CWE-841

CWE-841 · 3 records · 3 with a public proof-of-concept

Records the NVD classes under CWE-841, highest CVSS first.

  1. MEDIUM 5.4CVE-2026-48974public PoC2026-09-21

    HomeBox is a home inventory and organization system. Prior to 0.26.0, POST /v1/groups/members invokes HandleGroupMemberAdd and GroupService.AddMember using a caller-supplied userID without requiring an owner role, an invitation token, target-user consent, or t…

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 5CVE-2026-65126public PoC2026-09-22

    NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper enforcement of a behavioral workflow. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclos…

    AI risk analysis on Exploit-DB.ai →

  3. UNSCOREDCVE-2026-82406public PoC2026-09-23

    Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the native marketplace function core/kapp/market/market.go Buy does not check IsClaimed before accepting a bid. A seller can use the Claim seller-accept branch to settle a r…

    AI risk analysis on Exploit-DB.ai →