CWE-454
4 CVEs classified under CWE-454. Browse by severity and year.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-26148 | High | 8.1 | 2026-03-10 | External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally. |
CVE-2025-36244 | High | 7.4 | 2025-09-16 | IBM AIX 7.2, 7.3, IBM VIOS 3.1, and 4.1, when configured to use Kerberos network authentication, could allow a local user to write to files on the system with… |
CVE-2026-48980 | Medium | 6.3 | 2026-06-18 | pam_usb provides hardware authentication for Linux using removable media. In versions prior to 0.9.2, getenv() environment variables XRDP_SESSION, DISPLAY and… |
CVE-2026-54003 | | 2026-07-09 | Kirby is an open-source content management system. Prior to 4.9.4 and from 5.4.4, Kirby sites with no configured user accounts that run on publicly accessible… |