Weakness Types (CWE) | 9mmPterodactyl

CWE-284 (2634) CWE-79 (1821) CWE-416 (1289) CWE-862 (1175) CWE-89 (1097) CWE-22 (1023) CWE-125 (880) CWE-200 (847) CWE-306 (838) CWE-122 (830) CWE-20 (795) CWE-78 (710) CWE-918 (689) CWE-787 (681) CWE-94 (641) CWE-863 (617) CWE-74 (600) CWE-639 (541) CWE-400 (530) CWE-269 (501) CWE-119 (494) CWE-502 (470) CWE-770 (440) CWE-287 (431) CWE-121 (406) CWE-77 (373) CWE-190 (367) CWE-362 (323) CWE-352 (276) CWE-285 (243)

CWE-1385

10 CVEs View on MITRE →

CVE	Severity	CVSS	EPSS	Published	Description	Flags
`CVE-2026-10054`	high	8.8	0.0022	2026-07-03	In affected versions of Eclipse Theia (1.8.1 and later), the browser backend exposes privileged term
`CVE-2026-112085`	high	8.2	0.0015	2026-10-22	webpack-dev-server is a development server that provides live reloading for webpack projects. In ver
`CVE-2026-59804`	high	7.6	0.0031	2026-07-08	Midscene Bridge Server through 1.10.3, fixed in commit 86f4118, contains a missing authentication an
`CVE-2026-59950`	high	7.6	0.0023	2026-07-15	The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MC
`CVE-2026-57111`	high	7.5	0.0035	2026-07-09	Permissive Cross-Origin Resource Sharing (CORS) in the REST API (helix-rest, org.apache.helix.rest.s
`CVE-2025-54289`	high	7.4	0.0021	2025-10-02	Privilege Escalation in operations API in Canonical LXD <6.5 on multiple platforms allows attacker w
`CVE-2026-107858`	high	7.2	0.0036	2026-10-23	Missing Origin Validation in WebSockets (CWE-1385) and Permissive Cross-domain Policy with Untrusted
`CVE-2026-44514`	medium	6.5	0.0017	2026-05-14	Kubetail is a real-time logging dashboard for Kubernetes. Prior to 0.14.0, Kubetail's dashboard expo
`CVE-2026-55463`	medium	6.5	0.0014	2026-10-23	The Goobi viewer is a web application that allows digitised material to be displayed in a web browse
`CVE-2026-34403`	medium	5.5	0.0018	2026-04-20	Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.5, all WebSocket end