CWE-757

CWE-757 · 7 records · 5 with a public proof-of-concept

Records the NVD classes under CWE-757, highest CVSS first.

  1. MEDIUM 5.3CVE-2026-205782026-11-02

    In Modem, there is a possible information disclosure due to side channel information disclosure. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges need…

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 5.3CVE-2026-110310public PoC2026-10-14

    A remote user who can read encrypted objects in the S3 bucket can force a padding downgrade by altering the padding scheme recorded in an object's metadata to legacy PKCS#1 v1.5. Since this padding scheme is susceptible to the well-known Bleichenbacher attack,…

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 5.3CVE-2026-109952public PoC2026-10-13

    The FreeRDP client 3.0.0 before 3.32.0 does not check a server-selected PROTOCOL_RDSTLS or PROTOCOL_HYBRID_EX against its enabled protocol set in nego_process_negotiation_response(), allowing a security protocol downgrade. A malicious server or man-in-the-midd…

    AI risk analysis on Exploit-DB.ai →

  4. LOW 3.7CVE-2026-123611public PoC2026-11-08

    rustls before 0.23.46 contains a key exchange downgrade vulnerability that allows network attackers to poison the per-server-name key-exchange group record via an unauthenticated ServerHello. Attackers can answer one connection with a ServerHello selecting X25…

    AI risk analysis on Exploit-DB.ai →

  5. UNSCOREDCVE-2026-107279public PoC2026-10-07

    The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. In 3.0.12, a peer offering only Digest qop=auth-int causes mutual-authentication verification to be skipped. AuthenticatorUtil…

    AI risk analysis on Exploit-DB.ai →

  6. UNSCOREDCVE-2026-107231public PoC2026-10-07

    The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.13 and 2.16.1, Realm.Builder treats a Digest challenge that yields no usable nonce as a Basic challenge. A malici…

    AI risk analysis on Exploit-DB.ai →

  7. UNSCOREDCVE-2026-1025082026-09-30

    Improper Verification of Cryptographic Signature and Improper Certificate Validation in the OPC UA driver of Apache PLC4X (PLC4J) allows an attacker in a network position between client and server to impersonate the OPC UA server and to read, forge or modify s…

    AI risk analysis on Exploit-DB.ai →