Certain vBulletin versions might allow attackers to execute arbitrary PHP code by abusing…

• vBulletin
• CWE-424

vBulletin: vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to…

• vBulletin
• CWE-424

HackMD CodiMD: CodiMD through 2.5.4 has a CSP-based protection mechanism against XSS through uploaded…

• HackMD CodiMD
• CWE-424

HackMD CodiMD: CodiMD through 2.2.0 has a CSP-based protection mechanism against XSS through uploaded…

• HackMD CodiMD
• CWE-424

yiisoft/yii2 Mishandles the Attaching of Behavior Defined by a `__class` Array Key

• CWE-424

<2.0.52 · fixed in 2.0.52

Cortex XDR Broker VM: Unauthorized Access to Broker VM Docker Containers

• Palo Alto Networks Cortex XDR Broker VM
• CWE-424

Container Escape Vulnerability in TR7's Application Security Platform (ASP)

• TR7 Application Security Platform (ASP)
• Privilege escalation
• CWE-424

Siemens HiMed Cockpit 12 pro: A vulnerability has been identified in HiMed Cockpit 12 pro (J31032-K2017-H259) (All…

• Siemens HiMed Cockpit 12 pro
• Siemens HiMed Cockpit 14 pro+
• CWE-424

Improper Protection of Alternate Path in GitLab

• GitLab
• CWE-424

Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.3 - Form Submission Admin Email Bypass

• bdthemes Element Pack – Widgets, Templates & Addons for Elementor
• CWE-424

Kioware: In KioWare for Windows (versions all through 8.34) it is possible to exit this software…

• Kioware
• CWE-424

Kioware: KioWare for Windows (versions all through 8.34) allows to escape the environment by…

• Kioware
• CWE-424

A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to upload malicious files to the web root of the application.

• Cisco Identity Services Engine Software
• CWE-424

IBM MQ privilege escalation

• IBM MQ Appliance
• CWE-424

Docker Desktop before 4.23.0 allows Enhanced Container Isolation bypass via debug shell

• Docker Inc. Docker Desktop
• Broken access control
• CWE-424

Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation restrictions via the raw Docker socket and launch privileged containers

• Docker Inc. Docker Desktop
• CWE-424
• CWE-501

2.2.4 IMPROPER PROTECTION OF ALTERNATE PATH CWE-424

• Dominion Voting Systems ImageCast X application
• Dominion Voting Systems ImageCast X firmware
• CWE-424

Improper access control vulnerability in Contents To Window prior to SMR May-2022 Release 1 allows physical attacker to install package before completion of Setup wizard.

• Samsung Mobile Devices
• CWE-424

Improper Protection of Alternate Path vulnerability in Setup wizard process prior to SMR Mar-2022 Release 1 allows physical attacker package installation before finishing Setup wizard.

• Samsung Mobile Devices
• Samsung Mobile Samsung Clould
• CWE-424

Motorola Binatone Hubble Cameras: An improper access control vulnerability was reported in some Motorola-branded Binatone…

• Motorola Binatone Hubble Cameras
• CWE-424

ABB PB610 HMIStudio accepts malicious DLL file in an application

• ABB PB610 Panel Builder 600
• CWE-424

PB610 HMISimulator provides interface with access to arbitrary files

• ABB PB610 Panel Builder 600
• CWE-424