CWE-331

CWE-331 · 3 records · 1 with a public proof-of-concept

Records the NVD classes under CWE-331, highest CVSS first.

  1. HIGH 7.8CVE-2026-922092026-10-21

    NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code …

    AI risk analysis on Exploit-DB.ai →

  2. HIGH 7.5CVE-2026-198772026-11-06

    INFINITT ULite 5.0.2.1_BN48_20260528 and earlier protects image-share links with a low-entropy password and does not restrict repeated password attempts, allowing an unauthenticated remote attacker to brute-force the password within the link validity window an…

    AI risk analysis on Exploit-DB.ai →

  3. LOW 3.7CVE-2026-112041public PoC2026-10-19

    A vulnerability was identified in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This vulnerability affects the function dmString::random of the file dmCorePlugin/lib/basic/dmString.php. Such manipulation leads to cryptographically weak prng…

    AI risk analysis on Exploit-DB.ai →