Advisories · Weakness
CWE-648.
Every Advisory and CVE whose sources give the weakness CWE-648, newest first.
- CVSS 7.3 High
Ghostscript: reintroduction of .charkeys -dsafer bypass in rhel 8
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 10
- CWE-648
- CVSS 10.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Cisco Identity Services Engine Authentication Bypass Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- CWE-648
- CVSS 8.7 High
Anchore Enterprise Privilege Escalation via User Management API
- Anchore Enterprise
- CWE-648
- CVSS 8.4 High
Unity Parsec: An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads…
- Unity Parsec
- CWE-648
- CVSS 6.3 Medium
Missing Authorization Vulnerability in OpenText Access Manager
- OpenText Access Manager
- CWE-648
- CVSS 9.4 CriticalCritical · CVSS 9+
OS command injection in OpenVPN Inc OpenVPN Connect
- OpenVPN Inc OpenVPN Connect
- Command injection
- Privilege escalation
- CVSS 8.6 High
iControl REST vulnerability
- F5 BIG-IP
- CWE-648
- CVSS 7.1 High
Resource exposure in AMD EPYC™ 9004 Series Processors and others
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ 7003 Series Processors
- Information disclosure
- CWE-648
- CVSS 8.8 High
Duplicate Advisory: OpenClaw Gateway: RCE and Privilege Escalation from operator.pairing to operator.admin via device.pair.approve
- CWE-648
<2026.3.22 · fixed in 2026.3.22
GHSA-r3v5-2grc-429h - CVSS 8.1 High
Duplicate Advisory: OpenClaw: Gateway Plugin Subagent Fallback `deleteSession` Uses Synthetic `operator.admin`
- Broken access control
- CWE-648
<=2026.3.24 · no fixed version yet
GHSA-m5jp-p3r5-mfqp - CVSS 9.1 CriticalCritical · CVSS 9+
OpenClaw: Unbound bootstrap setup codes allow privilege escalation during pairing
- Privilege escalation
- CWE-648
<2026.3.22 · fixed in 2026.3.22
GHSA-gg9v-mgcp-v6m7 · CVE-2026-41386 - CVSS 9.0 CriticalCritical · CVSS 9+
OpenClaw: Heartbeat context inheritance bypasses sandbox via senderIsOwner escalation
- Broken access control
- CWE-648
<2026.3.31 · fixed in 2026.3.31
GHSA-g5cg-8x5w-7jpm · CVE-2026-41329 - CVSS 6.1 Medium
OpenClaw: Gateway Plugin Subagent Fallback `deleteSession` Uses Synthetic `operator.admin`
- Privilege escalation
- Broken access control
<2026.3.28 · fixed in 2026.3.28
GHSA-h4jx-hjr3-fhgc · CVE-2026-35645 - CVSS 8.7 High
OpenClaw: Gateway Plugin HTTP Auth Grants Unrestricted operator.admin Runtime Scope to All Callers
- Privilege escalation
- Broken access control
<=2026.3.24 · no fixed version yet
GHSA-qm2m-28pf-hgjw · CVE-2026-35669 - CVSS 8.5 High
OpenClaw: Silent privilege escalation via gateway shared-auth reconnect
- Broken access control
- CWE-648
<=2026.3.24 · no fixed version yet
GHSA-fqw4-mph7-2vr8 · CVE-2026-35625 - CVSS 8.7 High
OpenClaw: Gateway Backend Reconnect lets Non-Admin Operator Scopes Self-Claim operator.admin
- Privilege escalation
- Broken access control
<=2026.3.24 · no fixed version yet
GHSA-9hjh-fr4f-gxc4 · CVE-2026-35663 - CVSS 8.7 High
OpenClaw Gateway: RCE and Privilege Escalation from operator.pairing to operator.admin via device.pair.approve
- Privilege escalation
- CWE-648
<2026.3.22 · fixed in 2026.3.22
GHSA-hf68-49fm-59cq · CVE-2026-35639 - CVSS 5.4 MediumCritical · KEVKEV
Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability
- Cisco Catalyst SD-WAN Manager
- CWE-648
- CVSS 8.8 High
Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability
- Cisco Catalyst SD-WAN Manager
- CWE-648
- CVSS 6.5 Medium
Apache Airflow Has an Authorization Bypass That Allows Unauthorized Task Log Access
- CWE-648
>=3.1.0, <3.1.7 · fixed in 3.1.7
GHSA-pm44-x5x7-24c4 · CVE-2026-22922 - CVSS 7.1 High
Improper Authorization in Nomysoft Informatics' Nomysem
- NomySoft Information Technology Training and Consulting Inc. Nomysem
- CWE-648
- CVSS 5.4 Medium
When processing API requests, the Alteryx server 2022.1.1.42654 and 2024.1 used MongoDB object IDs to uniquely identify the data being requested by the caller.
