CWE-544
CVEs classified under CWE-544, newest first.
2 CVEsRSS
CVE-2026-20321Medium· 6.5A vulnerability in the web-based management API for Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to execute arbitrary commands as the root user
A vulnerability in the web-based management API for Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to execute arbitrary commands as the root user. To exploit this vulnerability, th…
▾ SunlitCisco · Cisco Application Policy Infrastructure Controller (APIC)EPSS 0.43%via NVD
CVE-2025-11750Medium· 5.3PoCIn langgenius/dify-web version 1.6.0, the authentication mechanism reveals the existence of user accounts by returning different error messages for non-existent and existing accounts
In langgenius/dify-web version 1.6.0, the authentication mechanism reveals the existence of user accounts by returning different error messages for non-existent and existing accounts. Specifically, when a login or registration attempt is…
▾ Twilightlanggenius · difyEPSS 0.70%via NVD