CWE-284 (2634) CWE-79 (1821) CWE-416 (1289) CWE-862 (1175) CWE-89 (1097) CWE-22 (1023) CWE-125 (880) CWE-200 (847) CWE-306 (837) CWE-122 (830) CWE-20 (795) CWE-78 (710) CWE-918 (689) CWE-787 (681) CWE-94 (641) CWE-863 (617) CWE-74 (600) CWE-639 (541) CWE-400 (530) CWE-269 (501) CWE-119 (494) CWE-502 (468) CWE-770 (440) CWE-287 (431) CWE-121 (406) CWE-77 (373) CWE-190 (367) CWE-362 (323) CWE-352 (276) CWE-285 (243)

CWE-648

6 CVEs View on MITRE →
CVE Severity CVSS EPSS Published Description Flags
CVE-2026-63727 high 8.7 0.0044 2026-07-28 Anchore Enterprise versions from 5.11.0 to 5.27.1 and 6.0.0 contain an improper privilege escalation
CVE-2026-41225 high 8.6 0.0027 2026-05-13 A vulnerability exists in iControl REST where a highly privileged, authenticated attacker with at le
CVE-2024-32008 high 8.5 0.0013 2025-11-11 A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The af
CVE-2026-54424 high 8.4 0.0019 2026-07-04 An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads to a potent
CVE-2026-11877 medium 6.3 0.0031 2026-06-24 An unauthorized user can modify configuration through API calls that affects the OpenText Access Man
CVE-2026-76460 — &mdash; 0.7560 &mdash; Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) contain an i KEV