CWE-441
Unintended Proxy or Intermediary ('Confused Deputy')
The product receives a request, message, or directive from an upstream component, but the product does not sufficiently preserve the original source of the request before forwarding the request to an external actor that is outside of the product's control sphere. This causes the product to appear to be the source of the request, leading it to act as a proxy or other intermediary between the upstream component and the external actor.
80 vulnerabilities with CWE-441
CVE-2026-7381
ANALYSIS PENDING
Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting
CVE-2026-41365
MEDIUM
OpenClaw < 2026.3.31 - Sender Allowlist Bypass via Graph API Thread History
CVSS 5.4
CVE-2026-6993
MEDIUM
go-kratos http.DefaultServeMux Fallback server.go NewServer confused deputy
CVSS 5.3
CVE-2026-42043
HIGH
Axios <1.15.1, <0.31.1 - Auth Bypass
CVSS 7.2
CVE-2026-23751
CRITICAL
Kofax Capture 6.0.0.0 Unauthenticated File Read/Write & SMB Coercion via .NET Remoting
CVSS 9.8
CVE-2026-39906
HIGH
Unisys WebPerfect Image Suite 3.0 NTLMv2 Hash Leakage via .NET Remoting
CVE-2026-39961
MEDIUM
Aiven Operator has cross-namespace secret exfiltration via ClickhouseUser connInfoSecretSource
CVSS 6.8
CVE-2026-27124
MEDIUM
FastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy Vulnerabilities
CVSS 6.1
CVE-2026-33768
MEDIUM
Astro: Unauthenticated Path Override via `x-astro-path` / `x_astro_path`
CVSS 6.5
CVE-2026-0107
HIGH
gmc_ddr_handle_mba_mr_req - Privilege Escalation
CVSS 8.4
CVE-2026-30225
MEDIUM
OliveTin <3000.11.1 - Privilege Escalation
CVSS 5.3
CVE-2026-0021
HIGH
AppInfoBase.java - Privilege Escalation
CVSS 8.4
CVE-2026-0013
HIGH
DocumentsUI - Privilege Escalation
CVSS 8.4
CVE-2026-0008
HIGH
Android - Privilege Escalation
CVSS 8.4
CVE-2026-27624
HIGH
Coturn - Auth Bypass
CVSS 7.2
CVE-2026-24471
CRITICAL
continuity - SSRF
CVE-2026-24470
HIGH
Skipper <0.24.0 - Privilege Escalation
CVSS 8.1
CVE-2025-62718
CRITICAL
Axios has a NO_PROXY Hostname Normalization Bypass Leads to SSRF
CVSS 9.9
CVE-2025-48646
HIGH
ActivityStarter.java - Privilege Escalation
CVSS 7.8
CVE-2025-48579
HIGH
MediaProvider.java - Privilege Escalation
CVSS 8.4
CVE-2025-64125
CRITICAL
Nuvation Energy nCloud VPN Service - Info Disclosure
CVE-2025-64123
CRITICAL
Nuvation Energy MSC <2.5.1 - SSRF
CVSS 9.8
CVE-2025-68944
MEDIUM
Gitea <1.22.2 - Info Disclosure
CVSS 5.0
CVE-2025-68667
CRITICAL
Conduit <0.10.10 - SSRF
CVE-2025-11393
HIGH
Runtimes-Inventory-Rhel8-Operator - Privilege Escalation
CVSS 8.7
Details
Vulnerabilities
80