Advisories · Weakness
CWE-441.
Every Advisory and CVE whose sources give the weakness CWE-441, newest first.
- CVSS 5.0 Medium
Kubeflow Pipelines — API server fetches a caller-supplied pipelineURL without host validation
- kubeflow pipelines
- Server-side request forgery (SSRF)
- CWE-441
- CVSS 8.8 High
Google Chrome: Confused deputy in WebUI in Google Chrome prior to 157.0.8103.38 allowed a remote…
- Google Chrome
- CWE-441
- CVSS 8.8 High
Google Chrome: Confused deputy in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote…
- Google Chrome
- CWE-441
- CVSS 8.8 High
Google Chrome: Confused deputy in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a…
- Google Chrome
- CWE-441
- CVSS 7.8 High
Google Android: An unprivileged application can bypass the…
- Google Android
- CWE-441
- CVSS 8.4 High
In resolveAidConflictLocked of RegisteredAidCache.java, there is a possible permission bypass due to a confused deputy.
- Google Android
- CWE-441
- CVSS 4.0 Medium
In multiple locations, there is a possible permission bypass due to a confused deputy.
- Google Android
- CWE-441
- CVSS 8.4 High
In multiple locations, there is a possible permission bypass due to a confused deputy.
- Google Android
- CWE-441
- CVSS 8.4 High
In deliverResult of AppTimeTracker.java, there is a possible background activity launch due to a confused deputy.
- Google Android
- CWE-441
- CVSS 8.4 High
In handleAudioEffectBroadcast of MusicFxHelper.java, there is a possible permission bypass due to a confused deputy.
- Google Android
- CWE-441
- CVSS 8.4 High
In resolveToHeavyWeightSwitcherIfNeeded of ActivityStarter.java, there is a possible background activity launch due to a confused deputy.
- Google Android
- CWE-441
- CVSS 8.4 High
In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background application launch (bal) issue due to a confused deputy.
- Google Android
- CWE-441
- CVSS 8.4 High
In run of AddAccountSettings.java, there is a possible background activity launch due to a confused deputy.
- Google Android
- CWE-441
- CVSS 8.4 High
In multiple locations, there is a possible permission bypass due to a confused deputy.
- Google Android
- CWE-441
- CVSS 8.4 High
In startTetheredHotspotRequest of WifiServiceImpl.java, there is a possible permission bypass due to a confused deputy.
- Google Android
- CWE-441
- CVSS 4.0 Medium
In checkNearbyDevicesPermission of WifiP2pServiceImpl.java, there is a possible permission bypass due to a confused deputy.
- Google Android
- CWE-441
- CVSS 8.4 High
In multiple functions in multiple locations, there is a possible execution of sensitive USSD codes due to a confused deputy.
- Google Android
- CWE-441
- CVSS 8.4 High
In forwardToPreferredActionPickHandler of ContactsPickerActivity.kt, there is a possible intent redirection due to a confused deputy.
- Google Android
- CWE-441
- CVSS 4.0 Medium
In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible information leak due to a confused deputy.
- Google Android
- CWE-441
- CVSS 8.4 High
In onActivityResult in multiple locations, there is a possible contact leak from protected profile due to a confused deputy.
- Google Android
- CWE-441
- CVSS 8.4 High
In queryRemoteConnectionServices of ConnectionServiceWrapper.java, there is a possible permission bypass due to a confused deputy.
- Google Android
- CWE-441
- CVSS 8.3 High
Coder before 2.29.21, 2.34.12, 2.35.9, 2.36.7, and 2.37.4 Missing Audience Validation in GCP Instance-Identity Authentication
- coder
- CWE-441
- CVSS 4.2 Medium
HCL BigFix AEX is affected by multiple security vulnerabilities.
