Advisories · Weakness
CWE-656.
Every Advisory and CVE whose sources give the weakness CWE-656, newest first.
- CVSS 6.9 Medium
TYPO3-EXT-SA-2026-030: Captcha Bypass in extension "Accessible Form Captcha" (bw_captcha)
- CWE-656
- CWE-804
>=4.0.0, <5.4.2 · fixed in 5.4.2
PKSA-rwzb-f3sr-qs44 · CVE-2026-112067 - CVSS 9.3 CriticalCritical · CVSS 9+
GeoVision GV-IP Device Utility Device Authentication insufficient encryption vulnerability
- GeoVision Inc. GV-IP Device Utility
- CWE-656
- CVSS 9.3 CriticalCritical · CVSS 9+
GeoVision GV-IP Device Utility Device Authentication insufficient encryption vulnerability
- GeoVision Inc. GV-IP Device Utility
- CWE-656
- CVSS 8.5 High
Insecure Password Derivation Function for Database Administrator in dormakaba Kaba exos 9300
- dormakaba Kaba exos 9300
- CWE-656
- CVSS 5.1 Medium
BYD DiLink OS Incorrect encryption Implementation of system log dumps
- BYD DiLink OS
- CWE-656
- CVSS 3.4 Low
An issue in Macro-video Technologies Co.,Ltd V380 Pro android application 2.1.44 and V380 Pro android application 2.1.64 allows an attacker to obtain sensitive information via the QE code based shari…
- CWE-257
- CWE-656
- CVSS 9.2 CriticalCritical · CVSS 9+
Frontend Authorization Logic Disclosure Vulnerability
- Moxa EDS-508A Series
- Moxa PT-508 Series
- CWE-656
- CVSS 8.6 High
Privilege Escalation in Cellular Router, Secure Router, and Network Security Appliances
- Moxa EDR-810 Series
- Moxa EDR-8010 Series
- CWE-656
- CVSS 5.0 Medium
TP-Link Omada ER605 Reliance on Security Through Obscurity Vulnerability
- TP-Link Omada ER605
- CWE-656
- CVSS 9.4 CriticalCritical · CVSS 9+
RVD#3323: Mismanaged permission implementation leads to privilege escalation, exfiltration of sensitive information, and DoS
- uFactory xArm 5 Lite, xArm 6 and xArm 7
- CWE-656
- CVSS 9.1 CriticalCritical · CVSS 9+
RVD#3321: No Authentication required to exert manual control of the robot
- uFactory xArm5 Lite, xArm 6 and xArm 7
- CWE-656
- CVSS 6.4 Medium
RVD#2562: Booting from a live image leads to exfiltration of sensible information and privilege escalation
- Mobile Industrial Robots A/S MiR100
- CWE-656