- CWE-648
- CVSS 8.5 High
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2).
- Siemens Spectrum Power 4
- CWE-648
- CVSS 8.8 High
KL-001-2025-016: Xorux LPAR2RRD File Upload Directory Traversal
- Xorux LPAR2RRD
- Path traversal
- Unrestricted file upload
- CVSS 5.3 Medium
KL-001-2025-015: Xorux LPAR2RRD Read Only User Log Download Exposing Sensitive Information
- Xorux LPAR2RRD
- CWE-648
- CVSS 6.5 Medium
KL-001-2025-014: Xorux LPAR2RRD Read Only User Denial of Service
- Xorux LPAR2RRD
- CWE-648
- CVSS 5.3 Medium
KL-001-2025-013: Xorux XorMon-NG Web Application Privilege Escalation to Administrator
- Xorux XorMon-NG
- CWE-648
- CVSS 5.3 Medium
KL-001-2025-012: Xorux XorMon-NG Read Only User Export Device Configuration Exposing Sensitive Information
- Xorux XorMon-NG
- CWE-648
- CVSS 8.8 High
Privilege Escalation in Beamsec PhishPro
- Beamsec PhishPro
- CWE-648
- CVSS 8.7 High
Digiwin｜EAI - Privilege Escalation
- Digiwin EAI
- CWE-648
- CVSS 7.8 High
Dell PowerProtect Data Manager: Dell PowerProtect Data Manager Reporting, version(s) 19.17…
- Dell PowerProtect Data Manager
- CWE-648
- CVSS 8.7 High
Incorrect Use of Privileged vulnerability has been discovered on OpenText™ UCMDB and Operation Bridge Manager product.
- OpenText™ Operations Bridge Manager
- OpenText™ Operations Bridge Suite (Containerized)
- CWE-648
- CVSS 9.0 CriticalCritical · CVSS 9+
Authentication Bypass in Sechard Information Technologies' SecHard
- SecHard
- Weak cryptography or TLS
- Hard-coded credentials
- CVSS 6.9 Medium
Octopus Deploy Octopus Server: In affected versions of Octopus Deploy where customers are using Active Directory for…
- Octopus Deploy Octopus Server
- CWE-648
- CVSS 6.4 Medium
Bentley ProjectWise Integration Server: Bentley Systems ProjectWise Integration Server before 10.00.03.288 allows unintended SQL…
- Bentley ProjectWise Integration Server
- CWE-648
- CVSS 9.8 CriticalCritical · CVSS 9+
WhatsUp Gold Registry Overwrite Remote Code Execution Vulnerability
- Progress Software Corporation WhatsUp Gold
- CWE-648
- CVSS 9.8 CriticalCritical · CVSS 9+
D-Link DSL6740C - Incorrect Use of Privileged APIs
- D-Link DSL6740C
- CWE-648
- CVSS 6.5 Medium
org.xwiki.platform:xwiki-platform-notifications-ui is missing checks for notification filter preferences editions
- CWE-648
>=13.2-rc-1, <14.10.21 || >=15.0-rc-1, <15.5.5 || >=15.6-rc-1, <15.10.1 · fixed in 14.10.21, 15.5.5, 15.10.1
GHSA-r95w-889q-x2gx · CVE-2024-46978 - CVSS 8.1 High
usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos
- CWE-648
<0.9.1 · fixed in 0.9.1
GHSA-ghx2-6v4g-9wmm · CVE-2022-4796 - CVSS 8.1 High
usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos
- CWE-648
<0.9.0 · fixed in 0.9.0
GHSA-fv6c-rfg3-gvjw · CVE-2022-4687 - CVSS 7.3 High
usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos
- CWE-648
<0.9.1 · fixed in 0.9.1
GHSA-mq5q-gpgv-pwxw · CVE-2022-4805 - CVSS 9.1 CriticalCritical · CVSS 9+
The OpenDaylight 0.15.3 controller allows topology poisoning via API requests because an application can manipulate the path that is taken by discovery packets.
