Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CWE-648 (特权API的不正确使用) — Vulnerability Class 56

56 vulnerabilities classified as CWE-648 (特权API的不正确使用). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2026-41329 OpenClaw < 2026.3.31 - Sandbox Bypass via Heartbeat Context Inheritance and senderIsOwner Escalation — OpenClaw 9.9 Critical2026-04-20
CVE-2026-35669 OpenClaw < 2026.3.25 - Privilege Escalation via Gateway Plugin HTTP Authentication Scope — OpenClaw 8.8 High2026-04-10
CVE-2026-35663 OpenClaw < 2026.3.25 - Privilege Escalation via Backend Reconnect Scope Self-Claim — OpenClaw 8.8 High2026-04-10
CVE-2026-35645 OpenClaw < 2026.3.25 - Privilege Escalation via Synthetic operator.admin in deleteSession — OpenClaw 8.1 High2026-04-09
CVE-2026-35639 OpenClaw < 2026.3.22 - Privilege Escalation via device.pair.approve Scope Validation — OpenClaw 8.8 High2026-04-09
CVE-2026-35625 OpenClaw < 2026.3.25 - Privilege Escalation via Silent Local Shared-Auth Reconnect — OpenClaw 7.8 High2026-04-09
CVE-2026-20122 Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability — Cisco Catalyst SD-WAN Manager 5.4 Medium2026-02-25
CVE-2026-20126 Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability — Cisco Catalyst SD-WAN Manager 8.8 High2026-02-25
CVE-2026-22922 Apache Airflow: Airflow externalLogUrl Permission Bypass — Apache Airflow 4.3AIMediumAI2026-02-09
CVE-2025-1161 Improper Authorization in Nomysoft Informatics' Nomysem — Nomysem 7.1 High2025-12-10
CVE-2024-32008 Siemens Spectrum Power 安全漏洞 — Spectrum Power 4 7.8 High2025-11-11
CVE-2025-54768 KL-001-2025-015: Xorux LPAR2RRD Read Only User Log Download Exposing Sensitive Information — LPAR2RRD 4.3AIMediumAI2025-07-28
CVE-2025-54767 KL-001-2025-014: Xorux LPAR2RRD Read Only User Denial of Service — LPAR2RRD 6.5AIMediumAI2025-07-28
CVE-2025-54765 KL-001-2025-013: Xorux XorMon-NG Web Application Privilege Escalation to Administrator — XorMon-NG 8.8AIHighAI2025-07-28
CVE-2025-54766 KL-001-2025-012: Xorux XorMon-NG Read Only User Export Device Configuration Exposing Sensitive Information — XorMon-NG 6.5AIMediumAI2025-07-28
CVE-2025-5997 Privilege Escalation in Beamsec PhishPro — PhishPro 8.8 High2025-07-28
CVE-2025-7344 Digiwin｜EAI - Privilege Escalation — EAI 8.8 High2025-07-21
CVE-2025-23375 Dell PowerProtect Data Manager Reporting 安全漏洞 — PowerProtect Data Manager 7.8 High2025-04-28
CVE-2022-26323 Incorrect Use of Privileged vulnerability has been discovered on OpenText™ UCMDB and Operation Bridge Manager product. — Operations Bridge Manager 8.8AIHighAI2025-04-17
CVE-2025-2311 Authentication Bypass in Sechard Information Technologies' SecHard — SecHard 9.0 Critical2025-03-20
CVE-2024-53007 Bentley Systems ProjectWise Integration Server 安全漏洞 — ProjectWise Integration Server 6.4 Medium2025-01-31
CVE-2024-8785 WhatsUp Gold Registry Overwrite Remote Code Execution Vulnerability — WhatsUp Gold 9.8 Critical2024-12-02
CVE-2024-11068 D-Link DSL6740C - Incorrect Use of Privileged APIs — DSL6740C 9.8 Critical2024-11-11
CVE-2024-46978 Missing checks for notification filter preferences editions in XWiki Platform — xwiki-platform 6.5 Medium2024-09-18
CVE-2023-6522 Information Disclosure in ExtremePacs's Extreme XDS — Extreme XDS 7.2 High2024-04-05
CVE-2023-4993 Sensetive Data Exposure in Utarit's Soliclub — SoliPay Mobile App 7.5 High2024-02-15
CVE-2024-22042 Siemens Unicam FX 安全漏洞 — Unicam FX 7.8 High2024-02-13
CVE-2023-6151 Information Disclosure in Eskom E-municipality — e-municipality module 7.5 High2023-11-28
CVE-2023-6150 Information Disclosure in Eskom E-municipality — e-municipality module 7.5 High2023-11-28
CVE-2023-4972 Information Disclosure in Digital Yepas — Digital Yepas 9.8 Critical2023-09-14

Vulnerabilities classified as CWE-648 (特权API的不正确使用) represent 56 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.