CWE-940 (CWE-940) — 3 disclosed vulnerabilities

Records the NVD classes under CWE-940, highest CVSS first.

HIGH 7.2CVE-2026-102117public PoC2026-09-30
On deployments where the remote-support capability is licensed and enabled, an authenticated System Administrator who also possessed the key protecting the submitted data could redirect the underlying system's outbound support connection to a destination of th…
AI risk analysis on Exploit-DB.ai →
UNSCOREDCVE-2026-597862026-10-05
Zabbix Server and Proxy accept the active agent heartbeat message regardless of the configured PSK or certificate authentication. This means someone with access to the Zabbix trapper port can report an arbitrary host using an active agent as available, resulti…
AI risk analysis on Exploit-DB.ai →
UNSCOREDCVE-2026-1025112026-09-30
Improper Verification of Source of a Communication Channel in the ADS discovery of the Go implementation of Apache PLC4X (PLC4Go) allows an attacker able to send UDP datagrams to the discovering host to redirect subsequent connections to an arbitrary, attacker…
AI risk analysis on Exploit-DB.ai →