CWE-749

Low likelihood

Exposed Dangerous Method or Function

Parent: CWE-284 - Improper Access Control

The product provides an Applications Programming Interface (API) or similar interface for interaction with external actors, but the interface includes a dangerous method or function that is not properly restricted.

178 vulnerabilities with CWE-749
CVE-2026-5173 HIGH
Exposed Dangerous Method or Function in GitLab
CVSS 8.5
CVE-2026-35488 HIGH
Tandoor Recipes — CustomIsShared permits DELETE/PUT on RecipeBook by shared (read-only) users
CVSS 8.1
CVE-2026-2275 CRITICAL
CrewAI 1.0 - RCE via CodeInterpreter Sandbox Fallback
CVSS 9.6
CVE-2026-3483 HIGH
Ivanti DSM <2026.1.1 - Privilege Escalation
CVSS 7.8
CVE-2026-30957 CRITICAL
OneUptime <10.0.21 - Command Injection
CVSS 9.9
CVE-2026-30921 CRITICAL
OneUptime < 10.0.20 - Synthetic Monitor Remote Code Execution
CVSS 9.9
CVE-2026-30797 HIGH
RustDesk Client <=1.4.5 - Auth Bypass
CVSS 8.1
CVE-2026-20423 HIGH
wlan STA driver - Privilege Escalation
CVSS 7.8
CVE-2026-28400 HIGH
Docker Model Runner <1.0.16 - Command Injection
CVSS 7.5
CVE-2026-22208 CRITICAL
OpenS100 < 753cf29 - Remote Code Execution via Unrestricted Lua Standard Library Access
CVSS 9.6
CVE-2026-22812 HIGH
OpenCode <1.0.216 - Command Injection
CVSS 8.8
CVE-2025-53827 CRITICAL
ownCloud Core: Updater has an exposed dangerous method or function
CVSS 9.1
CVE-2025-14713 HIGH
Synology C2 Identity Edge Server < 1.76.0-0307 - Exposed Dangerous Method or Function
CVSS 7.5
CVE-2025-47366 HIGH
Qualcomm FastConnect and AR8035 Firmware - Cryptographic Issue in Trusted Zone
CVSS 7.1
CVE-2025-9611 HIGH
Microsoft Playwright MCP Server <0.0.40 - SSRF
CVE-2025-68697 HIGH
n8n < 2.0.0 - Authenticated Arbitrary File Read and Write via Code Node Helper Functions
CVSS 7.1
CVE-2025-14497 HIGH
RealDefense SUPERAntiSpyware - Privilege Escalation
CVSS 7.8
CVE-2025-14496 HIGH
RealDefense SUPERAntiSpyware - Privilege Escalation
CVSS 7.8
CVE-2025-14495 HIGH
RealDefense SUPERAntiSpyware - Privilege Escalation
CVSS 7.8
CVE-2025-14494 HIGH
RealDefense SUPERAntiSpyware - Privilege Escalation
CVSS 7.8
CVE-2025-14493 HIGH
RealDefense SUPERAntiSpyware - Privilege Escalation
CVSS 7.8
CVE-2025-14492 HIGH
RealDefense SUPERAntiSpyware - Privilege Escalation
CVSS 7.8
CVE-2025-14491 HIGH
RealDefense SUPERAntiSpyware - Privilege Escalation
CVSS 7.8
CVE-2025-14490 HIGH
RealDefense SUPERAntiSpyware - Privilege Escalation
CVSS 7.8
CVE-2025-14489 HIGH
RealDefense SUPERAntiSpyware - Privilege Escalation
CVSS 7.8
Details
Vulnerabilities 178
Exploit Likelihood Low
Links
MITRE CWE Entry Search this CWE With Exploits