CWE-454

4 CVEs classified under CWE-454. Browse by severity and year.

Top CVEs for CWE-454
CVESeverityScorePublishedSummary
CVE-2026-26148High8.12026-03-10External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally.
CVE-2025-36244High7.42025-09-16IBM AIX 7.2, 7.3, IBM VIOS 3.1, and 4.1, when configured to use Kerberos network authentication, could allow a local user to write to files on the system with…
CVE-2026-48980Medium6.32026-06-18pam_usb provides hardware authentication for Linux using removable media. In versions prior to 0.9.2, getenv() environment variables XRDP_SESSION, DISPLAY and…
CVE-2026-540032026-07-09Kirby is an open-source content management system. Prior to 4.9.4 and from 5.4.4, Kirby sites with no configured user accounts that run on publicly accessible…
All CVEs classified under CWE-454 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-540032026-07-09Kirby is an open-source content management system. Prior to 4.9.4 and from 5.4.4, Kirby sites with no configured user accounts that run on publicly accessible…
CVE-2026-48980Medium6.32026-06-18pam_usb provides hardware authentication for Linux using removable media. In versions prior to 0.9.2, getenv() environment variables XRDP_SESSION, DISPLAY and…
CVE-2026-26148High8.12026-03-10External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally.
CVE-2025-36244High7.42025-09-16IBM AIX 7.2, 7.3, IBM VIOS 3.1, and 4.1, when configured to use Kerberos network authentication, could allow a local user to write to files on the system with…