- CWE-648
- CVSS 7.2 High
Information Disclosure in ExtremePacs's Extreme XDS
- ExtremePacs Extreme XDS
- CWE-648
- CVSS 7.5 High
Sensetive Data Exposure in Utarit's Soliclub
- Utarit Information Technologies SoliPay Mobile App
- CWE-648
- CVSS 7.8 High
A vulnerability has been identified in Unicam FX (All versions).
- Siemens Unicam FX
- CWE-648
- CVSS 7.5 High
Information Disclosure in Eskom E-municipality
- ESKOM Computer e-municipality module
- CWE-648
- CVSS 7.5 High
Information Disclosure in Eskom E-municipality
- ESKOM Computer e-municipality module
- CWE-648
- CVSS 9.8 CriticalCritical · CVSS 9+
Information Disclosure in Digital Yepas
- Digital Yepas
- CWE-648
- CVSS 7.2 High
Privilege Escalation for Project Owner and Project User Admin Roles in Ops Manager
- MongoDB Inc. MongoDB Ops Manager
- CWE-648
- CVSS 4.3 Medium
Cisco Secure Workload: A vulnerability in the OpenAPI of Cisco Secure Workload could allow an authenticated…
- Cisco Secure Workload
- CWE-648
- CVSS 9.1 CriticalCritical · CVSS 9+
org.xwiki.platform:xwiki-platform-oldcore makes Incorrect Use of Privileged APIs with DocumentAuthors
- CWE-648
>=14.5, <14.10 || >=14.4.1, <14.4.7 · fixed in 14.10, 14.4.7
GHSA-pwfv-3cvg-9m4c · CVE-2023-29507 - CVSS 8.8 High
Dell PPDM versions 19.12, 19.11 and 19.10, contain an improper access control vulnerability.
- Dell PPDM Reporting (PowerProtect Data Manager)
- CWE-648
- CVSS 4.3 Medium
A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to take privileges actions within the web-based management interf…
- Cisco Identity Services Engine Software
- CWE-648
- CVSS 7.1 High
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to bypass authorization and access system files.
- Cisco Identity Services Engine Software
- CWE-648
- CVSS 7.5 High
PingID Windows Login prior to 2.8 does not alert or halt operation if it has been provisioned with the full permissions PingID properties file
- Ping Identity PingID Windows Login
- Authentication bypass
- CWE-648
- CVSS 10.0 CriticalCritical · CVSS 9+
Incorrect Use of Privileged APIs in polonel/trudesk
- polonel/trudesk
- CWE-648
- CVSS 6.8 Medium
Incorrect Use of Privileged APIs in org.xwiki.platform.skin.skinx
- CWE-648
>=13.5.0, <13.10 || <12.10.11 || >=13.0.0, <13.4.6 · fixed in 13.10, 12.10.11, 13.4.6
GHSA-ghcq-472w-vf4h · CVE-2022-24821 -
The Web Request API in Whale browser before 3.12.129.18 allowed to deny access to the extension store or redirect to any URL when users access the store.
- NAVER Whale browser
- CWE-648
-
A Built-in extension in Whale browser before 3.12.129.46 allows attackers to compromise the rendering process which could lead to controlling browser internal APIs.
- NAVER Whale browser
- CWE-648
- CVSS 8.1 High
Potential privilege escalation in Ops Manager API
- MongoDB Inc. MongoDB Ops Manager
- CWE-648