- HCL Software BigFix AEX
- Server-side request forgery (SSRF)
- CWE-441
- CVSS 9.9 CriticalCritical · CVSS 9+
LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key
- Privilege escalation
- CWE-345
>=1.91.0, <1.100.4 || >=1.101.0, <1.101.3 || >=1.102.0, <1.102.2 || >=1.103.0, <1.103.1 || >=1.104.0rc1, <1.104.0rc2 · fixed in 1.100.4, 1.101.3, 1.102.2, 1.103.1, 1.104.0rc2
GHSA-7hp6-4w63-5g45 · CVE-2026-114612 - CVSS 8.6 High
Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites
- Path traversal
- Code injection
>=8.0.0, <8.6.19 || >=9.0.0, <9.1.21 || >=10.0.0, <10.6.2 || >=11.0.0-alpha.0, <11.0.0-alpha.6 · fixed in 8.6.19, 9.1.21, 10.6.2, 11.0.0-alpha.6
GHSA-f2ph-cmg5-wxc8 · CVE-2026-114125 - CVSS 5.9 Medium
Unintended Proxy or Intermediary ('Confused Deputy') in hMailServer
- Progressive Robot Ltd hMailServer
- CWE-441
- CVSS 8.8 High
Google Chrome: Confused deputy in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a…
- Google Chrome
- CWE-441
- CVSS 8.8 High
Google Chrome: Confused deputy in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote…
- Google Chrome
- CWE-441
- CVSS 8.8 High
Google Chrome: Confused deputy in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote…
- Google Chrome
- CWE-441
- CVSS 8.8 High
Google Chrome: Confused deputy in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed…
- Google Chrome
- CWE-441
- CVSS 8.8 High
Google Chrome: Confused deputy in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote…
- Google Chrome
- CWE-441
- CVSS 8.8 High
Google Chrome: Confused deputy in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote…
- Google Chrome
- CWE-441
- CVSS 8.8 High
Google Chrome: Confused deputy in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote…
- Google Chrome
- CWE-441
- CVSS 8.8 High
Google Chrome: Confused deputy in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote…
- Google Chrome
- CWE-441
- CVSS 8.8 High
Google Chrome: Confused deputy in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a…
- Google Chrome
- CWE-441
- CVSS 7.7 High
Console-operator: streams for apache kafka console: cross-namespace kafkauser secret exfiltration via confused deputy
- Red Hat StreamsHub Console for Apache Kafka®
- Red Hat streams for Apache Kafka 2
- CWE-441
- CVSS 5.1 Medium
Angular DevTools (Local DoS)
- angular
- angular DevTools
- CWE-346
- CWE-441
- CVSS 6.5 Medium
Windows Broadcast DVR User Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-441
- CVSS 7.8 High
Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-441
- CVSS 6.3 Medium
Azure Monitor data source resource proxy allows calls to arbitrary Azure Resource Manager APIs
- Grafana Enterprise
- Grafana OSS
- Broken access control
- CWE-441
- CVSS 9.2 CriticalCritical · CVSS 9+
ZITADEL 3.0.0 before 4.19.2 Account Takeover via Unsigned Login V2 Session Cookie
- zitadel
- CWE-441
- CVSS 9.3 CriticalCritical · CVSS 9+
TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment
- Open redirect
- CWE-346
<3.14.0 · fixed in 3.14.0
GHSA-x34j-47hf-4xg7 · CVE-2026-108261 - CVSS 6.5 Medium
Authentication Bypass by Spoofing in Malcolm
- CISA Malcolm
- Authentication bypass
- Broken access control
- CVSS 9.4 CriticalCritical · CVSS 9+
AsyncHttpClient: Replay to a different host sends the original host request and credentials to the new host
- Weak cryptography or TLS
- Hard-coded credentials
>=3.0.0, <3.0.13 || >=2.0.0, <2.16.1 · fixed in 3.0.13, 2.16.1
GHSA-jmqq-x5g9-9p2w · CVE-2026-107282 - CVSS 7.5 High
AsyncHttpClient: Origin credentials sent in cleartext to a proxy that rejects the CONNECT
- AsyncHttpClient async-http-client
- Weak cryptography or TLS
- Hard-coded credentials
- CVSS 6.4 Medium
Backstage's scaffolder credential handling may allow unintended GitHub authentication fallback
- Broken access control
- CWE-441
<4.1.0 · fixed in 4.1.0
GHSA-29gx-h2m3-xw44 · CVE-2026-106462 - CVSS 3.5 Low
Backstage: Unsupported catalog cluster authentication mode in kubernetes backend
- CWE-441
<0.21.10 · fixed in 0.21.10
GHSA-h53x-hjx6-25gr · CVE-2026-106487 - CVSS 10.0 CriticalCritical · CVSS 9+
Server-side request forgery in SonicWall SMA1000
- SonicWall SMA1000
- Server-side request forgery (SSRF)
- CWE-441
- CVSS 9.8 CriticalCritical · CVSS 9+
Gitea fork workflow approval bypass through maintainer-triggered events
- Gitea
- Broken access control
- CWE-441
- CVSS 8.3 High
Google Chrome: Confused deputy in WebAPKs in Google Chrome on on Android prior to 155.0.8059.39 allowed…
- Google Chrome
- CWE-441
- CVSS 5.4 Medium
Google Chrome: Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a…
- Google Chrome
- CWE-441
- CVSS 4.3 Medium
Google Chrome: Confused deputy in DeviceBoundSessionCredentials in Google Chrome prior to 155.0.8059.39…
- Google Chrome
- CWE-441
- CVSS 8.1 High
Google Chrome: Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a…
- Google Chrome
- CWE-441
- CVSS 8.3 High
Google Chrome: Confused deputy in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote…
- Google Chrome
- CWE-441
- CVSS 6.1 Medium
Google Chrome: Confused deputy in SignIn in Google Chrome on on Android prior to 155.0.8059.39 allowed a…
- Google Chrome
- CWE-441
- CVSS 4.4 Medium
Google Chrome: Confused deputy in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a…
- Google Chrome
- CWE-441
- CVSS 6.5 Medium
Google Chrome: Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a…
- Google Chrome
- CWE-441
- CVSS 6.5 Medium
Google Chrome: Confused deputy in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a remote…
- Google Chrome
- CWE-441
- CVSS 9.3 CriticalCritical · CVSS 9+
Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path
- CWE-346
- CWE-441
>=6.0.0, <6.2.2 || >=7.0.0, <7.6.9 || >=8.5.0, <8.5.1 || >=8.3.5, <8.4.3 || >=8.0.0, <=8.3.4 · fixed in 6.2.2, 7.6.9, 8.5.1, 8.4.3
GHSA-rvm3-566m-v7fv · CVE-2026-103922 - CVSS 7.8 High
In Settings, there is a possible permission bypass due to a confused deputy.
- Google Android
- CWE-441