CWE-300

CWE-300 · 3 records · 2 with a public proof-of-concept

Records the NVD classes under CWE-300, highest CVSS first.

  1. HIGH 7.4CVE-2026-116789public PoC2026-11-05

    FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, dtls_state_setup() compared a peer certificate with the SDP …

    AI risk analysis on Exploit-DB.ai →

  2. HIGH 7.1CVE-2026-767152026-09-22

    A vulnerability in an administrative component of Analytics and Location Engine (ALE) is vulnerable to a man-in-the-middle (MitM) attack. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary code wit…

    analytics and location engine

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 5.6CVE-2026-97866public PoC2026-09-25

    A weakness has been identified in Zhonglun CloudPOS 3.0. Affected by this vulnerability is an unknown functionality of the file Program.cs of the component Automatic Update. Executing a manipulation of the argument version/url/packagekey/package name can lead …

    AI risk analysis on Exploit-DB.ai →