CWE-328

CWE-328 · 3 records · 2 with a public proof-of-concept

Records the NVD classes under CWE-328, highest CVSS first.

  1. CRITICAL 9.8CVE-2026-51996public PoC2026-09-24

    An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the src/lib/utils.ts and the getServerUrlHash function

    AI risk analysis on Exploit-DB.ai →

  2. HIGH 7.1CVE-2026-65104public PoC2026-10-13

    NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used for inference requests. A successful exploit of this vulnerability might lead to data tampering and partial information …

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 4.3CVE-2026-974692026-09-25

    PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to repeatedly call the anon.hash() function and collects (seed, hash_output) pairs to perform an offline brute-force attack and deduce the salt. A masked role can run a RESTRI…

    AI risk analysis on Exploit-DB.ai →