CWE-358

CWE-358 · 8 records · 4 with a public proof-of-concept

Records the NVD classes under CWE-358, highest CVSS first.

  1. CRITICAL 9.8CVE-2026-96760public PoC2026-09-28

    Authlib (v1.7.2 and below) contains a signature verification bypass vulnerability. The JsonWebSignature.deserialize_json() method accepts a JSON Serialization JWS object and returns the payload as successfully verified without checking for a signature and with…

    AI risk analysis on Exploit-DB.ai →

  2. HIGH 8.8CVE-2026-701742026-10-13

    Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 6.8CVE-2026-123542public PoC2026-11-08

    OpenAM before 16.1.4 fails to enforce PKCE in the OAuth 2.0 device authorization flow, never validating the code verifier when device codes are exchanged for tokens. Attackers who obtain an approved device code from client logs or shared device storage can red…

    AI risk analysis on Exploit-DB.ai →

  4. MEDIUM 6.5CVE-2026-963032026-10-13

    Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network.

    powershell

    AI risk analysis on Exploit-DB.ai →

  5. MEDIUM 6.5CVE-2026-858052026-10-13

    Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.

    windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

    AI risk analysis on Exploit-DB.ai →

  6. MEDIUM 4.8CVE-2026-123600public PoC2026-11-08

    Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 and hickory-net 0.26.0-alpha.1 before 0.26.2 contain a DNSSEC validation flaw in DnssecDnsHandle that accepts NSEC3-signed NODATA responses for zone-apex queries as secure without an NSEC3 record matching…

    AI risk analysis on Exploit-DB.ai →

  7. MEDIUM 4.2CVE-2026-1081782026-11-07

    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a token to be accepted that should be rejected due to an improperly implemented security check. Under certain conditions, token validation is incomplete, so a token may be acc…

    AI risk analysis on Exploit-DB.ai →

  8. LOW 3.7CVE-2026-123579public PoC2026-11-08

    DNSSEC validation in Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto through 0.26.0-alpha.1 does not distinguish NODATA responses from wildcard-expanded positive responses. For a query that should return NODATA in a zone with wildcard rec…

    AI risk analysis on Exploit-DB.ai →